# Flog Txt Version 1
# Analyzer Version: 4.4.1
# Analyzer Build Date: Jan 14 2022 06:06:11
# Log Creation Date: 21.03.2022 13:15:04.997

Process:
	id = "1"
	image_name = "99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe"
	filename = "c:\\users\\rdhj0cnfevzx\\desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe"
	page_root = "0x6ab00000"
	os_pid = "0x13a4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x4a0"
	cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe\" "
	cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f72e" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 124
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 125
	        start_va = 0x30000
	          end_va = 0x31fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 126
	        start_va = 0x40000
	          end_va = 0x54fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 127
	        start_va = 0x60000
	          end_va = 0x9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 128
	        start_va = 0xa0000
	          end_va = 0x19ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 129
	        start_va = 0x1a0000
	          end_va = 0x1a3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 130
	        start_va = 0x1b0000
	          end_va = 0x1b1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 131
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 132
	        start_va = 0x400000
	          end_va = 0x822fff
	       monitored = 1
	     entry_point = 0x40953b
	     region_type = mapped_file
	            name = "99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe"
	        filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe")

Region:
	              id = 133
	        start_va = 0x77720000
	          end_va = 0x7789afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 134
	        start_va = 0x7ffb0000
	          end_va = 0x7ffd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007ffb0000"
	        filename = ""

Region:
	              id = 135
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 136
	        start_va = 0x7fff0000
	          end_va = 0x7ff87ff9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 137
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 138
	        start_va = 0x7ff880161000
	          end_va = 0x7ffffffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff880161000"
	        filename = ""

Region:
	              id = 276
	        start_va = 0xa00000
	          end_va = 0xa0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a00000"
	        filename = ""

Region:
	              id = 277
	        start_va = 0x662d0000
	          end_va = 0x66349fff
	       monitored = 0
	     entry_point = 0x662e3290
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 278
	        start_va = 0x66350000
	          end_va = 0x6639ffff
	       monitored = 0
	     entry_point = 0x66368180
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 279
	        start_va = 0x75600000
	          end_va = 0x756dffff
	       monitored = 0
	     entry_point = 0x75613980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 280
	        start_va = 0x663a0000
	          end_va = 0x663a7fff
	       monitored = 0
	     entry_point = 0x663a17c0
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 281
	        start_va = 0x830000
	          end_va = 0x9fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000830000"
	        filename = ""

Region:
	              id = 282
	        start_va = 0x75600000
	          end_va = 0x756dffff
	       monitored = 0
	     entry_point = 0x75613980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 283
	        start_va = 0x75480000
	          end_va = 0x755fdfff
	       monitored = 0
	     entry_point = 0x75531b90
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 284
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 285
	        start_va = 0x7feb0000
	          end_va = 0x7ffaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007feb0000"
	        filename = ""

Region:
	              id = 286
	        start_va = 0x830000
	          end_va = 0x8edfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 287
	        start_va = 0x900000
	          end_va = 0x9fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000900000"
	        filename = ""

Region:
	              id = 373
	        start_va = 0x743a0000
	          end_va = 0x74431fff
	       monitored = 0
	     entry_point = 0x743e0380
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll")

Region:
	              id = 374
	        start_va = 0x7fb00000
	          end_va = 0x7fea0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sysmain.sdb"
	        filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb")

Region:
	              id = 375
	        start_va = 0x20000
	          end_va = 0x23fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 376
	        start_va = 0x77450000
	          end_va = 0x77596fff
	       monitored = 0
	     entry_point = 0x77461cf0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 377
	        start_va = 0x76b30000
	          end_va = 0x76c7efff
	       monitored = 0
	     entry_point = 0x76be6820
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 378
	        start_va = 0x1c0000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 379
	        start_va = 0xa10000
	          end_va = 0xb0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a10000"
	        filename = ""

Region:
	              id = 380
	        start_va = 0xb10000
	          end_va = 0xc97fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b10000"
	        filename = ""

Region:
	              id = 381
	        start_va = 0xca0000
	          end_va = 0xcc9fff
	       monitored = 0
	     entry_point = 0xca5680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 382
	        start_va = 0x74ea0000
	          end_va = 0x74ecafff
	       monitored = 0
	     entry_point = 0x74ea5680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 383
	        start_va = 0x30000
	          end_va = 0x30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 384
	        start_va = 0x8f0000
	          end_va = 0x8f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008f0000"
	        filename = ""

Region:
	              id = 385
	        start_va = 0xca0000
	          end_va = 0xe20fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ca0000"
	        filename = ""

Region:
	              id = 386
	        start_va = 0xe30000
	          end_va = 0x222ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000e30000"
	        filename = ""

Region:
	              id = 387
	        start_va = 0x706b0000
	          end_va = 0x70724fff
	       monitored = 0
	     entry_point = 0x706e9a60
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 388
	        start_va = 0x748c0000
	          end_va = 0x7497dfff
	       monitored = 0
	     entry_point = 0x748f5630
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 389
	        start_va = 0x77290000
	          end_va = 0x7744cfff
	       monitored = 0
	     entry_point = 0x77372a10
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll")

Region:
	              id = 390
	        start_va = 0x75260000
	          end_va = 0x7530cfff
	       monitored = 0
	     entry_point = 0x75274f00
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 391
	        start_va = 0x74450000
	          end_va = 0x7446dfff
	       monitored = 0
	     entry_point = 0x7445b640
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 392
	        start_va = 0x74440000
	          end_va = 0x74449fff
	       monitored = 0
	     entry_point = 0x74442a00
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 393
	        start_va = 0x74590000
	          end_va = 0x745e7fff
	       monitored = 0
	     entry_point = 0x745d25c0
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 394
	        start_va = 0x76ae0000
	          end_va = 0x76b23fff
	       monitored = 0
	     entry_point = 0x76af9d80
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 395
	        start_va = 0x2230000
	          end_va = 0x239ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002230000"
	        filename = ""

Region:
	              id = 396
	        start_va = 0x23a0000
	          end_va = 0x256ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023a0000"
	        filename = ""

Region:
	              id = 413
	        start_va = 0x2230000
	          end_va = 0x22c1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002230000"
	        filename = ""

Region:
	              id = 414
	        start_va = 0x2390000
	          end_va = 0x239ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002390000"
	        filename = ""

Region:
	              id = 416
	        start_va = 0x76e20000
	          end_va = 0x76e2bfff
	       monitored = 0
	     entry_point = 0x76e23930
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll")


Thread:
	id = 1
	os_tid = 0x13b4

	[0101.614] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0101.615] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x75480000
	[0101.616] GetProcAddress (hModule=0x75480000, lpProcName="InitializeCriticalSectionEx") returned 0x7553d740
	[0101.616] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x75480000
	[0101.616] GetProcAddress (hModule=0x75480000, lpProcName="FlsAlloc") returned 0x75544490
	[0101.616] GetProcAddress (hModule=0x75480000, lpProcName="FlsSetValue") returned 0x7553d7a0
	[0101.619] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x75480000
	[0101.619] GetProcAddress (hModule=0x75480000, lpProcName="InitializeCriticalSectionEx") returned 0x7553d740
	[0101.619] GetProcessHeap () returned 0x900000
	[0101.620] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x75480000
	[0101.620] GetProcAddress (hModule=0x75480000, lpProcName="FlsAlloc") returned 0x75544490
	[0101.620] GetLastError () returned 0xcb
	[0101.620] GetProcAddress (hModule=0x75480000, lpProcName="FlsGetValue") returned 0x7552f350
	[0101.620] GetProcAddress (hModule=0x75480000, lpProcName="FlsSetValue") returned 0x7553d7a0
	[0101.620] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x364) returned 0x90fd20
	[0101.621] SetLastError (dwErrCode=0xcb) 
	[0101.621] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xe00) returned 0x911f48
	[0102.252] GetStartupInfoW (in: lpStartupInfo=0x19fe9c | out: lpStartupInfo=0x19fe9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x40bcd0, hStdOutput=0xb77c3fe5, hStdError=0xfffffffe)) 
	[0102.252] GetStdHandle (nStdHandle=0xfffffff6) returned 0x38
	[0102.252] GetFileType (hFile=0x38) returned 0x2
	[0102.252] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c
	[0102.252] GetFileType (hFile=0x3c) returned 0x2
	[0102.252] GetStdHandle (nStdHandle=0xfffffff4) returned 0x40
	[0102.252] GetFileType (hFile=0x40) returned 0x2
	[0102.252] GetCommandLineA () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe\" "
	[0102.252] GetCommandLineW () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe\" "
	[0102.252] GetACP () returned 0x4e4
	[0102.252] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x220) returned 0x912d50
	[0102.252] IsValidCodePage (CodePage=0x4e4) returned 1
	[0102.252] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19febc | out: lpCPInfo=0x19febc) returned 1
	[0102.253] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f784 | out: lpCPInfo=0x19f784) returned 1
	[0102.253] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0102.253] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f528, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ蔨AĀ") returned 256
	[0102.253] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ蔨AĀ", cchSrc=256, lpCharType=0x19f798 | out: lpCharType=0x19f798) returned 1
	[0102.253] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0102.253] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0102.253] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x75480000
	[0102.253] GetProcAddress (hModule=0x75480000, lpProcName="LCMapStringEx") returned 0x755295f0
	[0102.253] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0102.254] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x19f2c8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0102.254] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x19fc98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ©1ä·Ôþ\x19", lpUsedDefaultChar=0x0) returned 256
	[0102.254] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0102.254] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ蘼AĀ") returned 256
	[0102.254] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ蘼AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0102.254] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ蘼AĀ", cchSrc=256, lpDestStr=0x19f2e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0102.254] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x19fb98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ©1ä·Ôþ\x19", lpUsedDefaultChar=0x0) returned 256
	[0102.254] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x80) returned 0x90df90
	[0102.255] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19fce0, nSize=0x105 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe")) returned 0x62
	[0102.255] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x75600000
	[0102.255] GetProcAddress (hModule=0x75600000, lpProcName="AreFileApisANSI") returned 0x7561f300
	[0102.255] AreFileApisANSI () returned 1
	[0102.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 99
	[0102.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe", cchWideChar=-1, lpMultiByteStr=0x821768, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\RDhJ0CNFevzX\\Desktop\\99b4df04fc5236a12bcf96a4c6ec797b2555189915050d7a0a1704f4f69ab770.exe", lpUsedDefaultChar=0x0) returned 99
	[0102.256] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x6b) returned 0x906bf0
	[0102.256] RtlInitializeSListHead (in: ListHead=0x821530 | out: ListHead=0x821530) 
	[0102.256] GetLastError () returned 0x0
	[0102.256] SetLastError (dwErrCode=0x0) 
	[0102.256] GetEnvironmentStringsW () returned 0x910090*
	[0102.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1293
	[0102.256] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x50d) returned 0x912f78
	[0102.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x912f78, cbMultiByte=1293, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1293
	[0102.256] FreeEnvironmentStringsW (penv=0x910090) returned 1
	[0102.256] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x90) returned 0x906b40
	[0102.256] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x1f) returned 0x90a9f8
	[0102.256] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x2e) returned 0x90f3d0
	[0102.256] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x37) returned 0x90f408
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x3c) returned 0x90f448
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x31) returned 0x90f490
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x14) returned 0x90a270
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x24) returned 0x90f4d0
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xd) returned 0x910ce0
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x1d) returned 0x90ac28
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x31) returned 0x90ea68
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x15) returned 0x90a2b0
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x17) returned 0x90a2d0
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xe) returned 0x910c20
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x69) returned 0x90eaa8
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x3e) returned 0x90eb20
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x1b) returned 0x90aae8
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x1d) returned 0x90acf0
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x48) returned 0x90eb68
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x12) returned 0x90a330
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x18) returned 0x90a350
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x1b) returned 0x90ad18
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x24) returned 0x90e2c8
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x29) returned 0x90e2f8
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x1e) returned 0x90aa98
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x6b) returned 0x90e330
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x17) returned 0x90a370
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xf) returned 0x910d10
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x16) returned 0x9100e0
	[0102.257] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x2a) returned 0x90e3a8
	[0102.258] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x29) returned 0x90e3e0
	[0102.258] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x12) returned 0x910100
	[0102.258] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x21) returned 0x90e418
	[0102.258] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x16) returned 0x910340
	[0102.258] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x22) returned 0x910898
	[0102.258] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x12) returned 0x910480
	[0102.258] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x912f78 | out: hHeap=0x900000) returned 1
	[0102.258] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x800) returned 0x912f78
	[0102.259] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0102.259] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x409ef1) returned 0x0
	[0102.260] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x8) returned 0x90f500
	[0102.260] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x75480000
	[0102.260] GetProcAddress (hModule=0x75480000, lpProcName="CompareStringEx") returned 0x75536140
	[0102.260] GetProcAddress (hModule=0x75480000, lpProcName="EnumSystemLocalesEx") returned 0x755479d0
	[0102.261] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x75480000
	[0102.261] GetProcAddress (hModule=0x75480000, lpProcName="GetDateFormatEx") returned 0x755934d0
	[0102.261] GetProcAddress (hModule=0x75480000, lpProcName="GetLocaleInfoEx") returned 0x75526610
	[0102.261] GetProcAddress (hModule=0x75480000, lpProcName="GetTimeFormatEx") returned 0x755937a0
	[0102.261] GetProcAddress (hModule=0x75480000, lpProcName="GetUserDefaultLocaleName") returned 0x7551cd10
	[0102.261] GetProcAddress (hModule=0x75480000, lpProcName="IsValidLocaleName") returned 0x75544bf0
	[0102.261] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x75480000
	[0102.261] GetProcAddress (hModule=0x75480000, lpProcName="LCIDToLocaleName") returned 0x75536fc0
	[0102.262] GetProcAddress (hModule=0x75480000, lpProcName="LocaleNameToLCID") returned 0x75537de0
	[0102.262] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x20) returned 0x90ac50
	[0102.262] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x2) returned 0x90dce0
	[0102.262] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x90dce0 | out: hHeap=0x900000) returned 1
	[0102.262] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x2) returned 0x90dce0
	[0102.262] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x8) returned 0x906420
	[0102.262] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x18) returned 0x910440
	[0102.262] GetLastError () returned 0x0
	[0102.262] SetLastError (dwErrCode=0x0) 
	[0102.262] GetLastError () returned 0x0
	[0102.263] SetLastError (dwErrCode=0x0) 
	[0102.263] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x9108c8
	[0102.263] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x913bc8
	[0102.263] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x913bc8 | out: hHeap=0x900000) returned 1
	[0102.264] GetLastError () returned 0x0
	[0102.264] SetLastError (dwErrCode=0x0) 
	[0102.264] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x910988
	[0102.264] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x2) returned 0x910998
	[0102.264] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x4) returned 0x9109a8
	[0102.264] GetLastError () returned 0x0
	[0102.264] SetLastError (dwErrCode=0x0) 
	[0102.264] GetLastError () returned 0x0
	[0102.264] SetLastError (dwErrCode=0x0) 
	[0102.264] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x9109b8
	[0102.264] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x913bc8
	[0102.265] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x913bc8 | out: hHeap=0x900000) returned 1
	[0102.265] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910988 | out: hHeap=0x900000) returned 1
	[0102.265] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9108c8 | out: hHeap=0x900000) returned 1
	[0102.265] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9109a8 | out: hHeap=0x900000) returned 1
	[0102.265] GetLastError () returned 0x0
	[0102.265] SetLastError (dwErrCode=0x0) 
	[0102.265] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x9109a8
	[0102.265] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x2) returned 0x910a78
	[0102.265] GetLastError () returned 0x0
	[0102.265] SetLastError (dwErrCode=0x0) 
	[0102.265] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x200) returned 0x913bc8
	[0102.265] GetLastError () returned 0x0
	[0102.265] SetLastError (dwErrCode=0x0) 
	[0102.265] GetLastError () returned 0x0
	[0102.265] SetLastError (dwErrCode=0x0) 
	[0102.265] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x4) returned 0x910a88
	[0102.265] GetLastError () returned 0x0
	[0102.265] SetLastError (dwErrCode=0x0) 
	[0102.266] GetLastError () returned 0x0
	[0102.266] SetLastError (dwErrCode=0x0) 
	[0102.266] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x9108c8
	[0102.266] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x913dd0
	[0102.266] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x913dd0 | out: hHeap=0x900000) returned 1
	[0102.266] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9109a8 | out: hHeap=0x900000) returned 1
	[0102.266] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9109b8 | out: hHeap=0x900000) returned 1
	[0102.266] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910a88 | out: hHeap=0x900000) returned 1
	[0102.266] GetLastError () returned 0x0
	[0102.267] SetLastError (dwErrCode=0x0) 
	[0102.267] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x910988
	[0102.267] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910a78 | out: hHeap=0x900000) returned 1
	[0102.267] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910998 | out: hHeap=0x900000) returned 1
	[0102.267] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x8) returned 0x910998
	[0102.267] GetLastError () returned 0x0
	[0102.267] SetLastError (dwErrCode=0x0) 
	[0102.267] GetLastError () returned 0x0
	[0102.267] SetLastError (dwErrCode=0x0) 
	[0102.267] GetLastError () returned 0x0
	[0102.267] SetLastError (dwErrCode=0x0) 
	[0102.267] GetLastError () returned 0x0
	[0102.267] SetLastError (dwErrCode=0x0) 
	[0102.267] GetLastError () returned 0x0
	[0102.267] SetLastError (dwErrCode=0x0) 
	[0107.062] GetLastError () returned 0x57
	[0107.062] GetSystemMetrics (nIndex=4338766) returned 0
	[0107.062] GetSysColorBrush (nIndex=8773643) returned 0x0
	[0107.062] GetSystemMetrics (nIndex=9768646) returned 0
	[0107.062] GetCurrentThreadId () returned 0x13b4
	[0107.062] GetSystemMetrics (nIndex=3553244) returned 0
	[0107.062] GetSysColorBrush (nIndex=7235624) returned 0x0
	[0107.062] GetSystemMetrics (nIndex=6722867) returned 0
	[0107.062] GetCurrentThreadId () returned 0x13b4
	[0107.063] GetSystemMetrics (nIndex=3483767) returned 0
	[0107.063] GetSysColorBrush (nIndex=2669634) returned 0x0
	[0107.063] GetSystemMetrics (nIndex=2644257) returned 0
	[0107.063] GetLastError () returned 0x57
	[0107.063] GetSystemMetrics (nIndex=3594387) returned 0
	[0107.063] GetSysColorBrush (nIndex=7538628) returned 0x0
	[0107.063] GetSystemMetrics (nIndex=5597225) returned 0
	[0107.063] GetCurrentProcessId () returned 0x13a4
	[0107.063] GetSystemMetrics (nIndex=4448276) returned 0
	[0107.063] GetSysColorBrush (nIndex=9756926) returned 0x0
	[0107.063] GetSystemMetrics (nIndex=5963794) returned 0
	[0107.065] GetConsoleWindow () returned 0x3036c
	[0107.066] GetSystemMetrics (nIndex=4469532) returned 0
	[0107.066] GetSysColorBrush (nIndex=8274492) returned 0x0
	[0107.067] GetSystemMetrics (nIndex=2427885) returned 0
	[0107.067] GetCurrentThreadId () returned 0x13b4
	[0107.067] GetSystemMetrics (nIndex=3627649) returned 0
	[0107.067] GetSysColorBrush (nIndex=2453823) returned 0x0
	[0107.067] GetSystemMetrics (nIndex=2526592) returned 0
	[0107.067] GetCurrentProcessId () returned 0x13a4
	[0107.067] GetSystemMetrics (nIndex=9293676) returned 0
	[0107.067] GetSysColorBrush (nIndex=6465257) returned 0x0
	[0107.067] GetSystemMetrics (nIndex=6292556) returned 0
	[0107.067] GetCurrentProcessId () returned 0x13a4
	[0107.067] GetSystemMetrics (nIndex=4785696) returned 0
	[0107.067] GetSysColorBrush (nIndex=4576429) returned 0x0
	[0107.067] GetSystemMetrics (nIndex=8672467) returned 0
	[0107.067] GetCurrentProcessId () returned 0x13a4
	[0107.067] GetSystemMetrics (nIndex=7395436) returned 0
	[0107.067] GetSysColorBrush (nIndex=6263953) returned 0x0
	[0107.067] GetSystemMetrics (nIndex=7239886) returned 0
	[0107.067] GetLastError () returned 0x57
	[0107.067] GetSystemMetrics (nIndex=8622786) returned 0
	[0107.067] GetSysColorBrush (nIndex=5259269) returned 0x0
	[0107.067] GetSystemMetrics (nIndex=5953475) returned 0
	[0107.067] GetConsoleWindow () returned 0x3036c
	[0107.068] GetSystemMetrics (nIndex=2535596) returned 0
	[0107.068] GetSysColorBrush (nIndex=3365786) returned 0x0
	[0107.068] GetSystemMetrics (nIndex=5398722) returned 0
	[0107.068] GetConsoleWindow () returned 0x3036c
	[0107.068] GetSystemMetrics (nIndex=4554749) returned 0
	[0107.068] GetSysColorBrush (nIndex=6449992) returned 0x0
	[0107.068] GetSystemMetrics (nIndex=4849757) returned 0
	[0107.068] GetLastError () returned 0x57
	[0107.068] GetSystemMetrics (nIndex=2837397) returned 0
	[0107.068] GetSysColorBrush (nIndex=8977897) returned 0x0
	[0107.068] GetSystemMetrics (nIndex=6458437) returned 0
	[0107.068] GetLastError () returned 0x57
	[0107.068] GetSystemMetrics (nIndex=6648666) returned 0
	[0107.069] GetSysColorBrush (nIndex=7623273) returned 0x0
	[0107.069] GetSystemMetrics (nIndex=4738355) returned 0
	[0107.069] GetLastError () returned 0x57
	[0107.069] GetSystemMetrics (nIndex=5222943) returned 0
	[0107.069] GetSysColorBrush (nIndex=2589489) returned 0x0
	[0107.069] GetSystemMetrics (nIndex=4376278) returned 0
	[0107.069] GetCurrentThreadId () returned 0x13b4
	[0107.069] GetSystemMetrics (nIndex=4642286) returned 0
	[0107.069] GetSysColorBrush (nIndex=7276667) returned 0x0
	[0107.069] GetSystemMetrics (nIndex=5945582) returned 0
	[0107.069] GetConsoleWindow () returned 0x3036c
	[0107.069] GetSystemMetrics (nIndex=6853286) returned 0
	[0107.069] GetSysColorBrush (nIndex=4999298) returned 0x0
	[0107.069] GetSystemMetrics (nIndex=4976892) returned 0
	[0107.069] GetCurrentThreadId () returned 0x13b4
	[0107.069] GetSystemMetrics (nIndex=6877233) returned 0
	[0107.069] GetSysColorBrush (nIndex=9346727) returned 0x0
	[0107.069] GetSystemMetrics (nIndex=7284435) returned 0
	[0107.069] GetCurrentProcessId () returned 0x13a4
	[0107.070] GetSystemMetrics (nIndex=5645237) returned 0
	[0107.070] GetSysColorBrush (nIndex=4472574) returned 0x0
	[0107.070] GetSystemMetrics (nIndex=8484836) returned 0
	[0107.070] GetCurrentThreadId () returned 0x13b4
	[0107.070] GetSystemMetrics (nIndex=6794562) returned 0
	[0107.070] GetSysColorBrush (nIndex=3925338) returned 0x0
	[0107.070] GetSystemMetrics (nIndex=7267429) returned 0
	[0107.070] GetLastError () returned 0x57
	[0107.070] GetSystemMetrics (nIndex=9853686) returned 0
	[0107.070] GetSysColorBrush (nIndex=9796626) returned 0x0
	[0107.070] GetSystemMetrics (nIndex=2757954) returned 0
	[0107.070] GetCurrentThreadId () returned 0x13b4
	[0107.070] GetSystemMetrics (nIndex=6676463) returned 0
	[0107.070] GetSysColorBrush (nIndex=3962825) returned 0x0
	[0107.070] GetSystemMetrics (nIndex=3368386) returned 0
	[0107.070] GetLastError () returned 0x57
	[0107.070] GetSystemMetrics (nIndex=8669832) returned 0
	[0107.070] GetSysColorBrush (nIndex=4787362) returned 0x0
	[0107.070] GetSystemMetrics (nIndex=4462962) returned 0
	[0107.070] GetCurrentThreadId () returned 0x13b4
	[0107.070] GetSystemMetrics (nIndex=4488343) returned 0
	[0107.070] GetSysColorBrush (nIndex=4662694) returned 0x0
	[0107.070] GetSystemMetrics (nIndex=6342592) returned 0
	[0107.070] GetConsoleWindow () returned 0x3036c
	[0107.070] GetSystemMetrics (nIndex=4829553) returned 0
	[0107.070] GetSysColorBrush (nIndex=5994829) returned 0x0
	[0107.070] GetSystemMetrics (nIndex=4365227) returned 0
	[0107.070] GetConsoleWindow () returned 0x3036c
	[0107.071] GetSystemMetrics (nIndex=3947238) returned 0
	[0107.071] GetSysColorBrush (nIndex=2779583) returned 0x0
	[0107.071] GetSystemMetrics (nIndex=7832546) returned 0
	[0107.071] GetConsoleWindow () returned 0x3036c
	[0107.071] GetSystemMetrics (nIndex=8496432) returned 0
	[0107.071] GetSysColorBrush (nIndex=4472775) returned 0x0
	[0107.071] GetSystemMetrics (nIndex=7495994) returned 0
	[0107.071] GetLastError () returned 0x57
	[0107.071] GetSystemMetrics (nIndex=5394648) returned 0
	[0107.071] GetSysColorBrush (nIndex=7682636) returned 0x0
	[0107.071] GetSystemMetrics (nIndex=3733979) returned 0
	[0107.071] GetLastError () returned 0x57
	[0107.071] GetSystemMetrics (nIndex=5754322) returned 0
	[0107.071] GetSysColorBrush (nIndex=9924965) returned 0x0
	[0107.071] GetSystemMetrics (nIndex=8892722) returned 0
	[0107.071] GetCurrentThreadId () returned 0x13b4
	[0107.071] GetSystemMetrics (nIndex=2239922) returned 0
	[0107.071] GetSysColorBrush (nIndex=4382847) returned 0x0
	[0107.072] GetSystemMetrics (nIndex=9682595) returned 0
	[0107.072] GetLastError () returned 0x57
	[0107.072] GetSystemMetrics (nIndex=7279658) returned 0
	[0107.072] GetSysColorBrush (nIndex=6522995) returned 0x0
	[0107.072] GetSystemMetrics (nIndex=3569959) returned 0
	[0107.072] GetConsoleWindow () returned 0x3036c
	[0107.072] GetSystemMetrics (nIndex=8726358) returned 0
	[0107.072] GetSysColorBrush (nIndex=7883422) returned 0x0
	[0107.072] GetSystemMetrics (nIndex=2895566) returned 0
	[0107.072] GetConsoleWindow () returned 0x3036c
	[0107.072] GetSystemMetrics (nIndex=6232975) returned 0
	[0107.072] GetSysColorBrush (nIndex=8673626) returned 0x0
	[0107.072] GetSystemMetrics (nIndex=2598379) returned 0
	[0107.072] GetConsoleWindow () returned 0x3036c
	[0107.073] GetSystemMetrics (nIndex=4526437) returned 0
	[0107.073] GetSysColorBrush (nIndex=7353439) returned 0x0
	[0107.073] GetSystemMetrics (nIndex=3927748) returned 0
	[0107.073] GetConsoleWindow () returned 0x3036c
	[0107.073] GetSystemMetrics (nIndex=6989759) returned 0
	[0107.073] GetSysColorBrush (nIndex=2955278) returned 0x0
	[0107.073] GetSystemMetrics (nIndex=9586426) returned 0
	[0107.073] GetCurrentThreadId () returned 0x13b4
	[0107.073] GetSystemMetrics (nIndex=2889528) returned 0
	[0107.073] GetSysColorBrush (nIndex=4275795) returned 0x0
	[0107.073] GetSystemMetrics (nIndex=6852425) returned 0
	[0107.073] GetCurrentThreadId () returned 0x13b4
	[0107.073] GetSystemMetrics (nIndex=9873985) returned 0
	[0107.073] GetSysColorBrush (nIndex=4873584) returned 0x0
	[0107.073] GetSystemMetrics (nIndex=5585567) returned 0
	[0107.073] GetCurrentProcessId () returned 0x13a4
	[0107.073] GetSystemMetrics (nIndex=7579778) returned 0
	[0107.073] GetSysColorBrush (nIndex=8763886) returned 0x0
	[0107.073] GetSystemMetrics (nIndex=7449632) returned 0
	[0107.073] GetConsoleWindow () returned 0x3036c
	[0107.074] GetSystemMetrics (nIndex=6447668) returned 0
	[0107.074] GetSysColorBrush (nIndex=8252343) returned 0x0
	[0107.074] GetSystemMetrics (nIndex=7947385) returned 0
	[0107.074] GetCurrentThreadId () returned 0x13b4
	[0107.074] GetSystemMetrics (nIndex=9568427) returned 0
	[0107.074] GetSysColorBrush (nIndex=7872298) returned 0x0
	[0107.074] GetSystemMetrics (nIndex=4234553) returned 0
	[0107.074] GetConsoleWindow () returned 0x3036c
	[0107.074] GetSystemMetrics (nIndex=8735457) returned 0
	[0107.074] GetSysColorBrush (nIndex=6596966) returned 0x0
	[0107.074] GetSystemMetrics (nIndex=2925827) returned 0
	[0107.074] GetCurrentThreadId () returned 0x13b4
	[0107.074] GetSystemMetrics (nIndex=6832229) returned 0
	[0107.074] GetSysColorBrush (nIndex=5963246) returned 0x0
	[0107.074] GetSystemMetrics (nIndex=8423464) returned 0
	[0107.074] GetLastError () returned 0x57
	[0107.074] GetSystemMetrics (nIndex=3837628) returned 0
	[0107.074] GetSysColorBrush (nIndex=9539395) returned 0x0
	[0107.074] GetSystemMetrics (nIndex=7242984) returned 0
	[0107.074] GetLastError () returned 0x57
	[0107.074] GetSystemMetrics (nIndex=5685926) returned 0
	[0107.074] GetSysColorBrush (nIndex=5656959) returned 0x0
	[0107.074] GetSystemMetrics (nIndex=8698239) returned 0
	[0107.074] GetConsoleWindow () returned 0x3036c
	[0107.075] GetSystemMetrics (nIndex=2346663) returned 0
	[0107.076] GetSysColorBrush (nIndex=6826367) returned 0x0
	[0107.076] GetSystemMetrics (nIndex=7557954) returned 0
	[0107.076] GetConsoleWindow () returned 0x3036c
	[0107.076] GetSystemMetrics (nIndex=8556579) returned 0
	[0107.076] GetSysColorBrush (nIndex=7239338) returned 0x0
	[0107.076] GetSystemMetrics (nIndex=9966792) returned 0
	[0107.076] GetCurrentProcessId () returned 0x13a4
	[0107.076] GetSystemMetrics (nIndex=3947353) returned 0
	[0107.076] GetSysColorBrush (nIndex=9754373) returned 0x0
	[0107.076] GetSystemMetrics (nIndex=6493938) returned 0
	[0107.076] GetCurrentProcessId () returned 0x13a4
	[0107.076] GetSystemMetrics (nIndex=7878682) returned 0
	[0107.076] GetSysColorBrush (nIndex=6548936) returned 0x0
	[0107.076] GetSystemMetrics (nIndex=6433922) returned 0
	[0107.076] GetCurrentProcessId () returned 0x13a4
	[0107.076] GetSystemMetrics (nIndex=3622967) returned 0
	[0107.076] GetSysColorBrush (nIndex=5875454) returned 0x0
	[0107.076] FreeConsole () returned 1
	[0107.675] GetSystemMetrics (nIndex=4748255) returned 0
	[0107.676] GetCurrentThreadId () returned 0x13b4
	[0107.676] GetSystemMetrics (nIndex=6735638) returned 0
	[0107.676] GetSysColorBrush (nIndex=7564294) returned 0x0
	[0107.676] GetSystemMetrics (nIndex=9663858) returned 0
	[0107.676] GetCurrentProcessId () returned 0x13a4
	[0107.676] GetSystemMetrics (nIndex=9683875) returned 0
	[0107.676] GetSysColorBrush (nIndex=3835554) returned 0x0
	[0107.676] GetSystemMetrics (nIndex=6597556) returned 0
	[0107.676] GetCurrentProcessId () returned 0x13a4
	[0107.676] GetSystemMetrics (nIndex=9235636) returned 0
	[0107.676] GetSysColorBrush (nIndex=3598857) returned 0x0
	[0107.676] GetSystemMetrics (nIndex=9832385) returned 0
	[0107.676] GetConsoleWindow () returned 0x0
	[0107.676] GetSystemMetrics (nIndex=5566235) returned 0
	[0107.676] GetSysColorBrush (nIndex=2657693) returned 0x0
	[0107.676] GetSystemMetrics (nIndex=5933287) returned 0
	[0107.676] GetCurrentThreadId () returned 0x13b4
	[0107.676] GetSystemMetrics (nIndex=9992358) returned 0
	[0107.676] GetSysColorBrush (nIndex=5524846) returned 0x0
	[0107.676] GetSystemMetrics (nIndex=2726629) returned 0
	[0107.676] GetCurrentThreadId () returned 0x13b4
	[0107.676] GetSystemMetrics (nIndex=3834296) returned 0
	[0107.676] GetSysColorBrush (nIndex=6269542) returned 0x0
	[0107.676] GetSystemMetrics (nIndex=6527672) returned 0
	[0107.676] GetCurrentThreadId () returned 0x13b4
	[0107.676] GetSystemMetrics (nIndex=7537644) returned 0
	[0107.676] GetSysColorBrush (nIndex=3447764) returned 0x0
	[0107.676] GetSystemMetrics (nIndex=4662743) returned 0
	[0107.676] GetConsoleWindow () returned 0x0
	[0107.676] GetSystemMetrics (nIndex=4763522) returned 0
	[0107.677] GetSysColorBrush (nIndex=9764595) returned 0x0
	[0107.677] GetSystemMetrics (nIndex=9523773) returned 0
	[0107.677] GetConsoleWindow () returned 0x0
	[0107.677] GetSystemMetrics (nIndex=7379233) returned 0
	[0107.677] GetSysColorBrush (nIndex=4793596) returned 0x0
	[0107.677] GetSystemMetrics (nIndex=3375935) returned 0
	[0107.677] GetCurrentProcessId () returned 0x13a4
	[0107.677] GetSystemMetrics (nIndex=5643285) returned 0
	[0107.677] GetSysColorBrush (nIndex=8524438) returned 0x0
	[0107.677] GetSystemMetrics (nIndex=3899692) returned 0
	[0107.677] GetLastError () returned 0x57
	[0107.677] GetSystemMetrics (nIndex=4233897) returned 0
	[0107.677] GetSysColorBrush (nIndex=2548598) returned 0x0
	[0107.677] GetSystemMetrics (nIndex=3499279) returned 0
	[0107.677] GetConsoleWindow () returned 0x0
	[0107.677] GetSystemMetrics (nIndex=7695882) returned 0
	[0107.677] GetSysColorBrush (nIndex=5582867) returned 0x0
	[0107.677] GetSystemMetrics (nIndex=3928843) returned 0
	[0107.677] GetLastError () returned 0x57
	[0107.677] GetSystemMetrics (nIndex=2698843) returned 0
	[0107.677] GetSysColorBrush (nIndex=5496225) returned 0x0
	[0107.677] GetSystemMetrics (nIndex=8474676) returned 0
	[0107.677] GetLastError () returned 0x57
	[0107.677] GetSystemMetrics (nIndex=6348344) returned 0
	[0107.677] GetSysColorBrush (nIndex=9223845) returned 0x0
	[0107.677] GetSystemMetrics (nIndex=7245377) returned 0
	[0107.677] GetCurrentThreadId () returned 0x13b4
	[0107.677] GetSystemMetrics (nIndex=6479288) returned 0
	[0107.677] GetSysColorBrush (nIndex=9753875) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=3875342) returned 0
	[0107.678] GetConsoleWindow () returned 0x0
	[0107.678] GetSystemMetrics (nIndex=4524792) returned 0
	[0107.678] GetSysColorBrush (nIndex=5869446) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=2298824) returned 0
	[0107.678] GetCurrentThreadId () returned 0x13b4
	[0107.678] GetSystemMetrics (nIndex=3224445) returned 0
	[0107.678] GetSysColorBrush (nIndex=7275689) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=3723225) returned 0
	[0107.678] GetCurrentProcessId () returned 0x13a4
	[0107.678] GetSystemMetrics (nIndex=6379266) returned 0
	[0107.678] GetSysColorBrush (nIndex=3953548) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=2686769) returned 0
	[0107.678] GetCurrentProcessId () returned 0x13a4
	[0107.678] GetSystemMetrics (nIndex=4388763) returned 0
	[0107.678] GetSysColorBrush (nIndex=9345853) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=8337929) returned 0
	[0107.678] GetCurrentThreadId () returned 0x13b4
	[0107.678] GetSystemMetrics (nIndex=5332976) returned 0
	[0107.678] GetSysColorBrush (nIndex=6859249) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=7492985) returned 0
	[0107.678] GetLastError () returned 0x57
	[0107.678] GetSystemMetrics (nIndex=4244379) returned 0
	[0107.678] GetSysColorBrush (nIndex=3697925) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=5843877) returned 0
	[0107.678] GetLastError () returned 0x57
	[0107.678] GetSystemMetrics (nIndex=7498524) returned 0
	[0107.678] GetSysColorBrush (nIndex=3945868) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=7469742) returned 0
	[0107.678] GetCurrentProcessId () returned 0x13a4
	[0107.678] GetSystemMetrics (nIndex=5954883) returned 0
	[0107.678] GetSysColorBrush (nIndex=6495286) returned 0x0
	[0107.678] GetSystemMetrics (nIndex=8228555) returned 0
	[0107.679] GetConsoleWindow () returned 0x0
	[0107.679] GetSystemMetrics (nIndex=8256452) returned 0
	[0107.679] GetSysColorBrush (nIndex=7949578) returned 0x0
	[0107.679] GetSystemMetrics (nIndex=5898225) returned 0
	[0107.679] GetCurrentProcessId () returned 0x13a4
	[0107.679] GetSystemMetrics (nIndex=5343854) returned 0
	[0107.679] GetSysColorBrush (nIndex=9498439) returned 0x0
	[0107.679] GetSystemMetrics (nIndex=8876497) returned 0
	[0107.679] GetLastError () returned 0x57
	[0107.679] GetSystemMetrics (nIndex=5554437) returned 0
	[0107.679] GetSysColorBrush (nIndex=9696469) returned 0x0
	[0107.679] GetSystemMetrics (nIndex=3833926) returned 0
	[0107.679] GetCurrentProcessId () returned 0x13a4
	[0107.679] GetSystemMetrics (nIndex=7962488) returned 0
	[0107.679] GetSysColorBrush (nIndex=6975454) returned 0x0
	[0107.679] GetSystemMetrics (nIndex=4593324) returned 0
	[0107.679] GetCurrentThreadId () returned 0x13b4
	[0107.679] GetSystemMetrics (nIndex=7364697) returned 0
	[0107.679] GetSysColorBrush (nIndex=6593266) returned 0x0
	[0107.679] GetSystemMetrics (nIndex=6226433) returned 0
	[0107.679] GetCurrentThreadId () returned 0x13b4
	[0107.679] GetSystemMetrics (nIndex=7955764) returned 0
	[0107.679] GetSysColorBrush (nIndex=3973844) returned 0x0
	[0107.679] GetSystemMetrics (nIndex=9699896) returned 0
	[0107.679] GetLastError () returned 0x57
	[0107.679] GetSystemMetrics (nIndex=9587966) returned 0
	[0107.679] GetSysColorBrush (nIndex=8288989) returned 0x0
	[0107.679] GetSystemMetrics (nIndex=6365663) returned 0
	[0107.679] GetLastError () returned 0x57
	[0107.679] GetSystemMetrics (nIndex=7779348) returned 0
	[0107.679] GetSysColorBrush (nIndex=7964468) returned 0x0
	[0107.679] GetSystemMetrics (nIndex=2399354) returned 0
	[0107.679] GetConsoleWindow () returned 0x0
	[0107.679] GetSystemMetrics (nIndex=5273227) returned 0
	[0107.679] GetSysColorBrush (nIndex=4833374) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=8262683) returned 0
	[0107.680] GetConsoleWindow () returned 0x0
	[0107.680] GetSystemMetrics (nIndex=7486338) returned 0
	[0107.680] GetSysColorBrush (nIndex=3362952) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=6426585) returned 0
	[0107.680] GetCurrentProcessId () returned 0x13a4
	[0107.680] GetSystemMetrics (nIndex=2395846) returned 0
	[0107.680] GetSysColorBrush (nIndex=6377783) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=9926565) returned 0
	[0107.680] GetCurrentThreadId () returned 0x13b4
	[0107.680] GetSystemMetrics (nIndex=7263898) returned 0
	[0107.680] GetSysColorBrush (nIndex=2868453) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=6344636) returned 0
	[0107.680] GetCurrentProcessId () returned 0x13a4
	[0107.680] GetSystemMetrics (nIndex=5526946) returned 0
	[0107.680] GetSysColorBrush (nIndex=8847862) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=5584648) returned 0
	[0107.680] GetCurrentThreadId () returned 0x13b4
	[0107.680] GetSystemMetrics (nIndex=7356989) returned 0
	[0107.680] GetSysColorBrush (nIndex=6327583) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=7333428) returned 0
	[0107.680] GetCurrentThreadId () returned 0x13b4
	[0107.680] GetSystemMetrics (nIndex=6283583) returned 0
	[0107.680] GetSysColorBrush (nIndex=2922767) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=6752692) returned 0
	[0107.680] GetCurrentProcessId () returned 0x13a4
	[0107.680] GetSystemMetrics (nIndex=3749947) returned 0
	[0107.680] GetSysColorBrush (nIndex=7955877) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=6747657) returned 0
	[0107.680] GetCurrentProcessId () returned 0x13a4
	[0107.680] GetSystemMetrics (nIndex=2449532) returned 0
	[0107.680] GetSysColorBrush (nIndex=5865825) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=8897956) returned 0
	[0107.680] GetCurrentThreadId () returned 0x13b4
	[0107.680] GetSystemMetrics (nIndex=2284468) returned 0
	[0107.680] GetSysColorBrush (nIndex=9834692) returned 0x0
	[0107.680] GetSystemMetrics (nIndex=5686328) returned 0
	[0107.681] GetLastError () returned 0x57
	[0107.681] GetSystemMetrics (nIndex=9485362) returned 0
	[0107.681] GetSysColorBrush (nIndex=3349948) returned 0x0
	[0107.681] GetSystemMetrics (nIndex=7226223) returned 0
	[0107.681] GetConsoleWindow () returned 0x0
	[0107.681] GetSystemMetrics (nIndex=2743975) returned 0
	[0107.681] GetSysColorBrush (nIndex=5689398) returned 0x0
	[0107.681] GetSystemMetrics (nIndex=5978786) returned 0
	[0107.681] GetLastError () returned 0x57
	[0107.681] GetSystemMetrics (nIndex=6673782) returned 0
	[0107.681] GetSysColorBrush (nIndex=9547253) returned 0x0
	[0107.681] GetSystemMetrics (nIndex=7283677) returned 0
	[0107.681] GetCurrentThreadId () returned 0x13b4
	[0107.681] GetSystemMetrics (nIndex=6943624) returned 0
	[0107.681] GetSysColorBrush (nIndex=7638225) returned 0x0
	[0107.681] GetSystemMetrics (nIndex=9558892) returned 0
	[0107.681] GetLastError () returned 0x57
	[0107.681] GetSystemMetrics (nIndex=5223748) returned 0
	[0107.681] GetSysColorBrush (nIndex=2549969) returned 0x0
	[0107.681] GetSystemMetrics (nIndex=2962529) returned 0
	[0107.681] GetCurrentThreadId () returned 0x13b4
	[0107.681] GetSystemMetrics (nIndex=7673535) returned 0
	[0107.681] GetSysColorBrush (nIndex=7665267) returned 0x0
	[0107.681] GetSystemMetrics (nIndex=3587533) returned 0
	[0107.681] GetCurrentProcessId () returned 0x13a4
	[0107.681] GetSystemMetrics (nIndex=9552248) returned 0
	[0107.681] GetSysColorBrush (nIndex=3387493) returned 0x0
	[0107.681] GetSystemMetrics (nIndex=5865848) returned 0
	[0107.681] GetCurrentProcessId () returned 0x13a4
	[0107.681] GetSystemMetrics (nIndex=7543266) returned 0
	[0107.681] GetSysColorBrush (nIndex=9772969) returned 0x0
	[0107.681] GetSystemMetrics (nIndex=9227242) returned 0
	[0107.681] GetConsoleWindow () returned 0x0
	[0107.681] GetSystemMetrics (nIndex=8679265) returned 0
	[0107.681] GetSysColorBrush (nIndex=9785878) returned 0x0
	[0107.706] GetSystemMetrics (nIndex=6298527) returned 0
	[0107.706] GetCurrentProcessId () returned 0x13a4
	[0107.706] GetSystemMetrics (nIndex=4678773) returned 0
	[0107.706] GetSysColorBrush (nIndex=2276238) returned 0x0
	[0107.706] GetSystemMetrics (nIndex=8929982) returned 0
	[0107.706] GetConsoleWindow () returned 0x0
	[0107.706] GetSystemMetrics (nIndex=4472344) returned 0
	[0107.707] GetSysColorBrush (nIndex=6484235) returned 0x0
	[0107.707] GetSystemMetrics (nIndex=2797444) returned 0
	[0107.707] GetCurrentThreadId () returned 0x13b4
	[0107.707] GetSystemMetrics (nIndex=4388838) returned 0
	[0107.707] GetSysColorBrush (nIndex=6358859) returned 0x0
	[0107.707] GetSystemMetrics (nIndex=5373947) returned 0
	[0107.707] GetCurrentThreadId () returned 0x13b4
	[0107.707] GetSystemMetrics (nIndex=4277294) returned 0
	[0107.707] GetSysColorBrush (nIndex=5493558) returned 0x0
	[0107.707] GetSystemMetrics (nIndex=8423449) returned 0
	[0107.707] GetCurrentThreadId () returned 0x13b4
	[0107.707] GetSystemMetrics (nIndex=2828352) returned 0
	[0107.707] GetSysColorBrush (nIndex=3943978) returned 0x0
	[0107.707] GetSystemMetrics (nIndex=4242323) returned 0
	[0107.707] GetConsoleWindow () returned 0x0
	[0107.707] GetSystemMetrics (nIndex=3924582) returned 0
	[0107.707] GetSysColorBrush (nIndex=4659252) returned 0x0
	[0107.707] GetSystemMetrics (nIndex=2389944) returned 0
	[0107.707] GetLastError () returned 0x57
	[0107.707] GetSystemMetrics (nIndex=6288729) returned 0
	[0107.707] GetSysColorBrush (nIndex=5388358) returned 0x0
	[0107.707] GetSystemMetrics (nIndex=4534742) returned 0
	[0107.707] GetLastError () returned 0x57
	[0107.707] GetSystemMetrics (nIndex=6665764) returned 0
	[0107.707] GetSysColorBrush (nIndex=3434588) returned 0x0
	[0107.707] GetSystemMetrics (nIndex=6226953) returned 0
	[0107.707] GetLastError () returned 0x57
	[0107.707] GetSystemMetrics (nIndex=9884848) returned 0
	[0107.707] GetSysColorBrush (nIndex=9746837) returned 0x0
	[0107.707] GetSystemMetrics (nIndex=6247479) returned 0
	[0107.707] GetCurrentProcessId () returned 0x13a4
	[0107.707] GetSystemMetrics (nIndex=8396389) returned 0
	[0107.708] GetSysColorBrush (nIndex=4233367) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=5733995) returned 0
	[0107.708] GetConsoleWindow () returned 0x0
	[0107.708] GetSystemMetrics (nIndex=6425393) returned 0
	[0107.708] GetSysColorBrush (nIndex=3463999) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=2274773) returned 0
	[0107.708] GetCurrentThreadId () returned 0x13b4
	[0107.708] GetSystemMetrics (nIndex=7396734) returned 0
	[0107.708] GetSysColorBrush (nIndex=7872345) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=5975943) returned 0
	[0107.708] GetLastError () returned 0x57
	[0107.708] GetSystemMetrics (nIndex=5748359) returned 0
	[0107.708] GetSysColorBrush (nIndex=7534997) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=7242267) returned 0
	[0107.708] GetCurrentProcessId () returned 0x13a4
	[0107.708] GetSystemMetrics (nIndex=8773367) returned 0
	[0107.708] GetSysColorBrush (nIndex=7448732) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=7497746) returned 0
	[0107.708] GetCurrentThreadId () returned 0x13b4
	[0107.708] GetSystemMetrics (nIndex=6252768) returned 0
	[0107.708] GetSysColorBrush (nIndex=8864525) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=3242322) returned 0
	[0107.708] GetConsoleWindow () returned 0x0
	[0107.708] GetSystemMetrics (nIndex=7984229) returned 0
	[0107.708] GetSysColorBrush (nIndex=8828266) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=3549359) returned 0
	[0107.708] GetConsoleWindow () returned 0x0
	[0107.708] GetSystemMetrics (nIndex=4633862) returned 0
	[0107.708] GetSysColorBrush (nIndex=6377266) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=6746489) returned 0
	[0107.708] GetConsoleWindow () returned 0x0
	[0107.708] GetSystemMetrics (nIndex=9869362) returned 0
	[0107.708] GetSysColorBrush (nIndex=4997354) returned 0x0
	[0107.708] GetSystemMetrics (nIndex=2442245) returned 0
	[0107.708] GetConsoleWindow () returned 0x0
	[0107.708] GetSystemMetrics (nIndex=4376468) returned 0
	[0107.708] GetSysColorBrush (nIndex=7936567) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=6455597) returned 0
	[0107.709] GetLastError () returned 0x57
	[0107.709] GetSystemMetrics (nIndex=7595722) returned 0
	[0107.709] GetSysColorBrush (nIndex=7478249) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=7372227) returned 0
	[0107.709] GetConsoleWindow () returned 0x0
	[0107.709] GetSystemMetrics (nIndex=3549664) returned 0
	[0107.709] GetSysColorBrush (nIndex=3742599) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=6943788) returned 0
	[0107.709] GetCurrentThreadId () returned 0x13b4
	[0107.709] GetSystemMetrics (nIndex=5398346) returned 0
	[0107.709] GetSysColorBrush (nIndex=9839457) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=9757429) returned 0
	[0107.709] GetCurrentThreadId () returned 0x13b4
	[0107.709] GetSystemMetrics (nIndex=8546389) returned 0
	[0107.709] GetSysColorBrush (nIndex=7784248) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=6989424) returned 0
	[0107.709] GetConsoleWindow () returned 0x0
	[0107.709] GetSystemMetrics (nIndex=2925996) returned 0
	[0107.709] GetSysColorBrush (nIndex=6846438) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=8258882) returned 0
	[0107.709] GetCurrentProcessId () returned 0x13a4
	[0107.709] GetSystemMetrics (nIndex=4955457) returned 0
	[0107.709] GetSysColorBrush (nIndex=2797876) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=4335585) returned 0
	[0107.709] GetCurrentThreadId () returned 0x13b4
	[0107.709] GetSystemMetrics (nIndex=5794844) returned 0
	[0107.709] GetSysColorBrush (nIndex=3482753) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=9665927) returned 0
	[0107.709] GetCurrentProcessId () returned 0x13a4
	[0107.709] GetSystemMetrics (nIndex=5477535) returned 0
	[0107.709] GetSysColorBrush (nIndex=5624964) returned 0x0
	[0107.709] GetSystemMetrics (nIndex=2475895) returned 0
	[0107.709] GetCurrentThreadId () returned 0x13b4
	[0107.709] GetSystemMetrics (nIndex=4666648) returned 0
	[0107.709] GetSysColorBrush (nIndex=2743923) returned 0x0
	[0107.723] GetSystemMetrics (nIndex=8557252) returned 0
	[0107.723] GetLastError () returned 0x57
	[0107.723] GetSystemMetrics (nIndex=4437525) returned 0
	[0107.723] GetSysColorBrush (nIndex=9689888) returned 0x0
	[0107.723] GetSystemMetrics (nIndex=5884589) returned 0
	[0107.723] GetConsoleWindow () returned 0x0
	[0107.724] GetSystemMetrics (nIndex=2975655) returned 0
	[0107.724] GetSysColorBrush (nIndex=5869595) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=8847863) returned 0
	[0107.724] GetConsoleWindow () returned 0x0
	[0107.724] GetSystemMetrics (nIndex=4765745) returned 0
	[0107.724] GetSysColorBrush (nIndex=3857639) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=2383643) returned 0
	[0107.724] GetLastError () returned 0x57
	[0107.724] GetSystemMetrics (nIndex=7952334) returned 0
	[0107.724] GetSysColorBrush (nIndex=9547872) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=6256476) returned 0
	[0107.724] GetConsoleWindow () returned 0x0
	[0107.724] GetSystemMetrics (nIndex=5253844) returned 0
	[0107.724] GetSysColorBrush (nIndex=7232844) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=2496342) returned 0
	[0107.724] GetCurrentProcessId () returned 0x13a4
	[0107.724] GetSystemMetrics (nIndex=7656943) returned 0
	[0107.724] GetSysColorBrush (nIndex=7554337) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=4389728) returned 0
	[0107.724] GetCurrentProcessId () returned 0x13a4
	[0107.724] GetSystemMetrics (nIndex=3545625) returned 0
	[0107.724] GetSysColorBrush (nIndex=4464365) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=8467385) returned 0
	[0107.724] GetConsoleWindow () returned 0x0
	[0107.724] GetSystemMetrics (nIndex=8445333) returned 0
	[0107.724] GetSysColorBrush (nIndex=7587999) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=4679367) returned 0
	[0107.724] GetConsoleWindow () returned 0x0
	[0107.724] GetSystemMetrics (nIndex=5946239) returned 0
	[0107.724] GetSysColorBrush (nIndex=7388573) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=6387782) returned 0
	[0107.724] GetCurrentThreadId () returned 0x13b4
	[0107.724] GetSystemMetrics (nIndex=8383787) returned 0
	[0107.724] GetSysColorBrush (nIndex=7997747) returned 0x0
	[0107.724] GetSystemMetrics (nIndex=2582852) returned 0
	[0107.724] GetCurrentProcessId () returned 0x13a4
	[0107.725] GetSystemMetrics (nIndex=2789434) returned 0
	[0107.725] GetSysColorBrush (nIndex=5232323) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=5292562) returned 0
	[0107.725] GetCurrentThreadId () returned 0x13b4
	[0107.725] GetSystemMetrics (nIndex=8985592) returned 0
	[0107.725] GetSysColorBrush (nIndex=3488894) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=9358324) returned 0
	[0107.725] GetLastError () returned 0x57
	[0107.725] GetSystemMetrics (nIndex=3494677) returned 0
	[0107.725] GetSysColorBrush (nIndex=4427368) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=7464566) returned 0
	[0107.725] GetCurrentThreadId () returned 0x13b4
	[0107.725] GetSystemMetrics (nIndex=3768947) returned 0
	[0107.725] GetSysColorBrush (nIndex=7929725) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=2696959) returned 0
	[0107.725] GetCurrentThreadId () returned 0x13b4
	[0107.725] GetSystemMetrics (nIndex=7999798) returned 0
	[0107.725] GetSysColorBrush (nIndex=2949726) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=4865498) returned 0
	[0107.725] GetCurrentThreadId () returned 0x13b4
	[0107.725] GetSystemMetrics (nIndex=7948478) returned 0
	[0107.725] GetSysColorBrush (nIndex=7373468) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=6223828) returned 0
	[0107.725] GetLastError () returned 0x57
	[0107.725] GetSystemMetrics (nIndex=8466584) returned 0
	[0107.725] GetSysColorBrush (nIndex=2969435) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=3322953) returned 0
	[0107.725] GetCurrentThreadId () returned 0x13b4
	[0107.725] GetSystemMetrics (nIndex=3445522) returned 0
	[0107.725] GetSysColorBrush (nIndex=4723792) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=9864862) returned 0
	[0107.725] GetCurrentProcessId () returned 0x13a4
	[0107.725] GetSystemMetrics (nIndex=6247866) returned 0
	[0107.725] GetSysColorBrush (nIndex=3697726) returned 0x0
	[0107.725] GetSystemMetrics (nIndex=4955349) returned 0
	[0107.726] GetCurrentProcessId () returned 0x13a4
	[0107.726] GetSystemMetrics (nIndex=9626423) returned 0
	[0107.726] GetSysColorBrush (nIndex=6524578) returned 0x0
	[0107.726] GetSystemMetrics (nIndex=4345823) returned 0
	[0107.726] GetLastError () returned 0x57
	[0107.726] GetSystemMetrics (nIndex=4236865) returned 0
	[0107.726] GetSysColorBrush (nIndex=7277244) returned 0x0
	[0107.726] GetSystemMetrics (nIndex=3828698) returned 0
	[0107.726] GetConsoleWindow () returned 0x0
	[0107.726] GetSystemMetrics (nIndex=7443254) returned 0
	[0107.726] GetSysColorBrush (nIndex=2525287) returned 0x0
	[0107.727] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x20) returned 0x90a980
	[0107.727] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x30) returned 0x914330
	[0107.727] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x90a980 | out: hHeap=0x900000) returned 1
	[0107.727] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x47) returned 0x914a20
	[0107.728] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914330 | out: hHeap=0x900000) returned 1
	[0107.759] GetSystemMetrics (nIndex=8798839) returned 0
	[0107.759] GetCurrentProcessId () returned 0x13a4
	[0107.759] GetSystemMetrics (nIndex=8374823) returned 0
	[0107.759] GetSysColorBrush (nIndex=5234722) returned 0x0
	[0107.759] GetSystemMetrics (nIndex=5455742) returned 0
	[0107.759] GetLastError () returned 0x57
	[0107.759] GetSystemMetrics (nIndex=3785225) returned 0
	[0107.759] GetSysColorBrush (nIndex=2774692) returned 0x0
	[0107.759] GetSystemMetrics (nIndex=8673734) returned 0
	[0107.759] GetCurrentProcessId () returned 0x13a4
	[0107.759] GetSystemMetrics (nIndex=9292237) returned 0
	[0107.759] GetSysColorBrush (nIndex=5568744) returned 0x0
	[0107.759] GetSystemMetrics (nIndex=3986482) returned 0
	[0107.759] GetCurrentThreadId () returned 0x13b4
	[0107.759] GetSystemMetrics (nIndex=7433296) returned 0
	[0107.759] GetSysColorBrush (nIndex=5843639) returned 0x0
	[0107.759] GetSystemMetrics (nIndex=4439897) returned 0
	[0107.759] GetCurrentProcessId () returned 0x13a4
	[0107.759] GetSystemMetrics (nIndex=8764935) returned 0
	[0107.759] GetSysColorBrush (nIndex=4435672) returned 0x0
	[0107.759] GetSystemMetrics (nIndex=2995385) returned 0
	[0107.759] GetCurrentThreadId () returned 0x13b4
	[0107.759] GetSystemMetrics (nIndex=6592428) returned 0
	[0107.759] GetSysColorBrush (nIndex=5827757) returned 0x0
	[0107.759] GetSystemMetrics (nIndex=8985885) returned 0
	[0107.759] GetConsoleWindow () returned 0x0
	[0107.759] GetSystemMetrics (nIndex=6636333) returned 0
	[0107.759] GetSysColorBrush (nIndex=9327983) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=8376382) returned 0
	[0107.760] GetConsoleWindow () returned 0x0
	[0107.760] GetSystemMetrics (nIndex=3667848) returned 0
	[0107.760] GetSysColorBrush (nIndex=2447978) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=8693252) returned 0
	[0107.760] GetCurrentThreadId () returned 0x13b4
	[0107.760] GetSystemMetrics (nIndex=6475438) returned 0
	[0107.760] GetSysColorBrush (nIndex=3369792) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=7884534) returned 0
	[0107.760] GetLastError () returned 0x57
	[0107.760] GetSystemMetrics (nIndex=3565538) returned 0
	[0107.760] GetSysColorBrush (nIndex=4549939) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=2229362) returned 0
	[0107.760] GetCurrentProcessId () returned 0x13a4
	[0107.760] GetSystemMetrics (nIndex=7697227) returned 0
	[0107.760] GetSysColorBrush (nIndex=2652757) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=8588898) returned 0
	[0107.760] GetLastError () returned 0x57
	[0107.760] GetSystemMetrics (nIndex=7625558) returned 0
	[0107.760] GetSysColorBrush (nIndex=5987649) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=4865886) returned 0
	[0107.760] GetLastError () returned 0x57
	[0107.760] GetSystemMetrics (nIndex=5699363) returned 0
	[0107.760] GetSysColorBrush (nIndex=4344672) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=6627947) returned 0
	[0107.760] GetConsoleWindow () returned 0x0
	[0107.760] GetSystemMetrics (nIndex=3599382) returned 0
	[0107.760] GetSysColorBrush (nIndex=5685365) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=7769322) returned 0
	[0107.760] GetLastError () returned 0x57
	[0107.760] GetSystemMetrics (nIndex=6562283) returned 0
	[0107.760] GetSysColorBrush (nIndex=6925874) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=4329839) returned 0
	[0107.760] GetConsoleWindow () returned 0x0
	[0107.760] GetSystemMetrics (nIndex=2228726) returned 0
	[0107.760] GetSysColorBrush (nIndex=2373524) returned 0x0
	[0107.760] GetSystemMetrics (nIndex=2333622) returned 0
	[0107.760] GetConsoleWindow () returned 0x0
	[0107.761] GetSystemMetrics (nIndex=7898277) returned 0
	[0107.761] GetSysColorBrush (nIndex=9924457) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=6276958) returned 0
	[0107.761] GetLastError () returned 0x57
	[0107.761] GetSystemMetrics (nIndex=5338799) returned 0
	[0107.761] GetSysColorBrush (nIndex=8846463) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=7739724) returned 0
	[0107.761] GetLastError () returned 0x57
	[0107.761] GetSystemMetrics (nIndex=8299475) returned 0
	[0107.761] GetSysColorBrush (nIndex=6682937) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=6286324) returned 0
	[0107.761] GetLastError () returned 0x57
	[0107.761] GetSystemMetrics (nIndex=9325739) returned 0
	[0107.761] GetSysColorBrush (nIndex=7769783) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=8658857) returned 0
	[0107.761] GetCurrentProcessId () returned 0x13a4
	[0107.761] GetSystemMetrics (nIndex=8629829) returned 0
	[0107.761] GetSysColorBrush (nIndex=5666527) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=9326544) returned 0
	[0107.761] GetCurrentProcessId () returned 0x13a4
	[0107.761] GetSystemMetrics (nIndex=5464297) returned 0
	[0107.761] GetSysColorBrush (nIndex=7667753) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=3764288) returned 0
	[0107.761] GetCurrentThreadId () returned 0x13b4
	[0107.761] GetSystemMetrics (nIndex=5374834) returned 0
	[0107.761] GetSysColorBrush (nIndex=5262846) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=9823564) returned 0
	[0107.761] GetConsoleWindow () returned 0x0
	[0107.761] GetSystemMetrics (nIndex=2235535) returned 0
	[0107.761] GetSysColorBrush (nIndex=7838742) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=9947672) returned 0
	[0107.761] GetCurrentProcessId () returned 0x13a4
	[0107.761] GetSystemMetrics (nIndex=8558968) returned 0
	[0107.761] GetSysColorBrush (nIndex=3223726) returned 0x0
	[0107.761] GetSystemMetrics (nIndex=3436654) returned 0
	[0107.761] GetConsoleWindow () returned 0x0
	[0107.762] GetSystemMetrics (nIndex=2486769) returned 0
	[0107.762] GetSysColorBrush (nIndex=4462274) returned 0x0
	[0107.762] GetSystemMetrics (nIndex=4624742) returned 0
	[0107.762] GetConsoleWindow () returned 0x0
	[0107.762] GetSystemMetrics (nIndex=7698326) returned 0
	[0107.762] GetSysColorBrush (nIndex=3268345) returned 0x0
	[0107.762] GetSystemMetrics (nIndex=4748722) returned 0
	[0107.762] GetCurrentThreadId () returned 0x13b4
	[0107.762] GetSystemMetrics (nIndex=8582946) returned 0
	[0107.762] GetSysColorBrush (nIndex=6622782) returned 0x0
	[0107.762] GetSystemMetrics (nIndex=4487768) returned 0
	[0107.762] GetCurrentThreadId () returned 0x13b4
	[0107.762] GetSystemMetrics (nIndex=8444334) returned 0
	[0107.762] GetSysColorBrush (nIndex=2476732) returned 0x0
	[0107.762] GetSystemMetrics (nIndex=9879393) returned 0
	[0107.762] GetLastError () returned 0x57
	[0107.762] GetSystemMetrics (nIndex=3974684) returned 0
	[0107.762] GetSysColorBrush (nIndex=6422765) returned 0x0
	[0107.762] GetSystemMetrics (nIndex=2669652) returned 0
	[0107.762] GetLastError () returned 0x57
	[0107.762] GetSystemMetrics (nIndex=5748682) returned 0
	[0107.762] GetSysColorBrush (nIndex=9794829) returned 0x0
	[0107.762] GetSystemMetrics (nIndex=4759937) returned 0
	[0107.762] GetCurrentThreadId () returned 0x13b4
	[0107.762] GetSystemMetrics (nIndex=8829559) returned 0
	[0107.762] GetSysColorBrush (nIndex=4357369) returned 0x0
	[0107.762] GetSystemMetrics (nIndex=6272252) returned 0
	[0107.762] GetCurrentThreadId () returned 0x13b4
	[0107.762] GetSystemMetrics (nIndex=2875364) returned 0
	[0107.763] GetSysColorBrush (nIndex=4447429) returned 0x0
	[0107.763] GetSystemMetrics (nIndex=5235852) returned 0
	[0107.763] GetConsoleWindow () returned 0x0
	[0107.763] GetSystemMetrics (nIndex=3483968) returned 0
	[0107.763] GetSysColorBrush (nIndex=2257893) returned 0x0
	[0107.763] GetSystemMetrics (nIndex=5294859) returned 0
	[0107.763] GetLastError () returned 0x57
	[0107.763] GetSystemMetrics (nIndex=3594277) returned 0
	[0107.763] GetSysColorBrush (nIndex=4547767) returned 0x0
	[0107.763] GetSystemMetrics (nIndex=8458726) returned 0
	[0107.763] GetConsoleWindow () returned 0x0
	[0107.763] GetSystemMetrics (nIndex=3528485) returned 0
	[0107.763] GetSysColorBrush (nIndex=6656896) returned 0x0
	[0107.763] GetSystemMetrics (nIndex=4232773) returned 0
	[0107.763] GetCurrentThreadId () returned 0x13b4
	[0107.763] GetSystemMetrics (nIndex=3989956) returned 0
	[0107.763] GetSysColorBrush (nIndex=3983625) returned 0x0
	[0107.763] GetSystemMetrics (nIndex=2284847) returned 0
	[0107.763] GetConsoleWindow () returned 0x0
	[0107.763] GetSystemMetrics (nIndex=3395546) returned 0
	[0107.763] GetSysColorBrush (nIndex=7725395) returned 0x0
	[0107.763] GetSystemMetrics (nIndex=2285932) returned 0
	[0107.763] GetCurrentProcessId () returned 0x13a4
	[0107.763] GetSystemMetrics (nIndex=4867255) returned 0
	[0107.763] GetSysColorBrush (nIndex=9597439) returned 0x0
	[0107.763] GetSystemMetrics (nIndex=7338225) returned 0
	[0107.763] GetConsoleWindow () returned 0x0
	[0107.764] GetSystemMetrics (nIndex=8785446) returned 0
	[0107.764] GetSysColorBrush (nIndex=7635455) returned 0x0
	[0107.764] GetSystemMetrics (nIndex=5747844) returned 0
	[0107.764] GetLastError () returned 0x57
	[0107.764] GetSystemMetrics (nIndex=9265642) returned 0
	[0107.764] GetSysColorBrush (nIndex=3949958) returned 0x0
	[0107.764] GetSystemMetrics (nIndex=9679855) returned 0
	[0107.764] GetLastError () returned 0x57
	[0107.764] GetSystemMetrics (nIndex=2534553) returned 0
	[0107.764] GetSysColorBrush (nIndex=3572434) returned 0x0
	[0107.764] GetSystemMetrics (nIndex=8767638) returned 0
	[0107.764] GetConsoleWindow () returned 0x0
	[0107.764] GetSystemMetrics (nIndex=3999958) returned 0
	[0107.764] GetSysColorBrush (nIndex=7996489) returned 0x0
	[0107.764] GetSystemMetrics (nIndex=3577737) returned 0
	[0107.764] GetCurrentProcessId () returned 0x13a4
	[0107.764] GetSystemMetrics (nIndex=6426782) returned 0
	[0107.764] GetSysColorBrush (nIndex=4287276) returned 0x0
	[0107.764] GetSystemMetrics (nIndex=7238354) returned 0
	[0107.764] GetCurrentThreadId () returned 0x13b4
	[0107.764] GetSystemMetrics (nIndex=5355788) returned 0
	[0107.765] GetSysColorBrush (nIndex=3864723) returned 0x0
	[0107.765] GetSystemMetrics (nIndex=5373452) returned 0
	[0107.765] GetCurrentProcessId () returned 0x13a4
	[0107.765] GetSystemMetrics (nIndex=5292442) returned 0
	[0107.765] GetSysColorBrush (nIndex=8493299) returned 0x0
	[0107.765] GetSystemMetrics (nIndex=2924473) returned 0
	[0107.765] GetConsoleWindow () returned 0x0
	[0107.765] GetSystemMetrics (nIndex=6785566) returned 0
	[0107.765] GetSysColorBrush (nIndex=4252487) returned 0x0
	[0107.765] GetSystemMetrics (nIndex=7982653) returned 0
	[0107.765] GetLastError () returned 0x57
	[0107.765] GetSystemMetrics (nIndex=5664843) returned 0
	[0107.765] GetSysColorBrush (nIndex=7325782) returned 0x0
	[0107.765] GetSystemMetrics (nIndex=2882999) returned 0
	[0107.765] GetLastError () returned 0x57
	[0107.765] GetSystemMetrics (nIndex=8993644) returned 0
	[0107.765] GetSysColorBrush (nIndex=2423245) returned 0x0
	[0107.765] GetSystemMetrics (nIndex=7765235) returned 0
	[0107.765] GetLastError () returned 0x57
	[0107.765] GetSystemMetrics (nIndex=5979424) returned 0
	[0107.765] GetSysColorBrush (nIndex=9785765) returned 0x0
	[0107.765] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x1000) returned 0x916760
	[0107.766] GetLastError () returned 0x57
	[0107.767] SetLastError (dwErrCode=0x57) 
	[0107.767] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.767] GetLastError () returned 0x6
	[0107.768] GetLastError () returned 0x6
	[0107.768] SetLastError (dwErrCode=0x6) 
	[0107.768] GetLastError () returned 0x6
	[0107.768] SetLastError (dwErrCode=0x6) 
	[0107.768] GetLastError () returned 0x6
	[0107.768] SetLastError (dwErrCode=0x6) 
	[0107.768] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.768] GetLastError () returned 0x6
	[0107.768] GetLastError () returned 0x6
	[0107.768] SetLastError (dwErrCode=0x6) 
	[0107.768] GetLastError () returned 0x6
	[0107.768] SetLastError (dwErrCode=0x6) 
	[0107.768] GetLastError () returned 0x6
	[0107.769] SetLastError (dwErrCode=0x6) 
	[0107.769] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.769] GetLastError () returned 0x6
	[0107.769] GetLastError () returned 0x6
	[0107.769] SetLastError (dwErrCode=0x6) 
	[0107.769] GetLastError () returned 0x6
	[0107.769] SetLastError (dwErrCode=0x6) 
	[0107.769] GetLastError () returned 0x6
	[0107.769] SetLastError (dwErrCode=0x6) 
	[0107.769] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.769] GetLastError () returned 0x6
	[0107.769] GetLastError () returned 0x6
	[0107.770] SetLastError (dwErrCode=0x6) 
	[0107.770] GetLastError () returned 0x6
	[0107.770] SetLastError (dwErrCode=0x6) 
	[0107.770] GetLastError () returned 0x6
	[0107.770] SetLastError (dwErrCode=0x6) 
	[0107.770] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.770] GetLastError () returned 0x6
	[0107.770] GetLastError () returned 0x6
	[0107.770] SetLastError (dwErrCode=0x6) 
	[0107.770] GetLastError () returned 0x6
	[0107.770] SetLastError (dwErrCode=0x6) 
	[0107.770] GetLastError () returned 0x6
	[0107.771] SetLastError (dwErrCode=0x6) 
	[0107.771] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.771] GetLastError () returned 0x6
	[0107.771] GetLastError () returned 0x6
	[0107.771] SetLastError (dwErrCode=0x6) 
	[0107.771] GetLastError () returned 0x6
	[0107.771] SetLastError (dwErrCode=0x6) 
	[0107.771] GetLastError () returned 0x6
	[0107.771] SetLastError (dwErrCode=0x6) 
	[0107.771] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.771] GetLastError () returned 0x6
	[0107.771] GetLastError () returned 0x6
	[0107.771] SetLastError (dwErrCode=0x6) 
	[0107.771] GetLastError () returned 0x6
	[0107.771] SetLastError (dwErrCode=0x6) 
	[0107.772] GetLastError () returned 0x6
	[0107.772] SetLastError (dwErrCode=0x6) 
	[0107.772] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.772] GetLastError () returned 0x6
	[0107.772] GetLastError () returned 0x6
	[0107.772] SetLastError (dwErrCode=0x6) 
	[0107.772] GetLastError () returned 0x6
	[0107.772] SetLastError (dwErrCode=0x6) 
	[0107.772] GetLastError () returned 0x6
	[0107.772] SetLastError (dwErrCode=0x6) 
	[0107.772] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.772] GetLastError () returned 0x6
	[0107.772] GetLastError () returned 0x6
	[0107.772] SetLastError (dwErrCode=0x6) 
	[0107.772] GetLastError () returned 0x6
	[0107.772] SetLastError (dwErrCode=0x6) 
	[0107.773] GetLastError () returned 0x6
	[0107.773] SetLastError (dwErrCode=0x6) 
	[0107.773] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.773] GetLastError () returned 0x6
	[0107.773] GetLastError () returned 0x6
	[0107.773] SetLastError (dwErrCode=0x6) 
	[0107.773] GetLastError () returned 0x6
	[0107.773] SetLastError (dwErrCode=0x6) 
	[0107.773] GetLastError () returned 0x6
	[0107.773] SetLastError (dwErrCode=0x6) 
	[0107.773] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.773] GetLastError () returned 0x6
	[0107.773] GetLastError () returned 0x6
	[0107.773] SetLastError (dwErrCode=0x6) 
	[0107.773] GetLastError () returned 0x6
	[0107.773] SetLastError (dwErrCode=0x6) 
	[0107.774] GetLastError () returned 0x6
	[0107.774] SetLastError (dwErrCode=0x6) 
	[0107.774] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.774] GetLastError () returned 0x6
	[0107.774] GetLastError () returned 0x6
	[0107.774] SetLastError (dwErrCode=0x6) 
	[0107.774] GetLastError () returned 0x6
	[0107.774] SetLastError (dwErrCode=0x6) 
	[0107.774] GetLastError () returned 0x6
	[0107.774] SetLastError (dwErrCode=0x6) 
	[0107.774] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.775] GetLastError () returned 0x6
	[0107.775] GetLastError () returned 0x6
	[0107.775] SetLastError (dwErrCode=0x6) 
	[0107.775] GetLastError () returned 0x6
	[0107.775] SetLastError (dwErrCode=0x6) 
	[0107.775] GetLastError () returned 0x6
	[0107.775] SetLastError (dwErrCode=0x6) 
	[0107.775] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.775] GetLastError () returned 0x6
	[0107.775] GetLastError () returned 0x6
	[0107.775] SetLastError (dwErrCode=0x6) 
	[0107.775] GetLastError () returned 0x6
	[0107.775] SetLastError (dwErrCode=0x6) 
	[0107.775] GetLastError () returned 0x6
	[0107.775] SetLastError (dwErrCode=0x6) 
	[0107.776] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.776] GetLastError () returned 0x6
	[0107.776] GetLastError () returned 0x6
	[0107.776] SetLastError (dwErrCode=0x6) 
	[0107.776] GetLastError () returned 0x6
	[0107.776] SetLastError (dwErrCode=0x6) 
	[0107.776] GetLastError () returned 0x6
	[0107.776] SetLastError (dwErrCode=0x6) 
	[0107.776] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.776] GetLastError () returned 0x6
	[0107.776] GetLastError () returned 0x6
	[0107.776] SetLastError (dwErrCode=0x6) 
	[0107.776] GetLastError () returned 0x6
	[0107.777] SetLastError (dwErrCode=0x6) 
	[0107.777] GetLastError () returned 0x6
	[0107.777] SetLastError (dwErrCode=0x6) 
	[0107.777] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.777] GetLastError () returned 0x6
	[0107.777] GetLastError () returned 0x6
	[0107.777] SetLastError (dwErrCode=0x6) 
	[0107.777] GetLastError () returned 0x6
	[0107.777] SetLastError (dwErrCode=0x6) 
	[0107.777] GetLastError () returned 0x6
	[0107.777] SetLastError (dwErrCode=0x6) 
	[0107.777] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.777] GetLastError () returned 0x6
	[0107.777] GetLastError () returned 0x6
	[0107.778] SetLastError (dwErrCode=0x6) 
	[0107.778] GetLastError () returned 0x6
	[0107.778] SetLastError (dwErrCode=0x6) 
	[0107.778] GetLastError () returned 0x6
	[0107.778] SetLastError (dwErrCode=0x6) 
	[0107.778] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.778] GetLastError () returned 0x6
	[0107.778] GetLastError () returned 0x6
	[0107.778] SetLastError (dwErrCode=0x6) 
	[0107.778] GetLastError () returned 0x6
	[0107.778] SetLastError (dwErrCode=0x6) 
	[0107.778] GetLastError () returned 0x6
	[0107.778] SetLastError (dwErrCode=0x6) 
	[0107.778] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.778] GetLastError () returned 0x6
	[0107.778] GetLastError () returned 0x6
	[0107.779] SetLastError (dwErrCode=0x6) 
	[0107.779] GetLastError () returned 0x6
	[0107.779] SetLastError (dwErrCode=0x6) 
	[0107.779] GetLastError () returned 0x6
	[0107.779] SetLastError (dwErrCode=0x6) 
	[0107.779] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.779] GetLastError () returned 0x6
	[0107.779] GetLastError () returned 0x6
	[0107.779] SetLastError (dwErrCode=0x6) 
	[0107.779] GetLastError () returned 0x6
	[0107.779] SetLastError (dwErrCode=0x6) 
	[0107.779] GetLastError () returned 0x6
	[0107.779] SetLastError (dwErrCode=0x6) 
	[0107.779] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.779] GetLastError () returned 0x6
	[0107.780] GetLastError () returned 0x6
	[0107.780] SetLastError (dwErrCode=0x6) 
	[0107.780] GetLastError () returned 0x6
	[0107.780] SetLastError (dwErrCode=0x6) 
	[0107.780] GetLastError () returned 0x6
	[0107.780] SetLastError (dwErrCode=0x6) 
	[0107.780] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.780] GetLastError () returned 0x6
	[0107.780] GetLastError () returned 0x6
	[0107.780] SetLastError (dwErrCode=0x6) 
	[0107.780] GetLastError () returned 0x6
	[0107.780] SetLastError (dwErrCode=0x6) 
	[0107.780] GetLastError () returned 0x6
	[0107.780] SetLastError (dwErrCode=0x6) 
	[0107.780] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.781] GetLastError () returned 0x6
	[0107.781] GetLastError () returned 0x6
	[0107.781] SetLastError (dwErrCode=0x6) 
	[0107.781] GetLastError () returned 0x6
	[0107.781] SetLastError (dwErrCode=0x6) 
	[0107.781] GetLastError () returned 0x6
	[0107.781] SetLastError (dwErrCode=0x6) 
	[0107.781] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.781] GetLastError () returned 0x6
	[0107.781] GetLastError () returned 0x6
	[0107.781] SetLastError (dwErrCode=0x6) 
	[0107.781] GetLastError () returned 0x6
	[0107.781] SetLastError (dwErrCode=0x6) 
	[0107.781] GetLastError () returned 0x6
	[0107.781] SetLastError (dwErrCode=0x6) 
	[0107.781] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.782] GetLastError () returned 0x6
	[0107.782] GetLastError () returned 0x6
	[0107.782] SetLastError (dwErrCode=0x6) 
	[0107.782] GetLastError () returned 0x6
	[0107.782] SetLastError (dwErrCode=0x6) 
	[0107.782] GetLastError () returned 0x6
	[0107.782] SetLastError (dwErrCode=0x6) 
	[0107.782] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.782] GetLastError () returned 0x6
	[0107.782] GetLastError () returned 0x6
	[0107.782] SetLastError (dwErrCode=0x6) 
	[0107.782] GetLastError () returned 0x6
	[0107.782] SetLastError (dwErrCode=0x6) 
	[0107.782] GetLastError () returned 0x6
	[0107.782] SetLastError (dwErrCode=0x6) 
	[0107.783] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.783] GetLastError () returned 0x6
	[0107.783] GetLastError () returned 0x6
	[0107.783] SetLastError (dwErrCode=0x6) 
	[0107.783] GetLastError () returned 0x6
	[0107.783] SetLastError (dwErrCode=0x6) 
	[0107.783] GetLastError () returned 0x6
	[0107.783] SetLastError (dwErrCode=0x6) 
	[0107.783] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.783] GetLastError () returned 0x6
	[0107.783] GetLastError () returned 0x6
	[0107.783] SetLastError (dwErrCode=0x6) 
	[0107.783] GetLastError () returned 0x6
	[0107.783] SetLastError (dwErrCode=0x6) 
	[0107.783] GetLastError () returned 0x6
	[0107.783] SetLastError (dwErrCode=0x6) 
	[0107.783] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.783] GetLastError () returned 0x6
	[0107.784] GetLastError () returned 0x6
	[0107.784] SetLastError (dwErrCode=0x6) 
	[0107.784] GetLastError () returned 0x6
	[0107.784] SetLastError (dwErrCode=0x6) 
	[0107.784] GetLastError () returned 0x6
	[0107.784] SetLastError (dwErrCode=0x6) 
	[0107.784] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.784] GetLastError () returned 0x6
	[0107.784] GetLastError () returned 0x6
	[0107.784] SetLastError (dwErrCode=0x6) 
	[0107.784] GetLastError () returned 0x6
	[0107.784] SetLastError (dwErrCode=0x6) 
	[0107.784] GetLastError () returned 0x6
	[0107.784] SetLastError (dwErrCode=0x6) 
	[0107.785] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.785] GetLastError () returned 0x6
	[0107.785] GetLastError () returned 0x6
	[0107.785] SetLastError (dwErrCode=0x6) 
	[0107.785] GetLastError () returned 0x6
	[0107.785] SetLastError (dwErrCode=0x6) 
	[0107.785] GetLastError () returned 0x6
	[0107.785] SetLastError (dwErrCode=0x6) 
	[0107.785] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.785] GetLastError () returned 0x6
	[0107.785] GetLastError () returned 0x6
	[0107.785] SetLastError (dwErrCode=0x6) 
	[0107.785] GetLastError () returned 0x6
	[0107.785] SetLastError (dwErrCode=0x6) 
	[0107.785] GetLastError () returned 0x6
	[0107.786] SetLastError (dwErrCode=0x6) 
	[0107.786] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.786] GetLastError () returned 0x6
	[0107.786] GetLastError () returned 0x6
	[0107.786] SetLastError (dwErrCode=0x6) 
	[0107.786] GetLastError () returned 0x6
	[0107.786] SetLastError (dwErrCode=0x6) 
	[0107.786] GetLastError () returned 0x6
	[0107.786] SetLastError (dwErrCode=0x6) 
	[0107.786] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.786] GetLastError () returned 0x6
	[0107.786] GetLastError () returned 0x6
	[0107.786] SetLastError (dwErrCode=0x6) 
	[0107.786] GetLastError () returned 0x6
	[0107.786] SetLastError (dwErrCode=0x6) 
	[0107.787] GetLastError () returned 0x6
	[0107.787] SetLastError (dwErrCode=0x6) 
	[0107.787] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.787] GetLastError () returned 0x6
	[0107.787] GetLastError () returned 0x6
	[0107.787] SetLastError (dwErrCode=0x6) 
	[0107.787] GetLastError () returned 0x6
	[0107.787] SetLastError (dwErrCode=0x6) 
	[0107.787] GetLastError () returned 0x6
	[0107.787] SetLastError (dwErrCode=0x6) 
	[0107.787] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.787] GetLastError () returned 0x6
	[0107.787] GetLastError () returned 0x6
	[0107.787] SetLastError (dwErrCode=0x6) 
	[0107.787] GetLastError () returned 0x6
	[0107.787] SetLastError (dwErrCode=0x6) 
	[0107.787] GetLastError () returned 0x6
	[0107.787] SetLastError (dwErrCode=0x6) 
	[0107.788] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.788] GetLastError () returned 0x6
	[0107.788] GetLastError () returned 0x6
	[0107.788] SetLastError (dwErrCode=0x6) 
	[0107.788] GetLastError () returned 0x6
	[0107.788] SetLastError (dwErrCode=0x6) 
	[0107.788] GetLastError () returned 0x6
	[0107.788] SetLastError (dwErrCode=0x6) 
	[0107.788] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.788] GetLastError () returned 0x6
	[0107.788] GetLastError () returned 0x6
	[0107.788] SetLastError (dwErrCode=0x6) 
	[0107.788] GetLastError () returned 0x6
	[0107.788] SetLastError (dwErrCode=0x6) 
	[0107.789] GetLastError () returned 0x6
	[0107.789] SetLastError (dwErrCode=0x6) 
	[0107.789] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.789] GetLastError () returned 0x6
	[0107.789] GetLastError () returned 0x6
	[0107.789] SetLastError (dwErrCode=0x6) 
	[0107.789] GetLastError () returned 0x6
	[0107.789] SetLastError (dwErrCode=0x6) 
	[0107.789] GetLastError () returned 0x6
	[0107.789] SetLastError (dwErrCode=0x6) 
	[0107.789] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.789] GetLastError () returned 0x6
	[0107.789] GetLastError () returned 0x6
	[0107.789] SetLastError (dwErrCode=0x6) 
	[0107.789] GetLastError () returned 0x6
	[0107.789] SetLastError (dwErrCode=0x6) 
	[0107.790] GetLastError () returned 0x6
	[0107.790] SetLastError (dwErrCode=0x6) 
	[0107.790] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.790] GetLastError () returned 0x6
	[0107.790] GetLastError () returned 0x6
	[0107.790] SetLastError (dwErrCode=0x6) 
	[0107.790] GetLastError () returned 0x6
	[0107.790] SetLastError (dwErrCode=0x6) 
	[0107.790] GetLastError () returned 0x6
	[0107.790] SetLastError (dwErrCode=0x6) 
	[0107.790] WriteFile (in: hFile=0x3c, lpBuffer=0x10ff70, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x10ff6c, lpOverlapped=0x0) returned 0
	[0107.790] GetLastError () returned 0x6
	[0107.790] GetLastError () returned 0x6
	[0107.790] SetLastError (dwErrCode=0x6) 
	[0107.790] GetLastError () returned 0x6
	[0107.790] SetLastError (dwErrCode=0x6) 
	[0107.790] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x8) returned 0x915ea0
	[0107.791] GetLastError () returned 0x6
	[0107.791] SetLastError (dwErrCode=0x6) 
	[0107.791] GetLastError () returned 0x6
	[0107.791] SetLastError (dwErrCode=0x6) 
	[0107.791] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x914840
	[0107.791] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x917768
	[0107.792] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917768 | out: hHeap=0x900000) returned 1
	[0107.792] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910988 | out: hHeap=0x900000) returned 1
	[0107.792] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9108c8 | out: hHeap=0x900000) returned 1
	[0107.792] GetLastError () returned 0x6
	[0107.792] SetLastError (dwErrCode=0x6) 
	[0107.792] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x914900
	[0107.792] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x2) returned 0x914910
	[0107.792] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x4) returned 0x914920
	[0107.792] GetLastError () returned 0x6
	[0107.792] SetLastError (dwErrCode=0x6) 
	[0107.792] GetLastError () returned 0x6
	[0107.792] SetLastError (dwErrCode=0x6) 
	[0107.792] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x9108c8
	[0107.792] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x917768
	[0107.793] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917768 | out: hHeap=0x900000) returned 1
	[0107.793] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914900 | out: hHeap=0x900000) returned 1
	[0107.793] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914840 | out: hHeap=0x900000) returned 1
	[0107.793] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914920 | out: hHeap=0x900000) returned 1
	[0107.793] GetLastError () returned 0x6
	[0107.793] SetLastError (dwErrCode=0x6) 
	[0107.793] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x914920
	[0107.793] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x2) returned 0x910988
	[0107.793] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x4) returned 0x915eb0
	[0107.793] GetLastError () returned 0x6
	[0107.793] SetLastError (dwErrCode=0x6) 
	[0107.793] GetLastError () returned 0x6
	[0107.793] SetLastError (dwErrCode=0x6) 
	[0107.796] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x914840
	[0107.796] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x917768
	[0107.797] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917768 | out: hHeap=0x900000) returned 1
	[0107.797] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914920 | out: hHeap=0x900000) returned 1
	[0107.797] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9108c8 | out: hHeap=0x900000) returned 1
	[0107.797] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x915eb0 | out: hHeap=0x900000) returned 1
	[0107.797] GetLastError () returned 0x6
	[0107.797] SetLastError (dwErrCode=0x6) 
	[0107.797] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x914920
	[0107.797] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910988 | out: hHeap=0x900000) returned 1
	[0107.798] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914910 | out: hHeap=0x900000) returned 1
	[0107.798] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x8) returned 0x914900
	[0107.798] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x18) returned 0x9102e0
	[0107.798] GetLastError () returned 0x6
	[0107.798] SetLastError (dwErrCode=0x6) 
	[0107.798] GetLastError () returned 0x6
	[0107.798] SetLastError (dwErrCode=0x6) 
	[0107.798] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x9108c8
	[0107.798] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x917768
	[0107.798] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917768 | out: hHeap=0x900000) returned 1
	[0107.799] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914920 | out: hHeap=0x900000) returned 1
	[0107.799] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914840 | out: hHeap=0x900000) returned 1
	[0107.799] GetLastError () returned 0x6
	[0107.799] SetLastError (dwErrCode=0x6) 
	[0107.799] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x910988
	[0107.799] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x2) returned 0x914910
	[0107.799] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x4) returned 0x914920
	[0107.799] GetLastError () returned 0x6
	[0107.799] SetLastError (dwErrCode=0x6) 
	[0107.799] GetLastError () returned 0x6
	[0107.799] SetLastError (dwErrCode=0x6) 
	[0107.800] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x914840
	[0107.800] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x917768
	[0107.800] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917768 | out: hHeap=0x900000) returned 1
	[0107.800] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910988 | out: hHeap=0x900000) returned 1
	[0107.800] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9108c8 | out: hHeap=0x900000) returned 1
	[0107.800] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914920 | out: hHeap=0x900000) returned 1
	[0107.800] GetLastError () returned 0x6
	[0107.800] SetLastError (dwErrCode=0x6) 
	[0107.800] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x914920
	[0107.800] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x2) returned 0x915eb0
	[0107.800] GetLastError () returned 0x6
	[0107.800] SetLastError (dwErrCode=0x6) 
	[0107.801] GetLastError () returned 0x6
	[0107.801] SetLastError (dwErrCode=0x6) 
	[0107.801] GetLastError () returned 0x6
	[0107.801] SetLastError (dwErrCode=0x6) 
	[0107.801] GetLastError () returned 0x6
	[0107.801] SetLastError (dwErrCode=0x6) 
	[0107.801] GetLastError () returned 0x6
	[0107.801] SetLastError (dwErrCode=0x6) 
	[0107.801] GetLastError () returned 0x6
	[0107.801] SetLastError (dwErrCode=0x6) 
	[0107.801] GetLastError () returned 0x6
	[0107.801] SetLastError (dwErrCode=0x6) 
	[0107.801] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x1) returned 0x915ec0
	[0107.801] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x6) returned 0x915ed0
	[0107.801] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x5) returned 0x917850
	[0107.801] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0x4) returned 0x917830
	[0107.801] GetLastError () returned 0x6
	[0107.801] SetLastError (dwErrCode=0x6) 
	[0107.801] GetLastError () returned 0x6
	[0107.801] SetLastError (dwErrCode=0x6) 
	[0107.802] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x8, Size=0xb8) returned 0x9108c8
	[0107.802] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6a6) returned 0x917970
	[0107.802] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917970 | out: hHeap=0x900000) returned 1
	[0107.802] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914920 | out: hHeap=0x900000) returned 1
	[0107.802] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914840 | out: hHeap=0x900000) returned 1
	[0107.802] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917830 | out: hHeap=0x900000) returned 1
	[0107.802] GetLastError () returned 0x6
	[0107.802] SetLastError (dwErrCode=0x6) 
	[0107.803] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x6) returned 0x9178d0
	[0107.803] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x915eb0 | out: hHeap=0x900000) returned 1
	[0107.803] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914910 | out: hHeap=0x900000) returned 1
	[0107.803] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x8) returned 0x917890
	[0107.803] GetLastError () returned 0x6
	[0107.803] SetLastError (dwErrCode=0x6) 
	[0107.803] WriteFile (in: hFile=0x3c, lpBuffer=0x1101fc, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0) returned 0
	[0107.803] GetLastError () returned 0x6
	[0107.803] GetLastError () returned 0x6
	[0107.803] SetLastError (dwErrCode=0x6) 
	[0107.803] GetLastError () returned 0x6
	[0107.803] SetLastError (dwErrCode=0x6) 
	[0107.803] GetLastError () returned 0x6
	[0107.803] SetLastError (dwErrCode=0x6) 
	[0107.803] WriteFile (in: hFile=0x3c, lpBuffer=0x1101fc, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0) returned 0
	[0107.803] GetLastError () returned 0x6
	[0107.803] GetLastError () returned 0x6
	[0107.804] SetLastError (dwErrCode=0x6) 
	[0107.804] GetLastError () returned 0x6
	[0107.804] SetLastError (dwErrCode=0x6) 
	[0107.804] GetLastError () returned 0x6
	[0107.804] SetLastError (dwErrCode=0x6) 
	[0107.804] WriteFile (in: hFile=0x3c, lpBuffer=0x1101fc, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0) returned 0
	[0107.804] GetLastError () returned 0x6
	[0107.804] GetLastError () returned 0x6
	[0107.804] SetLastError (dwErrCode=0x6) 
	[0107.804] GetLastError () returned 0x6
	[0107.804] SetLastError (dwErrCode=0x6) 
	[0107.804] GetLastError () returned 0x6
	[0107.804] SetLastError (dwErrCode=0x6) 
	[0107.804] WriteFile (in: hFile=0x3c, lpBuffer=0x1101fc, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0) returned 0
	[0107.804] GetLastError () returned 0x6
	[0107.804] GetLastError () returned 0x6
	[0107.804] SetLastError (dwErrCode=0x6) 
	[0107.804] GetLastError () returned 0x6
	[0107.804] SetLastError (dwErrCode=0x6) 
	[0107.805] GetLastError () returned 0x6
	[0107.805] SetLastError (dwErrCode=0x6) 
	[0107.805] WriteFile (in: hFile=0x3c, lpBuffer=0x1101fc, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1101f8, lpOverlapped=0x0) returned 0
	[0107.805] GetLastError () returned 0x6
	[0107.805] GetLastError () returned 0x6
	[0107.805] SetLastError (dwErrCode=0x6) 
	[0107.805] GetLastError () returned 0x6
	[0107.805] SetLastError (dwErrCode=0x6) 
	[0107.805] GetLastError () returned 0x6
	[0107.805] GetProcAddress (hModule=0x75480000, lpProcName="FlsGetValue") returned 0x7552f350
	[0107.806] SetLastError (dwErrCode=0x6) 
	[0107.806] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75600000
	[0107.806] GetProcAddress (hModule=0x75600000, lpProcName="VirtualProtect") returned 0x75617a50
	[0107.806] VirtualProtect (in: lpAddress=0x19f7b4, dwSize=0x77e, flNewProtect=0x40, lpflOldProtect=0x1119a4 | out: lpflOldProtect=0x1119a4*=0x4) returned 1
	[0107.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x914a20, cbMultiByte=60, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 60
	[0107.808] RtlAllocateHeap (HeapHandle=0x900000, Flags=0x0, Size=0x80) returned 0x915b78
	[0107.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x914a20, cbMultiByte=60, lpWideCharStr=0x915b78, cchWideChar=60 | out: lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe") returned 60
	[0107.810] CreateProcessW (in: lpApplicationName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x111ad0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x111c0c | out: lpCommandLine=0x0, lpProcessInformation=0x111c0c*(hProcess=0x3c, hThread=0x40, dwProcessId=0x774, dwThreadId=0xc04)) returned 1
	[0108.207] GetThreadContext (in: hThread=0x40, lpContext=0x111804 | out: lpContext=0x111804*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x331000, Edx=0x0, Ecx=0x0, Eax=0x13ceb7c, Ebp=0x0, Eip=0x77798fe0, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0108.238] ReadProcessMemory (in: hProcess=0x3c, lpBaseAddress=0x331008, lpBuffer=0x111bf4, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x111bf4*, lpNumberOfBytesRead=0x0) returned 1
	[0108.239] VirtualAlloc (lpAddress=0x0, dwSize=0x92000, flAllocationType=0x3000, flProtect=0x40) returned 0x2230000
	[0108.375] VirtualAllocEx (hProcess=0x3c, lpAddress=0x400000, dwSize=0x92000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000
	[0108.774] WriteProcessMemory (in: hProcess=0x3c, lpBaseAddress=0x400000, lpBuffer=0x2230000*, nSize=0x92000, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x2230000*, lpNumberOfBytesWritten=0x0) returned 1
	[0108.862] VirtualProtectEx (in: hProcess=0x3c, lpAddress=0x400000, dwSize=0x200, flNewProtect=0x2, lpflOldProtect=0x111b90 | out: lpflOldProtect=0x111b90*=0x40) returned 1
	[0108.936] VirtualProtectEx (in: hProcess=0x3c, lpAddress=0x402000, dwSize=0x8b9d0, flNewProtect=0x20, lpflOldProtect=0x111b90 | out: lpflOldProtect=0x111b90*=0x40) returned 1
	[0108.971] VirtualProtectEx (in: hProcess=0x3c, lpAddress=0x48e000, dwSize=0x4a0, flNewProtect=0x2, lpflOldProtect=0x111b90 | out: lpflOldProtect=0x111b90*=0x40) returned 1
	[0108.972] VirtualProtectEx (in: hProcess=0x3c, lpAddress=0x490000, dwSize=0xc, flNewProtect=0x2, lpflOldProtect=0x111b90 | out: lpflOldProtect=0x111b90*=0x40) returned 1
	[0108.972] VirtualFree (lpAddress=0x2230000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.009] WriteProcessMemory (in: hProcess=0x3c, lpBaseAddress=0x331008, lpBuffer=0x111c24*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x111c24*, lpNumberOfBytesWritten=0x0) returned 1
	[0109.013] SetThreadContext (hThread=0x40, lpContext=0x111804*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x331000, Edx=0x0, Ecx=0x0, Eax=0x48d9ca, Ebp=0x0, Eip=0x77798fe0, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0109.014] ResumeThread (hThread=0x40) returned 0x1
	[0109.014] CloseHandle (hObject=0x3c) returned 1
	[0109.014] CloseHandle (hObject=0x40) returned 1
	[0109.014] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x915b78 | out: hHeap=0x900000) returned 1
	[0109.015] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914a20 | out: hHeap=0x900000) returned 1
	[0109.015] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0109.015] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0109.015] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x915ec0 | out: hHeap=0x900000) returned 1
	[0109.015] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x915ed0 | out: hHeap=0x900000) returned 1
	[0109.015] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917850 | out: hHeap=0x900000) returned 1
	[0109.015] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9102e0 | out: hHeap=0x900000) returned 1
	[0109.015] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x917890 | out: hHeap=0x900000) returned 1
	[0109.015] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x915ea0 | out: hHeap=0x900000) returned 1
	[0109.015] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x914900 | out: hHeap=0x900000) returned 1
	[0109.016] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x913bc8 | out: hHeap=0x900000) returned 1
	[0109.016] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910440 | out: hHeap=0x900000) returned 1
	[0109.016] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x910998 | out: hHeap=0x900000) returned 1
	[0109.016] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x906420 | out: hHeap=0x900000) returned 1
	[0109.016] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x90dce0 | out: hHeap=0x900000) returned 1
	[0109.016] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x90ac50 | out: hHeap=0x900000) returned 1
	[0109.016] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x90f500 | out: hHeap=0x900000) returned 1
	[0109.017] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x90df90 | out: hHeap=0x900000) returned 1
	[0109.018] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x912f78 | out: hHeap=0x900000) returned 1
	[0109.019] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x76e20000
	[0109.450] GetProcAddress (hModule=0x76e20000, lpProcName="AppPolicyGetProcessTerminationMethod") returned 0x0
	[0109.450] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x19fef8 | out: phModule=0x19fef8) returned 0
	[0109.450] ExitProcess (uExitCode=0x0) 
	[0109.450] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9178d0 | out: hHeap=0x900000) returned 1
	[0109.451] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x9108c8 | out: hHeap=0x900000) returned 1
	[0109.451] HeapFree (in: hHeap=0x900000, dwFlags=0x0, lpMem=0x90fd20 | out: hHeap=0x900000) returned 1

Thread:
	id = 7
	os_tid = 0x115c


Process:
	id = "2"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x6aa6e000"
	os_pid = "0x11cc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x13a4"
	cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\Windows"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f72e" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 288
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 289
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 290
	        start_va = 0x50000
	          end_va = 0x8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 291
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 292
	        start_va = 0x400000
	          end_va = 0x5fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 293
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 294
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 295
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 296
	        start_va = 0x7ff642880000
	          end_va = 0x7ff642890fff
	       monitored = 0
	     entry_point = 0x7ff6428816b0
	     region_type = mapped_file
	            name = "conhost.exe"
	        filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe")

Region:
	              id = 297
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 298
	        start_va = 0x720000
	          end_va = 0x81ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 299
	        start_va = 0x7ff87ce40000
	          end_va = 0x7ff87d027fff
	       monitored = 0
	     entry_point = 0x7ff87ce6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 300
	        start_va = 0x7ff87f640000
	          end_va = 0x7ff87f6ecfff
	       monitored = 0
	     entry_point = 0x7ff87f6581a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 301
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 302
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 303
	        start_va = 0x90000
	          end_va = 0x14dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 304
	        start_va = 0x7ff87fde0000
	          end_va = 0x7ff87fe7cfff
	       monitored = 0
	     entry_point = 0x7ff87fde78a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 305
	        start_va = 0x150000
	          end_va = 0x18ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000150000"
	        filename = ""

Region:
	              id = 306
	        start_va = 0x190000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 307
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 308
	        start_va = 0x7ff864d70000
	          end_va = 0x7ff864dc8fff
	       monitored = 0
	     entry_point = 0x7ff864d7fbf0
	     region_type = mapped_file
	            name = "conhostv2.dll"
	        filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll")

Region:
	              id = 309
	        start_va = 0x190000
	          end_va = 0x190fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 310
	        start_va = 0x1f0000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 311
	        start_va = 0x7ff87f6f0000
	          end_va = 0x7ff87f96cfff
	       monitored = 0
	     entry_point = 0x7ff87f7c4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 312
	        start_va = 0x7ff87fe80000
	          end_va = 0x7ff87ff9bfff
	       monitored = 0
	     entry_point = 0x7ff87fec02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 313
	        start_va = 0x7ff87d030000
	          end_va = 0x7ff87d099fff
	       monitored = 0
	     entry_point = 0x7ff87d066d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 314
	        start_va = 0x7ff87ed60000
	          end_va = 0x7ff87eeb5fff
	       monitored = 0
	     entry_point = 0x7ff87ed6a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 315
	        start_va = 0x7ff87f3e0000
	          end_va = 0x7ff87f565fff
	       monitored = 0
	     entry_point = 0x7ff87f42ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 316
	        start_va = 0x1a0000
	          end_va = 0x1dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 317
	        start_va = 0x1e0000
	          end_va = 0x1e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 318
	        start_va = 0x7ff87d3a0000
	          end_va = 0x7ff87d4e2fff
	       monitored = 0
	     entry_point = 0x7ff87d3c8210
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 319
	        start_va = 0x7ff87f970000
	          end_va = 0x7ff87f9cafff
	       monitored = 0
	     entry_point = 0x7ff87f9838b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 320
	        start_va = 0x7ff87d4f0000
	          end_va = 0x7ff87d52afff
	       monitored = 0
	     entry_point = 0x7ff87d4f12f0
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 321
	        start_va = 0x7ff87fa80000
	          end_va = 0x7ff87fb40fff
	       monitored = 0
	     entry_point = 0x7ff87faa0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 322
	        start_va = 0x7ff87ab10000
	          end_va = 0x7ff87ac95fff
	       monitored = 0
	     entry_point = 0x7ff87ab5d700
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 323
	        start_va = 0x820000
	          end_va = 0x9a7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000820000"
	        filename = ""

Region:
	              id = 324
	        start_va = 0x9b0000
	          end_va = 0xb30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009b0000"
	        filename = ""

Region:
	              id = 325
	        start_va = 0xb40000
	          end_va = 0x1f3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b40000"
	        filename = ""

Region:
	              id = 326
	        start_va = 0x600000
	          end_va = 0x600fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 327
	        start_va = 0x610000
	          end_va = 0x610fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000610000"
	        filename = ""

Region:
	              id = 328
	        start_va = 0x1f40000
	          end_va = 0x211ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f40000"
	        filename = ""

Region:
	              id = 329
	        start_va = 0x620000
	          end_va = 0x65ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000620000"
	        filename = ""

Region:
	              id = 330
	        start_va = 0x7ff87c5d0000
	          end_va = 0x7ff87c5e3fff
	       monitored = 0
	     entry_point = 0x7ff87c5d52e0
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 331
	        start_va = 0x7ff87c5f0000
	          end_va = 0x7ff87c63afff
	       monitored = 0
	     entry_point = 0x7ff87c5f35f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 332
	        start_va = 0x7ff87c640000
	          end_va = 0x7ff87c64efff
	       monitored = 0
	     entry_point = 0x7ff87c643210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 333
	        start_va = 0x7ff87c650000
	          end_va = 0x7ff87c704fff
	       monitored = 0
	     entry_point = 0x7ff87c6922e0
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll")

Region:
	              id = 334
	        start_va = 0x7ff87c710000
	          end_va = 0x7ff87c752fff
	       monitored = 0
	     entry_point = 0x7ff87c724b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 335
	        start_va = 0x7ff87c760000
	          end_va = 0x7ff87cda3fff
	       monitored = 0
	     entry_point = 0x7ff87c9264b0
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll")

Region:
	              id = 336
	        start_va = 0x7ff87d650000
	          end_va = 0x7ff87ebaefff
	       monitored = 0
	     entry_point = 0x7ff87d7b11f0
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 337
	        start_va = 0x7ff87fb50000
	          end_va = 0x7ff87fba1fff
	       monitored = 0
	     entry_point = 0x7ff87fb5f530
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 338
	        start_va = 0x7ff87fd30000
	          end_va = 0x7ff87fdd6fff
	       monitored = 0
	     entry_point = 0x7ff87fd458d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 339
	        start_va = 0x7ff87af40000
	          end_va = 0x7ff87afd5fff
	       monitored = 0
	     entry_point = 0x7ff87af65570
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 340
	        start_va = 0x1f40000
	          end_va = 0x200ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f40000"
	        filename = ""

Region:
	              id = 341
	        start_va = 0x2110000
	          end_va = 0x211ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002110000"
	        filename = ""

Region:
	              id = 342
	        start_va = 0x2120000
	          end_va = 0x2456fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 343
	        start_va = 0x2460000
	          end_va = 0x2675fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002460000"
	        filename = ""

Region:
	              id = 344
	        start_va = 0x2680000
	          end_va = 0x2890fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002680000"
	        filename = ""

Region:
	              id = 345
	        start_va = 0x28a0000
	          end_va = 0x29affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028a0000"
	        filename = ""

Region:
	              id = 346
	        start_va = 0x29b0000
	          end_va = 0x2bcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000029b0000"
	        filename = ""

Region:
	              id = 347
	        start_va = 0x2bd0000
	          end_va = 0x2ce4fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002bd0000"
	        filename = ""

Region:
	              id = 348
	        start_va = 0x660000
	          end_va = 0x69ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000660000"
	        filename = ""

Region:
	              id = 349
	        start_va = 0x7ff87fbb0000
	          end_va = 0x7ff87fd09fff
	       monitored = 0
	     entry_point = 0x7ff87fbf38e0
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 350
	        start_va = 0x50000
	          end_va = 0x50fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 351
	        start_va = 0x1f40000
	          end_va = 0x1ffbfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001f40000"
	        filename = ""

Region:
	              id = 352
	        start_va = 0x2000000
	          end_va = 0x200ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002000000"
	        filename = ""

Region:
	              id = 353
	        start_va = 0x50000
	          end_va = 0x53fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 354
	        start_va = 0x7ff87a590000
	          end_va = 0x7ff87a5b1fff
	       monitored = 0
	     entry_point = 0x7ff87a591a40
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 355
	        start_va = 0x7ff87ad00000
	          end_va = 0x7ff87ad12fff
	       monitored = 0
	     entry_point = 0x7ff87ad02760
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 356
	        start_va = 0x7ff87c3d0000
	          end_va = 0x7ff87c425fff
	       monitored = 0
	     entry_point = 0x7ff87c3e0bf0
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 357
	        start_va = 0x60000
	          end_va = 0x66fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 358
	        start_va = 0x70000
	          end_va = 0x70fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 359
	        start_va = 0x80000
	          end_va = 0x80fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000080000"
	        filename = ""

Region:
	              id = 360
	        start_va = 0x6a0000
	          end_va = 0x6a1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006a0000"
	        filename = ""

Region:
	              id = 361
	        start_va = 0x6b0000
	          end_va = 0x6b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006b0000"
	        filename = ""

Region:
	              id = 362
	        start_va = 0x6c0000
	          end_va = 0x6c4fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 363
	        start_va = 0x6d0000
	          end_va = 0x6d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "conhostv2.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui")

Region:
	              id = 364
	        start_va = 0x6e0000
	          end_va = 0x6e1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006e0000"
	        filename = ""

Region:
	              id = 365
	        start_va = 0x2cf0000
	          end_va = 0x2ee5fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002cf0000"
	        filename = ""

Region:
	              id = 366
	        start_va = 0x7ff872050000
	          end_va = 0x7ff8722c3fff
	       monitored = 0
	     entry_point = 0x7ff8720c0400
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll")

Region:
	              id = 367
	        start_va = 0x6f0000
	          end_va = 0x6f0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "windowsshell.manifest"
	        filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest")

Region:
	              id = 368
	        start_va = 0x700000
	          end_va = 0x701fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000700000"
	        filename = ""

Region:
	              id = 369
	        start_va = 0x2010000
	          end_va = 0x20ecfff
	       monitored = 0
	     entry_point = 0x206e0b0
	     region_type = mapped_file
	            name = "rpcss.dll"
	        filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll")

Region:
	              id = 370
	        start_va = 0x6f0000
	          end_va = 0x6f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006f0000"
	        filename = ""

Region:
	              id = 371
	        start_va = 0x2010000
	          end_va = 0x210ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002010000"
	        filename = ""

Region:
	              id = 372
	        start_va = 0x2ef0000
	          end_va = 0x30eefff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002ef0000"
	        filename = ""


Thread:
	id = 2
	os_tid = 0x1150


Thread:
	id = 3
	os_tid = 0x1148


Thread:
	id = 4
	os_tid = 0xbdc


Thread:
	id = 5
	os_tid = 0x114c


Thread:
	id = 6
	os_tid = 0x2e8


Process:
	id = "3"
	image_name = "applaunch.exe"
	filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe"
	page_root = "0x4a269000"
	os_pid = "0x774"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x13a4"
	cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe\""
	cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f72e" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 397
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 398
	        start_va = 0x30000
	          end_va = 0x31fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 399
	        start_va = 0x40000
	          end_va = 0x54fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 400
	        start_va = 0x60000
	          end_va = 0x9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 401
	        start_va = 0xa0000
	          end_va = 0x19ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 402
	        start_va = 0x1a0000
	          end_va = 0x1a3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 403
	        start_va = 0x1b0000
	          end_va = 0x1b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001b0000"
	        filename = ""

Region:
	              id = 404
	        start_va = 0x1c0000
	          end_va = 0x1c1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 405
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 406
	        start_va = 0x13c0000
	          end_va = 0x13d7fff
	       monitored = 0
	     entry_point = 0x13ceb7c
	     region_type = mapped_file
	            name = "applaunch.exe"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe")

Region:
	              id = 407
	        start_va = 0x77720000
	          end_va = 0x7789afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 408
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 409
	        start_va = 0xfffb0000
	          end_va = 0xfffd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000fffb0000"
	        filename = ""

Region:
	              id = 410
	        start_va = 0xfffe0000
	          end_va = 0x7ff87ff9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000fffe0000"
	        filename = ""

Region:
	              id = 411
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 412
	        start_va = 0x7ff880161000
	          end_va = 0x7ffffffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff880161000"
	        filename = ""

Region:
	              id = 415
	        start_va = 0x400000
	          end_va = 0x491fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 417
	        start_va = 0x530000
	          end_va = 0x53ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000530000"
	        filename = ""

Region:
	              id = 418
	        start_va = 0x662d0000
	          end_va = 0x66349fff
	       monitored = 0
	     entry_point = 0x662e3290
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 419
	        start_va = 0x66350000
	          end_va = 0x6639ffff
	       monitored = 0
	     entry_point = 0x66368180
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 420
	        start_va = 0x75600000
	          end_va = 0x756dffff
	       monitored = 0
	     entry_point = 0x75613980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 421
	        start_va = 0x663a0000
	          end_va = 0x663a7fff
	       monitored = 0
	     entry_point = 0x663a17c0
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 422
	        start_va = 0x540000
	          end_va = 0x7cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000540000"
	        filename = ""

Region:
	              id = 423
	        start_va = 0x6cc80000
	          end_va = 0x6ccd8fff
	       monitored = 1
	     entry_point = 0x6cc90780
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 424
	        start_va = 0x75600000
	          end_va = 0x756dffff
	       monitored = 0
	     entry_point = 0x75613980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 425
	        start_va = 0x75480000
	          end_va = 0x755fdfff
	       monitored = 0
	     entry_point = 0x75531b90
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 426
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 427
	        start_va = 0xffeb0000
	          end_va = 0xfffaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000ffeb0000"
	        filename = ""

Region:
	              id = 428
	        start_va = 0x4a0000
	          end_va = 0x4fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004a0000"
	        filename = ""

Region:
	              id = 429
	        start_va = 0x540000
	          end_va = 0x5fdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 430
	        start_va = 0x6d0000
	          end_va = 0x7cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006d0000"
	        filename = ""

Region:
	              id = 431
	        start_va = 0x7fff0000
	          end_va = 0x7fffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 432
	        start_va = 0x80000000
	          end_va = 0x8000ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000080000000"
	        filename = ""

Region:
	              id = 433
	        start_va = 0x20000
	          end_va = 0x23fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 434
	        start_va = 0x74650000
	          end_va = 0x746cafff
	       monitored = 0
	     entry_point = 0x7466e970
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 435
	        start_va = 0x748c0000
	          end_va = 0x7497dfff
	       monitored = 0
	     entry_point = 0x748f5630
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 436
	        start_va = 0x4a0000
	          end_va = 0x4dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004a0000"
	        filename = ""

Region:
	              id = 437
	        start_va = 0x4f0000
	          end_va = 0x4fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004f0000"
	        filename = ""

Region:
	              id = 438
	        start_va = 0x7d0000
	          end_va = 0x8cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007d0000"
	        filename = ""

Region:
	              id = 439
	        start_va = 0x76ae0000
	          end_va = 0x76b23fff
	       monitored = 0
	     entry_point = 0x76af9d80
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 440
	        start_va = 0x75260000
	          end_va = 0x7530cfff
	       monitored = 0
	     entry_point = 0x75274f00
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 441
	        start_va = 0x74450000
	          end_va = 0x7446dfff
	       monitored = 0
	     entry_point = 0x7445b640
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 442
	        start_va = 0x74440000
	          end_va = 0x74449fff
	       monitored = 0
	     entry_point = 0x74442a00
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 443
	        start_va = 0x74590000
	          end_va = 0x745e7fff
	       monitored = 0
	     entry_point = 0x745d25c0
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 444
	        start_va = 0x8d0000
	          end_va = 0xa3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008d0000"
	        filename = ""

Region:
	              id = 445
	        start_va = 0x6cc00000
	          end_va = 0x6cc78fff
	       monitored = 1
	     entry_point = 0x6cc0f82a
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 446
	        start_va = 0x77240000
	          end_va = 0x77284fff
	       monitored = 0
	     entry_point = 0x7725de90
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 447
	        start_va = 0x77290000
	          end_va = 0x7744cfff
	       monitored = 0
	     entry_point = 0x77372a10
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll")

Region:
	              id = 448
	        start_va = 0x76b30000
	          end_va = 0x76c7efff
	       monitored = 0
	     entry_point = 0x76be6820
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 449
	        start_va = 0x77450000
	          end_va = 0x77596fff
	       monitored = 0
	     entry_point = 0x77461cf0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 450
	        start_va = 0x1d0000
	          end_va = 0x1f9fff
	       monitored = 0
	     entry_point = 0x1d5680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 451
	        start_va = 0xa40000
	          end_va = 0xbc7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a40000"
	        filename = ""

Region:
	              id = 452
	        start_va = 0x74ea0000
	          end_va = 0x74ecafff
	       monitored = 0
	     entry_point = 0x74ea5680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 453
	        start_va = 0x30000
	          end_va = 0x30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 454
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 455
	        start_va = 0xbd0000
	          end_va = 0xd50fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000bd0000"
	        filename = ""

Region:
	              id = 456
	        start_va = 0x13e0000
	          end_va = 0x27dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000013e0000"
	        filename = ""

Region:
	              id = 457
	        start_va = 0x76e20000
	          end_va = 0x76e2bfff
	       monitored = 0
	     entry_point = 0x76e23930
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll")

Region:
	              id = 458
	        start_va = 0x6d0a0000
	          end_va = 0x6d0a7fff
	       monitored = 0
	     entry_point = 0x6d0a17b0
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 459
	        start_va = 0x6c540000
	          end_va = 0x6cbf0fff
	       monitored = 1
	     entry_point = 0x6c555d20
	     region_type = mapped_file
	            name = "clr.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")

Region:
	              id = 460
	        start_va = 0x6c440000
	          end_va = 0x6c534fff
	       monitored = 0
	     entry_point = 0x6c494160
	     region_type = mapped_file
	            name = "msvcr120_clr0400.dll"
	        filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll")

Region:
	              id = 461
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 462
	        start_va = 0x1f0000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 463
	        start_va = 0x4e0000
	          end_va = 0x4effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004e0000"
	        filename = ""

Region:
	              id = 464
	        start_va = 0x500000
	          end_va = 0x50ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000500000"
	        filename = ""

Region:
	              id = 465
	        start_va = 0x510000
	          end_va = 0x51ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000510000"
	        filename = ""

Region:
	              id = 466
	        start_va = 0x520000
	          end_va = 0x52ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000520000"
	        filename = ""

Region:
	              id = 467
	        start_va = 0x600000
	          end_va = 0x60ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 468
	        start_va = 0x610000
	          end_va = 0x610fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000610000"
	        filename = ""

Region:
	              id = 469
	        start_va = 0x620000
	          end_va = 0x620fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000620000"
	        filename = ""

Region:
	              id = 470
	        start_va = 0x630000
	          end_va = 0x66ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000630000"
	        filename = ""

Region:
	              id = 471
	        start_va = 0x8d0000
	          end_va = 0xa2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008d0000"
	        filename = ""

Region:
	              id = 472
	        start_va = 0xa30000
	          end_va = 0xa3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a30000"
	        filename = ""

Region:
	              id = 473
	        start_va = 0x670000
	          end_va = 0x6affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000670000"
	        filename = ""

Region:
	              id = 474
	        start_va = 0x8d0000
	          end_va = 0x9cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008d0000"
	        filename = ""

Region:
	              id = 475
	        start_va = 0xa20000
	          end_va = 0xa2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a20000"
	        filename = ""

Region:
	              id = 476
	        start_va = 0x630000
	          end_va = 0x63ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000630000"
	        filename = ""

Region:
	              id = 477
	        start_va = 0x660000
	          end_va = 0x66ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000660000"
	        filename = ""

Region:
	              id = 478
	        start_va = 0x27e0000
	          end_va = 0x47dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000027e0000"
	        filename = ""

Region:
	              id = 479
	        start_va = 0xd60000
	          end_va = 0xdfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d60000"
	        filename = ""

Region:
	              id = 480
	        start_va = 0x9d0000
	          end_va = 0xa0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009d0000"
	        filename = ""

Region:
	              id = 481
	        start_va = 0xe00000
	          end_va = 0xefffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e00000"
	        filename = ""

Region:
	              id = 482
	        start_va = 0xf00000
	          end_va = 0x1236fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 483
	        start_va = 0x6b210000
	          end_va = 0x6c437fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll")

Region:
	              id = 484
	        start_va = 0x74720000
	          end_va = 0x7480afff
	       monitored = 0
	     entry_point = 0x7475d650
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 485
	        start_va = 0x1240000
	          end_va = 0x12d0fff
	       monitored = 0
	     entry_point = 0x1278cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 486
	        start_va = 0x706b0000
	          end_va = 0x70724fff
	       monitored = 0
	     entry_point = 0x706e9a60
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 487
	        start_va = 0x47e0000
	          end_va = 0x498ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000047e0000"
	        filename = ""

Region:
	              id = 488
	        start_va = 0x630000
	          end_va = 0x63ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000630000"
	        filename = ""

Region:
	              id = 489
	        start_va = 0x640000
	          end_va = 0x64ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000640000"
	        filename = ""

Region:
	              id = 490
	        start_va = 0x6b190000
	          end_va = 0x6b20dfff
	       monitored = 1
	     entry_point = 0x6b191140
	     region_type = mapped_file
	            name = "clrjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")

Region:
	              id = 491
	        start_va = 0x753c0000
	          end_va = 0x75451fff
	       monitored = 0
	     entry_point = 0x753f8cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 492
	        start_va = 0x650000
	          end_va = 0x65ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000650000"
	        filename = ""

Region:
	              id = 493
	        start_va = 0x6a7e0000
	          end_va = 0x6b18bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\cc4e5d110dd318e8b7d61a9ed184ab74\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\cc4e5d110dd318e8b7d61a9ed184ab74\\system.ni.dll")

Region:
	              id = 494
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 495
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 496
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 497
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 498
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 499
	        start_va = 0xa10000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a10000"
	        filename = ""

Region:
	              id = 500
	        start_va = 0x1240000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 501
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 502
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 503
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 504
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 505
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 506
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 507
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 508
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 509
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 510
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 511
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 512
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 513
	        start_va = 0x6b0000
	          end_va = 0x6b3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 514
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 515
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 516
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 517
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 518
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 519
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 520
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 521
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 522
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 523
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 524
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 525
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 526
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 527
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 528
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 529
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 530
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 531
	        start_va = 0x1240000
	          end_va = 0x125ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 532
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 533
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 534
	        start_va = 0xa10000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a10000"
	        filename = ""

Region:
	              id = 535
	        start_va = 0x1240000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 536
	        start_va = 0x1250000
	          end_va = 0x125ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001250000"
	        filename = ""

Region:
	              id = 537
	        start_va = 0x756e0000
	          end_va = 0x76adefff
	       monitored = 0
	     entry_point = 0x7589b990
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 538
	        start_va = 0x75120000
	          end_va = 0x75156fff
	       monitored = 0
	     entry_point = 0x75123b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 539
	        start_va = 0x749a0000
	          end_va = 0x74e98fff
	       monitored = 0
	     entry_point = 0x74ba7610
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll")

Region:
	              id = 540
	        start_va = 0x751c0000
	          end_va = 0x7524cfff
	       monitored = 0
	     entry_point = 0x75209b90
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll")

Region:
	              id = 544
	        start_va = 0x75370000
	          end_va = 0x753b3fff
	       monitored = 0
	     entry_point = 0x75377410
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll")

Region:
	              id = 545
	        start_va = 0x75250000
	          end_va = 0x7525efff
	       monitored = 0
	     entry_point = 0x75252e40
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 546
	        start_va = 0xa10000
	          end_va = 0xa10fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 547
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 548
	        start_va = 0x1240000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 549
	        start_va = 0x1240000
	          end_va = 0x1240fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 550
	        start_va = 0x1240000
	          end_va = 0x1248fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 551
	        start_va = 0x1240000
	          end_va = 0x1240fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 552
	        start_va = 0x1240000
	          end_va = 0x1248fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 553
	        start_va = 0x1240000
	          end_va = 0x1240fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 554
	        start_va = 0x1240000
	          end_va = 0x1248fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 555
	        start_va = 0x1240000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 556
	        start_va = 0x1240000
	          end_va = 0x1240fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 557
	        start_va = 0x1240000
	          end_va = 0x1248fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 558
	        start_va = 0x1240000
	          end_va = 0x1240fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 559
	        start_va = 0x1240000
	          end_va = 0x1248fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 560
	        start_va = 0x1240000
	          end_va = 0x1240fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 561
	        start_va = 0x1240000
	          end_va = 0x1248fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 562
	        start_va = 0x1240000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 563
	        start_va = 0x1240000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 564
	        start_va = 0x6a0c0000
	          end_va = 0x6a7d1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.core.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\abad45b9cc652ba7e38c4c837234c0ab\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\abad45b9cc652ba7e38c4c837234c0ab\\system.core.ni.dll")

Region:
	              id = 565
	        start_va = 0x1240000
	          end_va = 0x124ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001240000"
	        filename = ""

Region:
	              id = 566
	        start_va = 0x6c0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006c0000"
	        filename = ""

Region:
	              id = 567
	        start_va = 0x69e20000
	          end_va = 0x69f3bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\d2f554a0c84513cd793fdcd77a86dab1\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.management\\d2f554a0c84513cd793fdcd77a86dab1\\system.management.ni.dll")

Region:
	              id = 568
	        start_va = 0x1260000
	          end_va = 0x129ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001260000"
	        filename = ""

Region:
	              id = 569
	        start_va = 0x12a0000
	          end_va = 0x139ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012a0000"
	        filename = ""

Region:
	              id = 570
	        start_va = 0xffe60000
	          end_va = 0xffeaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000ffe60000"
	        filename = ""

Region:
	              id = 571
	        start_va = 0xffe50000
	          end_va = 0xffe5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000ffe50000"
	        filename = ""

Region:
	              id = 572
	        start_va = 0x6c0000
	          end_va = 0x6c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006c0000"
	        filename = ""

Region:
	              id = 573
	        start_va = 0x76c80000
	          end_va = 0x76d03fff
	       monitored = 0
	     entry_point = 0x76ca6220
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 574
	        start_va = 0x1240000
	          end_va = 0x1240fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001240000"
	        filename = ""

Region:
	              id = 575
	        start_va = 0x69e00000
	          end_va = 0x69e1bfff
	       monitored = 0
	     entry_point = 0x69e0aa90
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wmiutils.dll")

Region:
	              id = 576
	        start_va = 0x69d90000
	          end_va = 0x69df6fff
	       monitored = 0
	     entry_point = 0x69dab610
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll")

Region:
	              id = 577
	        start_va = 0x75310000
	          end_va = 0x7536efff
	       monitored = 0
	     entry_point = 0x75314af0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 578
	        start_va = 0x740f0000
	          end_va = 0x7410afff
	       monitored = 0
	     entry_point = 0x740f9050
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 579
	        start_va = 0x47e0000
	          end_va = 0x481ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000047e0000"
	        filename = ""

Region:
	              id = 580
	        start_va = 0x4820000
	          end_va = 0x491ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004820000"
	        filename = ""

Region:
	              id = 581
	        start_va = 0x4920000
	          end_va = 0x495ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004920000"
	        filename = ""

Region:
	              id = 582
	        start_va = 0x4980000
	          end_va = 0x498ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004980000"
	        filename = ""

Region:
	              id = 583
	        start_va = 0x4990000
	          end_va = 0x4a8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004990000"
	        filename = ""

Region:
	              id = 584
	        start_va = 0x4a90000
	          end_va = 0x4acffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a90000"
	        filename = ""

Region:
	              id = 585
	        start_va = 0x4ad0000
	          end_va = 0x4bcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ad0000"
	        filename = ""

Region:
	              id = 586
	        start_va = 0x4bd0000
	          end_va = 0x4c0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004bd0000"
	        filename = ""

Region:
	              id = 587
	        start_va = 0x4c10000
	          end_va = 0x4d0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c10000"
	        filename = ""

Region:
	              id = 588
	        start_va = 0x6d090000
	          end_va = 0x6d09cfff
	       monitored = 0
	     entry_point = 0x6d093520
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll")

Region:
	              id = 589
	        start_va = 0x69d80000
	          end_va = 0x69d89fff
	       monitored = 1
	     entry_point = 0x69d839f9
	     region_type = mapped_file
	            name = "wminet_utils.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wminet_utils.dll")

Region:
	              id = 590
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 591
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 592
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 593
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 594
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 595
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 596
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 597
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 598
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 599
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 600
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 601
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 602
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 603
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 604
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 605
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 606
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 607
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 608
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 609
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 610
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 611
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 612
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 613
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 614
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 615
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 616
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 617
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 618
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 619
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 620
	        start_va = 0x13b0000
	          end_va = 0x13bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013b0000"
	        filename = ""

Region:
	              id = 621
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 622
	        start_va = 0x13b0000
	          end_va = 0x13bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013b0000"
	        filename = ""

Region:
	              id = 623
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 624
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 625
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 626
	        start_va = 0x13b0000
	          end_va = 0x13bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013b0000"
	        filename = ""

Region:
	              id = 1078
	        start_va = 0x69d60000
	          end_va = 0x69d70fff
	       monitored = 0
	     entry_point = 0x69d68fa0
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll")

Region:
	              id = 1079
	        start_va = 0x69ca0000
	          end_va = 0x69d5efff
	       monitored = 0
	     entry_point = 0x69cd1e80
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll")

Region:
	              id = 1080
	        start_va = 0x4bd0000
	          end_va = 0x4c0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004bd0000"
	        filename = ""

Region:
	              id = 1081
	        start_va = 0x4c10000
	          end_va = 0x4d0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c10000"
	        filename = ""

Region:
	              id = 1579
	        start_va = 0x13a0000
	          end_va = 0x13a2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1645
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1646
	        start_va = 0x4d10000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d10000"
	        filename = ""

Region:
	              id = 1647
	        start_va = 0x4d50000
	          end_va = 0x4e4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d50000"
	        filename = ""

Region:
	              id = 1650
	        start_va = 0x13a0000
	          end_va = 0x13a2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1651
	        start_va = 0x6ddf0000
	          end_va = 0x6de02fff
	       monitored = 0
	     entry_point = 0x6ddf9950
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 1652
	        start_va = 0x6d230000
	          end_va = 0x6d25efff
	       monitored = 0
	     entry_point = 0x6d2495e0
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1653
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1654
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1655
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1656
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1657
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1658
	        start_va = 0x69bb0000
	          end_va = 0x69c9efff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.configuration.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\1b51e779650e38bb712f3e535efcf132\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\1b51e779650e38bb712f3e535efcf132\\system.configuration.ni.dll")

Region:
	              id = 1659
	        start_va = 0x69490000
	          end_va = 0x69ba5fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.xml.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\1f87b5140145c221b5201351fffc52d8\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\1f87b5140145c221b5201351fffc52d8\\system.xml.ni.dll")

Region:
	              id = 1660
	        start_va = 0x13a0000
	          end_va = 0x13affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1661
	        start_va = 0x13a0000
	          end_va = 0x13b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000013a0000"
	        filename = ""

Region:
	              id = 1662
	        start_va = 0x693e0000
	          end_va = 0x69484fff
	       monitored = 0
	     entry_point = 0x693fac50
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll")

Region:
	              id = 1663
	        start_va = 0x693b0000
	          end_va = 0x693d2fff
	       monitored = 0
	     entry_point = 0x693b5570
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll")

Region:
	              id = 1664
	        start_va = 0x693a0000
	          end_va = 0x693affff
	       monitored = 0
	     entry_point = 0x693a3820
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll")

Region:
	              id = 1665
	        start_va = 0x4960000
	          end_va = 0x4963fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004960000"
	        filename = ""

Region:
	              id = 1666
	        start_va = 0x71f30000
	          end_va = 0x71f7efff
	       monitored = 0
	     entry_point = 0x71f3d850
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 1667
	        start_va = 0x4970000
	          end_va = 0x4971fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004970000"
	        filename = ""

Region:
	              id = 1668
	        start_va = 0x4d10000
	          end_va = 0x4d10fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004d10000"
	        filename = ""

Region:
	              id = 1669
	        start_va = 0x4d20000
	          end_va = 0x4dfffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 1670
	        start_va = 0x4e00000
	          end_va = 0x4e3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e00000"
	        filename = ""

Region:
	              id = 1671
	        start_va = 0x4e40000
	          end_va = 0x4f3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e40000"
	        filename = ""

Region:
	              id = 1672
	        start_va = 0x6dff0000
	          end_va = 0x6e08afff
	       monitored = 0
	     entry_point = 0x6e02f7e0
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll")

Region:
	              id = 1673
	        start_va = 0x6e090000
	          end_va = 0x6e0a1fff
	       monitored = 0
	     entry_point = 0x6e094510
	     region_type = mapped_file
	            name = "ondemandconnroutehelper.dll"
	        filename = "\\Windows\\SysWOW64\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\syswow64\\ondemandconnroutehelper.dll")

Region:
	              id = 1674
	        start_va = 0x71e70000
	          end_va = 0x71e9efff
	       monitored = 0
	     entry_point = 0x71e7bb70
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 1675
	        start_va = 0x74980000
	          end_va = 0x74986fff
	       monitored = 0
	     entry_point = 0x74981e10
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 1676
	        start_va = 0x71df0000
	          end_va = 0x71e02fff
	       monitored = 0
	     entry_point = 0x71df25d0
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll")

Region:
	              id = 1677
	        start_va = 0x71dd0000
	          end_va = 0x71de3fff
	       monitored = 0
	     entry_point = 0x71dd3c10
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll")

Region:
	              id = 1678
	        start_va = 0x4f40000
	          end_va = 0x4f7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f40000"
	        filename = ""

Region:
	              id = 1679
	        start_va = 0x4f80000
	          end_va = 0x507ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f80000"
	        filename = ""

Region:
	              id = 1680
	        start_va = 0x71ea0000
	          end_va = 0x71f23fff
	       monitored = 0
	     entry_point = 0x71ec6530
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 1681
	        start_va = 0x71e60000
	          end_va = 0x71e67fff
	       monitored = 0
	     entry_point = 0x71e61920
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 1682
	        start_va = 0x71e10000
	          end_va = 0x71e56fff
	       monitored = 0
	     entry_point = 0x71e258d0
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 1687
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 1688
	        start_va = 0x5080000
	          end_va = 0x50bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 1689
	        start_va = 0x50c0000
	          end_va = 0x51bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000050c0000"
	        filename = ""

Region:
	              id = 1691
	        start_va = 0x5080000
	          end_va = 0x50bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 1692
	        start_va = 0x50c0000
	          end_va = 0x51bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000050c0000"
	        filename = ""

Region:
	              id = 1695
	        start_va = 0x5080000
	          end_va = 0x517ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 1696
	        start_va = 0x5180000
	          end_va = 0x51bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005180000"
	        filename = ""

Region:
	              id = 1697
	        start_va = 0x51c0000
	          end_va = 0x52bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051c0000"
	        filename = ""

Region:
	              id = 1711
	        start_va = 0x5180000
	          end_va = 0x5184fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll"
	        filename = "\\Windows\\SysWOW64\\winnlsres.dll" (normalized: "c:\\windows\\syswow64\\winnlsres.dll")

Region:
	              id = 1712
	        start_va = 0x5190000
	          end_va = 0x558afff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005190000"
	        filename = ""

Region:
	              id = 1713
	        start_va = 0x5590000
	          end_va = 0x559ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\winnlsres.dll.mui")

Region:
	              id = 1718
	        start_va = 0x55a0000
	          end_va = 0x5669fff
	       monitored = 0
	     entry_point = 0x55a21f0
	     region_type = mapped_file
	            name = "iexplore.exe"
	        filename = "\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")

Region:
	              id = 1719
	        start_va = 0x5670000
	          end_va = 0x5671fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "iexplore.exe.mui"
	        filename = "\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")

Region:
	              id = 1720
	        start_va = 0x55a0000
	          end_va = 0x5669fff
	       monitored = 0
	     entry_point = 0x55a21f0
	     region_type = mapped_file
	            name = "iexplore.exe"
	        filename = "\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")

Region:
	              id = 1721
	        start_va = 0x5670000
	          end_va = 0x5671fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "iexplore.exe.mui"
	        filename = "\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")

Region:
	              id = 1723
	        start_va = 0x55a0000
	          end_va = 0x5669fff
	       monitored = 0
	     entry_point = 0x55a3a40
	     region_type = mapped_file
	            name = "iexplore.exe"
	        filename = "\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")

Region:
	              id = 1724
	        start_va = 0x5670000
	          end_va = 0x5671fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "iexplore.exe.mui"
	        filename = "\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui")

Region:
	              id = 1725
	        start_va = 0x55a0000
	          end_va = 0x5669fff
	       monitored = 0
	     entry_point = 0x55a3a40
	     region_type = mapped_file
	            name = "iexplore.exe"
	        filename = "\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")

Region:
	              id = 1726
	        start_va = 0x5670000
	          end_va = 0x5671fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "iexplore.exe.mui"
	        filename = "\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui")

Region:
	              id = 1727
	        start_va = 0x55a0000
	          end_va = 0x569ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000055a0000"
	        filename = ""

Region:
	              id = 1728
	        start_va = 0x56a0000
	          end_va = 0x56affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1729
	        start_va = 0x56a0000
	          end_va = 0x56dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1730
	        start_va = 0x56e0000
	          end_va = 0x57dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056e0000"
	        filename = ""

Region:
	              id = 1734
	        start_va = 0x56a0000
	          end_va = 0x56a2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1735
	        start_va = 0x56a0000
	          end_va = 0x56dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1736
	        start_va = 0x56e0000
	          end_va = 0x57dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056e0000"
	        filename = ""

Region:
	              id = 1737
	        start_va = 0x56a0000
	          end_va = 0x56a2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1738
	        start_va = 0x56a0000
	          end_va = 0x56affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1739
	        start_va = 0x56a0000
	          end_va = 0x56affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1740
	        start_va = 0x56a0000
	          end_va = 0x56dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1741
	        start_va = 0x56e0000
	          end_va = 0x57dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056e0000"
	        filename = ""

Region:
	              id = 1748
	        start_va = 0x56a0000
	          end_va = 0x56a2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1749
	        start_va = 0x56a0000
	          end_va = 0x56dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1750
	        start_va = 0x56e0000
	          end_va = 0x57dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056e0000"
	        filename = ""

Region:
	              id = 1753
	        start_va = 0x56a0000
	          end_va = 0x56affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1754
	        start_va = 0x56a0000
	          end_va = 0x56dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1755
	        start_va = 0x56e0000
	          end_va = 0x57dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056e0000"
	        filename = ""

Region:
	              id = 1757
	        start_va = 0x6cd20000
	          end_va = 0x6cd29fff
	       monitored = 0
	     entry_point = 0x6cd23200
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll")

Region:
	              id = 1758
	        start_va = 0x6d170000
	          end_va = 0x6d1d3fff
	       monitored = 0
	     entry_point = 0x6d18afd0
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\SysWOW64\\schannel.dll" (normalized: "c:\\windows\\syswow64\\schannel.dll")

Region:
	              id = 1759
	        start_va = 0x775a0000
	          end_va = 0x77717fff
	       monitored = 0
	     entry_point = 0x775f8a90
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 1760
	        start_va = 0x74810000
	          end_va = 0x7481dfff
	       monitored = 0
	     entry_point = 0x74815410
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 1761
	        start_va = 0x56a0000
	          end_va = 0x56a1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1762
	        start_va = 0x6d160000
	          end_va = 0x6d16ffff
	       monitored = 0
	     entry_point = 0x6d164600
	     region_type = mapped_file
	            name = "mskeyprotect.dll"
	        filename = "\\Windows\\SysWOW64\\mskeyprotect.dll" (normalized: "c:\\windows\\syswow64\\mskeyprotect.dll")

Region:
	              id = 1763
	        start_va = 0x6d140000
	          end_va = 0x6d15ffff
	       monitored = 0
	     entry_point = 0x6d14d120
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll")

Region:
	              id = 1764
	        start_va = 0x6d110000
	          end_va = 0x6d13bfff
	       monitored = 0
	     entry_point = 0x6d12bb10
	     region_type = mapped_file
	            name = "ntasn1.dll"
	        filename = "\\Windows\\SysWOW64\\ntasn1.dll" (normalized: "c:\\windows\\syswow64\\ntasn1.dll")

Region:
	              id = 1765
	        start_va = 0x6d0f0000
	          end_va = 0x6d109fff
	       monitored = 0
	     entry_point = 0x6d0ffa70
	     region_type = mapped_file
	            name = "ncryptsslp.dll"
	        filename = "\\Windows\\SysWOW64\\ncryptsslp.dll" (normalized: "c:\\windows\\syswow64\\ncryptsslp.dll")

Region:
	              id = 1766
	        start_va = 0x56a0000
	          end_va = 0x56dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1767
	        start_va = 0x56e0000
	          end_va = 0x57dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056e0000"
	        filename = ""

Region:
	              id = 1768
	        start_va = 0x57e0000
	          end_va = 0x5841fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mscorrc.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll")

Region:
	              id = 1769
	        start_va = 0x5850000
	          end_va = 0x58cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005850000"
	        filename = ""


Thread:
	id = 8
	os_tid = 0xc04

	[0119.323] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0119.498] RoInitialize () returned 0x1
	[0119.498] RoUninitialize () returned 0x0
	[0122.585] EtwEventRegister (in: ProviderId=0x27e8e1c, EnableCallback=0x12505be, CallbackContext=0x0, RegHandle=0x27e8df8 | out: RegHandle=0x27e8df8) returned 0x0
	[0122.594] EtwEventSetInformation (RegHandle=0x6e0ad0, InformationClass=0x1c, EventInformation=0x2, InformationLength=0x27e8dac) returned 0x0
	[0122.647] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", nBufferLength=0x105, lpBuffer=0x19d290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", lpFilePart=0x0) returned 0x3b
	[0128.926] CoTaskMemAlloc (cb=0x20c) returned 0x729f28
	[0128.926] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x729f28 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0128.939] CoTaskMemFree (pv=0x729f28) 
	[0128.951] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19bb0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0129.095] CoTaskMemAlloc (cb=0x20c) returned 0x729f28
	[0129.095] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x729f28 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local") returned 0x0
	[0129.096] CoTaskMemFree (pv=0x729f28) 
	[0129.096] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19bb0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23
	[0129.130] GetUserNameW (in: lpBuffer=0x19be30, pcbBuffer=0x19c0a8 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x19c0a8) returned 1
	[0129.185] GetComputerNameW (in: lpBuffer=0x19be30, nSize=0x19c0a8 | out: lpBuffer="XC64ZB", nSize=0x19c0a8) returned 1
	[0129.189] GetTimeZoneInformation (in: lpTimeZoneInformation=0x19beac | out: lpTimeZoneInformation=0x19beac) returned 0x1
	[0129.192] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x19bd00 | out: pTimeZoneInformation=0x19bd00) returned 0x1
	[0129.201] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x19bde4 | out: phkResult=0x19bde4*=0x2b8) returned 0x0
	[0129.202] RegQueryValueExW (in: hKey=0x2b8, lpValueName="TZI", lpReserved=0x0, lpType=0x19be00, lpData=0x0, lpcbData=0x19bdfc*=0x0 | out: lpType=0x19be00*=0x3, lpData=0x0, lpcbData=0x19bdfc*=0x2c) returned 0x0
	[0129.202] RegQueryValueExW (in: hKey=0x2b8, lpValueName="TZI", lpReserved=0x0, lpType=0x19be00, lpData=0x27f04dc, lpcbData=0x19bdfc*=0x2c | out: lpType=0x19be00*=0x3, lpData=0x27f04dc*, lpcbData=0x19bdfc*=0x2c) returned 0x0
	[0129.203] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x19bc38 | out: phkResult=0x19bc38*=0x0) returned 0x2
	[0129.204] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19bdd8, lpData=0x0, lpcbData=0x19bdd4*=0x0 | out: lpType=0x19bdd8*=0x1, lpData=0x0, lpcbData=0x19bdd4*=0x20) returned 0x0
	[0129.204] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19bdd8, lpData=0x27f09e8, lpcbData=0x19bdd4*=0x20 | out: lpType=0x19bdd8*=0x1, lpData="@tzres.dll,-320", lpcbData=0x19bdd4*=0x20) returned 0x0
	[0129.205] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19bdd8, lpData=0x0, lpcbData=0x19bdd4*=0x0 | out: lpType=0x19bdd8*=0x1, lpData=0x0, lpcbData=0x19bdd4*=0x20) returned 0x0
	[0129.205] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19bdd8, lpData=0x27f0a40, lpcbData=0x19bdd4*=0x20 | out: lpType=0x19bdd8*=0x1, lpData="@tzres.dll,-322", lpcbData=0x19bdd4*=0x20) returned 0x0
	[0129.205] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19bdd8, lpData=0x0, lpcbData=0x19bdd4*=0x0 | out: lpType=0x19bdd8*=0x1, lpData=0x0, lpcbData=0x19bdd4*=0x20) returned 0x0
	[0129.205] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19bdd8, lpData=0x27f0a98, lpcbData=0x19bdd4*=0x20 | out: lpType=0x19bdd8*=0x1, lpData="@tzres.dll,-321", lpcbData=0x19bdd4*=0x20) returned 0x0
	[0129.206] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.207] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x72afe8 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0129.208] CoTaskMemFree (pv=0x72afe8) 
	[0129.209] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.210] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19bdf4, pwszFileMUIPath=0x72afe8, pcchFileMUIPath=0x19bdf8, pululEnumerator=0x19bdec | out: pwszLanguage=0x0, pcchLanguage=0x19bdf4, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19bdf8, pululEnumerator=0x19bdec) returned 1
	[0129.275] CoTaskMemFree (pv=0x0) 
	[0129.275] CoTaskMemFree (pv=0x72afe8) 
	[0129.276] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1240001
	[0129.301] CoTaskMemAlloc (cb=0x3ec) returned 0x72afe8
	[0129.301] LoadStringW (in: hInstance=0x1240001, uID=0x140, lpBuffer=0x72afe8, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c
	[0129.302] CoTaskMemFree (pv=0x72afe8) 
	[0129.302] FreeLibrary (hLibModule=0x1240001) returned 1
	[0129.304] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.304] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x72afe8 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0129.304] CoTaskMemFree (pv=0x72afe8) 
	[0129.304] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.304] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19bdf4, pwszFileMUIPath=0x72afe8, pcchFileMUIPath=0x19bdf8, pululEnumerator=0x19bdec | out: pwszLanguage=0x0, pcchLanguage=0x19bdf4, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19bdf8, pululEnumerator=0x19bdec) returned 1
	[0129.309] CoTaskMemFree (pv=0x0) 
	[0129.309] CoTaskMemFree (pv=0x72afe8) 
	[0129.309] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1240001
	[0129.312] CoTaskMemAlloc (cb=0x3ec) returned 0x72afe8
	[0129.312] LoadStringW (in: hInstance=0x1240001, uID=0x142, lpBuffer=0x72afe8, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17
	[0129.312] CoTaskMemFree (pv=0x72afe8) 
	[0129.312] FreeLibrary (hLibModule=0x1240001) returned 1
	[0129.313] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.313] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x72afe8 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0129.313] CoTaskMemFree (pv=0x72afe8) 
	[0129.313] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.313] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19bdf4, pwszFileMUIPath=0x72afe8, pcchFileMUIPath=0x19bdf8, pululEnumerator=0x19bdec | out: pwszLanguage=0x0, pcchLanguage=0x19bdf4, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19bdf8, pululEnumerator=0x19bdec) returned 1
	[0129.316] CoTaskMemFree (pv=0x0) 
	[0129.316] CoTaskMemFree (pv=0x72afe8) 
	[0129.317] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1240001
	[0129.320] CoTaskMemAlloc (cb=0x3ec) returned 0x72afe8
	[0129.320] LoadStringW (in: hInstance=0x1240001, uID=0x141, lpBuffer=0x72afe8, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17
	[0129.320] CoTaskMemFree (pv=0x72afe8) 
	[0129.320] FreeLibrary (hLibModule=0x1240001) returned 1
	[0129.321] RegCloseKey (hKey=0x2b8) returned 0x0
	[0129.394] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Russian Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x19bf30 | out: phkResult=0x19bf30*=0x2b8) returned 0x0
	[0129.394] RegQueryValueExW (in: hKey=0x2b8, lpValueName="TZI", lpReserved=0x0, lpType=0x19bf4c, lpData=0x0, lpcbData=0x19bf48*=0x0 | out: lpType=0x19bf4c*=0x3, lpData=0x0, lpcbData=0x19bf48*=0x2c) returned 0x0
	[0129.394] RegQueryValueExW (in: hKey=0x2b8, lpValueName="TZI", lpReserved=0x0, lpType=0x19bf4c, lpData=0x27f47bc, lpcbData=0x19bf48*=0x2c | out: lpType=0x19bf4c*=0x3, lpData=0x27f47bc*, lpcbData=0x19bf48*=0x2c) returned 0x0
	[0129.394] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Russian Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x19bd84 | out: phkResult=0x19bd84*=0x2c4) returned 0x0
	[0129.395] RegQueryValueExW (in: hKey=0x2c4, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x19bda0, lpData=0x0, lpcbData=0x19bd9c*=0x0 | out: lpType=0x19bda0*=0x4, lpData=0x0, lpcbData=0x19bd9c*=0x4) returned 0x0
	[0129.395] RegQueryValueExW (in: hKey=0x2c4, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x19bda0, lpData=0x19bd8c, lpcbData=0x19bd9c*=0x4 | out: lpType=0x19bda0*=0x4, lpData=0x19bd8c*=0x7da, lpcbData=0x19bd9c*=0x4) returned 0x0
	[0129.395] RegQueryValueExW (in: hKey=0x2c4, lpValueName="LastEntry", lpReserved=0x0, lpType=0x19bda0, lpData=0x0, lpcbData=0x19bd9c*=0x0 | out: lpType=0x19bda0*=0x4, lpData=0x0, lpcbData=0x19bd9c*=0x4) returned 0x0
	[0129.395] RegQueryValueExW (in: hKey=0x2c4, lpValueName="LastEntry", lpReserved=0x0, lpType=0x19bda0, lpData=0x19bd8c, lpcbData=0x19bd9c*=0x4 | out: lpType=0x19bda0*=0x4, lpData=0x19bd8c*=0x7df, lpcbData=0x19bd9c*=0x4) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2010", lpReserved=0x0, lpType=0x19bda0, lpData=0x0, lpcbData=0x19bd9c*=0x0 | out: lpType=0x19bda0*=0x3, lpData=0x0, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2010", lpReserved=0x0, lpType=0x19bda0, lpData=0x27f4bb8, lpcbData=0x19bd9c*=0x2c | out: lpType=0x19bda0*=0x3, lpData=0x27f4bb8*, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2011", lpReserved=0x0, lpType=0x19bda0, lpData=0x0, lpcbData=0x19bd9c*=0x0 | out: lpType=0x19bda0*=0x3, lpData=0x0, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2011", lpReserved=0x0, lpType=0x19bda0, lpData=0x27f4c78, lpcbData=0x19bd9c*=0x2c | out: lpType=0x19bda0*=0x3, lpData=0x27f4c78*, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2012", lpReserved=0x0, lpType=0x19bda0, lpData=0x0, lpcbData=0x19bd9c*=0x0 | out: lpType=0x19bda0*=0x3, lpData=0x0, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2012", lpReserved=0x0, lpType=0x19bda0, lpData=0x27f4d24, lpcbData=0x19bd9c*=0x2c | out: lpType=0x19bda0*=0x3, lpData=0x27f4d24*, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2013", lpReserved=0x0, lpType=0x19bda0, lpData=0x0, lpcbData=0x19bd9c*=0x0 | out: lpType=0x19bda0*=0x3, lpData=0x0, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2013", lpReserved=0x0, lpType=0x19bda0, lpData=0x27f4dd8, lpcbData=0x19bd9c*=0x2c | out: lpType=0x19bda0*=0x3, lpData=0x27f4dd8*, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.396] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2014", lpReserved=0x0, lpType=0x19bda0, lpData=0x0, lpcbData=0x19bd9c*=0x0 | out: lpType=0x19bda0*=0x3, lpData=0x0, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.397] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2014", lpReserved=0x0, lpType=0x19bda0, lpData=0x27f4e70, lpcbData=0x19bd9c*=0x2c | out: lpType=0x19bda0*=0x3, lpData=0x27f4e70*, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.397] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2015", lpReserved=0x0, lpType=0x19bda0, lpData=0x0, lpcbData=0x19bd9c*=0x0 | out: lpType=0x19bda0*=0x3, lpData=0x0, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.397] RegQueryValueExW (in: hKey=0x2c4, lpValueName="2015", lpReserved=0x0, lpType=0x19bda0, lpData=0x27f4f34, lpcbData=0x19bd9c*=0x2c | out: lpType=0x19bda0*=0x3, lpData=0x27f4f34*, lpcbData=0x19bd9c*=0x2c) returned 0x0
	[0129.397] RegCloseKey (hKey=0x2c4) returned 0x0
	[0129.397] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19bf24, lpData=0x0, lpcbData=0x19bf20*=0x0 | out: lpType=0x19bf24*=0x1, lpData=0x0, lpcbData=0x19bf20*=0x22) returned 0x0
	[0129.397] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19bf24, lpData=0x27f4f8c, lpcbData=0x19bf20*=0x22 | out: lpType=0x19bf24*=0x1, lpData="@tzres.dll,-1830", lpcbData=0x19bf20*=0x22) returned 0x0
	[0129.397] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19bf24, lpData=0x0, lpcbData=0x19bf20*=0x0 | out: lpType=0x19bf24*=0x1, lpData=0x0, lpcbData=0x19bf20*=0x22) returned 0x0
	[0129.397] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19bf24, lpData=0x27f4fec, lpcbData=0x19bf20*=0x22 | out: lpType=0x19bf24*=0x1, lpData="@tzres.dll,-1832", lpcbData=0x19bf20*=0x22) returned 0x0
	[0129.398] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19bf24, lpData=0x0, lpcbData=0x19bf20*=0x0 | out: lpType=0x19bf24*=0x1, lpData=0x0, lpcbData=0x19bf20*=0x22) returned 0x0
	[0129.398] RegQueryValueExW (in: hKey=0x2b8, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19bf24, lpData=0x27f504c, lpcbData=0x19bf20*=0x22 | out: lpType=0x19bf24*=0x1, lpData="@tzres.dll,-1831", lpcbData=0x19bf20*=0x22) returned 0x0
	[0129.398] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.398] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x72afe8 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0129.398] CoTaskMemFree (pv=0x72afe8) 
	[0129.398] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.398] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19bf40, pwszFileMUIPath=0x72afe8, pcchFileMUIPath=0x19bf44, pululEnumerator=0x19bf38 | out: pwszLanguage=0x0, pcchLanguage=0x19bf40, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19bf44, pululEnumerator=0x19bf38) returned 1
	[0129.403] CoTaskMemFree (pv=0x0) 
	[0129.403] CoTaskMemFree (pv=0x72afe8) 
	[0129.403] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1240001
	[0129.408] CoTaskMemAlloc (cb=0x3ec) returned 0x72afe8
	[0129.408] LoadStringW (in: hInstance=0x1240001, uID=0x726, lpBuffer=0x72afe8, cchBufferMax=500 | out: lpBuffer="(UTC+03:00) Moscow, St. Petersburg, Volgograd (RTZ 2)") returned 0x35
	[0129.408] CoTaskMemFree (pv=0x72afe8) 
	[0129.408] FreeLibrary (hLibModule=0x1240001) returned 1
	[0129.409] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.409] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x72afe8 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0129.409] CoTaskMemFree (pv=0x72afe8) 
	[0129.409] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.409] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19bf40, pwszFileMUIPath=0x72afe8, pcchFileMUIPath=0x19bf44, pululEnumerator=0x19bf38 | out: pwszLanguage=0x0, pcchLanguage=0x19bf40, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19bf44, pululEnumerator=0x19bf38) returned 1
	[0129.412] CoTaskMemFree (pv=0x0) 
	[0129.412] CoTaskMemFree (pv=0x72afe8) 
	[0129.412] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1240001
	[0129.416] CoTaskMemAlloc (cb=0x3ec) returned 0x72afe8
	[0129.416] LoadStringW (in: hInstance=0x1240001, uID=0x728, lpBuffer=0x72afe8, cchBufferMax=500 | out: lpBuffer="Russia TZ 2 Standard Time") returned 0x19
	[0129.416] CoTaskMemFree (pv=0x72afe8) 
	[0129.416] FreeLibrary (hLibModule=0x1240001) returned 1
	[0129.416] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.417] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x72afe8 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0129.417] CoTaskMemFree (pv=0x72afe8) 
	[0129.417] CoTaskMemAlloc (cb=0x20c) returned 0x72afe8
	[0129.417] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19bf40, pwszFileMUIPath=0x72afe8, pcchFileMUIPath=0x19bf44, pululEnumerator=0x19bf38 | out: pwszLanguage=0x0, pcchLanguage=0x19bf40, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19bf44, pululEnumerator=0x19bf38) returned 1
	[0129.420] CoTaskMemFree (pv=0x0) 
	[0129.420] CoTaskMemFree (pv=0x72afe8) 
	[0129.420] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1240001
	[0129.424] CoTaskMemAlloc (cb=0x3ec) returned 0x72afe8
	[0129.425] LoadStringW (in: hInstance=0x1240001, uID=0x727, lpBuffer=0x72afe8, cchBufferMax=500 | out: lpBuffer="Russia TZ 2 Daylight Time") returned 0x19
	[0129.425] CoTaskMemFree (pv=0x72afe8) 
	[0129.425] FreeLibrary (hLibModule=0x1240001) returned 1
	[0129.426] RegCloseKey (hKey=0x2b8) returned 0x0
	[0131.796] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b8
	[0131.798] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2bc
	[0131.828] SetEvent (hEvent=0x2bc) returned 1
	[0131.873] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19d6c4*=0x2b8, lpdwindex=0x19d4e4 | out: lpdwindex=0x19d4e4) returned 0x0
	[0134.449] CoGetContextToken (in: pToken=0x19d590 | out: pToken=0x19d590) returned 0x0
	[0134.449] CoGetContextToken (in: pToken=0x19d4f0 | out: pToken=0x19d4f0) returned 0x0
	[0134.449] WbemDefPath:IUnknown:QueryInterface (in: This=0x72bc20, riid=0x19d5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19d5bc | out: ppvObject=0x19d5bc*=0x72bc20) returned 0x0
	[0134.450] WbemDefPath:IUnknown:AddRef (This=0x72bc20) returned 0x3
	[0134.450] WbemDefPath:IUnknown:Release (This=0x72bc20) returned 0x2
	[0134.456] WbemDefPath:IWbemPath:SetText (This=0x72bc20, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0134.458] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x72bc20, puCount=0x19d740 | out: puCount=0x19d740*=0x2) returned 0x0
	[0134.459] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d73c*=0x0, pszText=0x0 | out: puBuffLength=0x19d73c*=0xf, pszText=0x0) returned 0x0
	[0134.460] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d73c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d73c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0134.461] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x72bc20, puCount=0x19d72c | out: puCount=0x19d72c*=0x2) returned 0x0
	[0134.461] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d728*=0x0, pszText=0x0 | out: puBuffLength=0x19d728*=0xf, pszText=0x0) returned 0x0
	[0134.461] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d728*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d728*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0134.690] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19d5e0*=0x368, lpdwindex=0x19d494 | out: lpdwindex=0x19d494) returned 0x0
	[0141.078] CoGetContextToken (in: pToken=0x19d3a0 | out: pToken=0x19d3a0) returned 0x0
	[0141.078] CoGetContextToken (in: pToken=0x19d348 | out: pToken=0x19d348) returned 0x0
	[0141.078] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d328 | out: ppvObject=0x19d328*=0x712148) returned 0x0
	[0141.079] CObjectContext::ContextCallback () returned 0x0
	[0141.148] IUnknown:Release (This=0x712148) returned 0x1
	[0141.148] CoUnmarshalInterface (in: pStm=0x743890, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d390 | out: ppv=0x19d390*=0x7479d0) returned 0x0
	[0141.149] CoMarshalInterface (pStm=0x743890, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7479d0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0141.149] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d234 | out: ppvObject=0x19d234*=0x7479d0) returned 0x0
	[0141.150] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d1f0 | out: ppvObject=0x19d1f0*=0x0) returned 0x80004002
	[0141.151] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d00c | out: ppvObject=0x19d00c*=0x0) returned 0x80004002
	[0141.151] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cde4 | out: ppvObject=0x19cde4*=0x0) returned 0x80004002
	[0141.152] WbemLocator:IUnknown:AddRef (This=0x7479d0) returned 0x3
	[0141.152] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cb4c | out: ppvObject=0x19cb4c*=0x0) returned 0x80004002
	[0141.152] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cafc | out: ppvObject=0x19cafc*=0x0) returned 0x80004002
	[0141.152] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb08 | out: ppvObject=0x19cb08*=0x74792c) returned 0x0
	[0141.153] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74792c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cb10 | out: pCid=0x19cb10*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0141.153] WbemLocator:IUnknown:Release (This=0x74792c) returned 0x3
	[0141.153] CoGetContextToken (in: pToken=0x19cb68 | out: pToken=0x19cb68) returned 0x0
	[0141.153] IUnknown:QueryInterface (in: This=0x712080, riid=0x6c5d4564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb2c | out: ppvObject=0x19cb2c*=0x71208c) returned 0x0
	[0141.153] IComThreadingInfo:GetCurrentApartmentType (in: This=0x71208c, pAptType=0x19cb70 | out: pAptType=0x19cb70*=3) returned 0x0
	[0141.153] IUnknown:Release (This=0x71208c) returned 0x0
	[0141.153] CoGetObjectContext (in: riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x745394 | out: ppv=0x745394*=0x712080) returned 0x0
	[0141.153] CoGetContextToken (in: pToken=0x19cf70 | out: pToken=0x19cf70) returned 0x0
	[0141.153] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d000 | out: ppvObject=0x19d000*=0x7479b4) returned 0x0
	[0141.154] WbemLocator:IRpcOptions:Query (in: This=0x7479b4, pPrx=0x7479d0, dwProperty=2, pdwValue=0x19d028 | out: pdwValue=0x19d028) returned 0x0
	[0141.154] WbemLocator:IUnknown:Release (This=0x7479b4) returned 0x3
	[0141.154] WbemLocator:IUnknown:Release (This=0x7479d0) returned 0x2
	[0141.154] WbemLocator:IUnknown:Release (This=0x7479d0) returned 0x1
	[0141.156] CoGetContextToken (in: pToken=0x19d2e0 | out: pToken=0x19d2e0) returned 0x0
	[0141.156] WbemLocator:IUnknown:AddRef (This=0x7479d0) returned 0x2
	[0141.156] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d598 | out: ppvObject=0x19d598*=0x7479ac) returned 0x0
	[0141.156] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7479ac, pProxy=0x7479d0, pAuthnSvc=0x19d5e8, pAuthzSvc=0x19d5e4, pServerPrincName=0x19d5dc, pAuthnLevel=0x19d5e0, pImpLevel=0x19d5d0, pAuthInfo=0x19d5d4, pCapabilites=0x19d5d8 | out: pAuthnSvc=0x19d5e8*=0xa, pAuthzSvc=0x19d5e4*=0x0, pServerPrincName=0x19d5dc, pAuthnLevel=0x19d5e0*=0x6, pImpLevel=0x19d5d0*=0x2, pAuthInfo=0x19d5d4, pCapabilites=0x19d5d8*=0x1) returned 0x0
	[0141.157] WbemLocator:IUnknown:Release (This=0x7479ac) returned 0x2
	[0141.157] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d58c | out: ppvObject=0x19d58c*=0x7479d0) returned 0x0
	[0141.157] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d588 | out: ppvObject=0x19d588*=0x7479ac) returned 0x0
	[0141.157] WbemLocator:IClientSecurity:SetBlanket (This=0x7479ac, pProxy=0x7479d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0141.158] WbemLocator:IUnknown:Release (This=0x7479ac) returned 0x3
	[0141.158] WbemLocator:IUnknown:Release (This=0x7479d0) returned 0x2
	[0141.158] CoTaskMemFree (pv=0x747f60) 
	[0141.158] WbemLocator:IUnknown:Release (This=0x7479d0) returned 0x1
	[0141.158] SysStringLen (param_1=0x0) returned 0x0
	[0141.158] CoGetContextToken (in: pToken=0x19d550 | out: pToken=0x19d550) returned 0x0
	[0141.158] CoGetContextToken (in: pToken=0x19d4b0 | out: pToken=0x19d4b0) returned 0x0
	[0141.158] WbemLocator:IUnknown:QueryInterface (in: This=0x7479d0, riid=0x19d580*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19d57c | out: ppvObject=0x19d57c*=0x726258) returned 0x0
	[0141.159] WbemLocator:IUnknown:AddRef (This=0x726258) returned 0x3
	[0141.159] WbemLocator:IUnknown:Release (This=0x726258) returned 0x2
	[0141.160] CoGetContextToken (in: pToken=0x19d510 | out: pToken=0x19d510) returned 0x0
	[0141.160] WbemLocator:IUnknown:AddRef (This=0x726258) returned 0x3
	[0141.160] WbemLocator:IUnknown:QueryInterface (in: This=0x726258, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d598 | out: ppvObject=0x19d598*=0x7479ac) returned 0x0
	[0141.160] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7479ac, pProxy=0x726258, pAuthnSvc=0x19d5e8, pAuthzSvc=0x19d5e4, pServerPrincName=0x19d5dc, pAuthnLevel=0x19d5e0, pImpLevel=0x19d5d0, pAuthInfo=0x19d5d4, pCapabilites=0x19d5d8 | out: pAuthnSvc=0x19d5e8*=0xa, pAuthzSvc=0x19d5e4*=0x0, pServerPrincName=0x19d5dc, pAuthnLevel=0x19d5e0*=0x6, pImpLevel=0x19d5d0*=0x2, pAuthInfo=0x19d5d4, pCapabilites=0x19d5d8*=0x1) returned 0x0
	[0141.160] WbemLocator:IUnknown:Release (This=0x7479ac) returned 0x3
	[0141.160] WbemLocator:IUnknown:QueryInterface (in: This=0x726258, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d58c | out: ppvObject=0x19d58c*=0x7479d0) returned 0x0
	[0141.160] WbemLocator:IUnknown:QueryInterface (in: This=0x726258, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d588 | out: ppvObject=0x19d588*=0x7479ac) returned 0x0
	[0141.160] WbemLocator:IClientSecurity:SetBlanket (This=0x7479ac, pProxy=0x726258, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0141.161] WbemLocator:IUnknown:Release (This=0x7479ac) returned 0x4
	[0141.161] WbemLocator:IUnknown:Release (This=0x7479d0) returned 0x3
	[0141.161] CoTaskMemFree (pv=0x748170) 
	[0141.161] WbemLocator:IUnknown:Release (This=0x726258) returned 0x2
	[0141.161] SysStringLen (param_1=0x0) returned 0x0
	[0141.161] CoGetContextToken (in: pToken=0x19d498 | out: pToken=0x19d498) returned 0x0
	[0141.161] WbemLocator:IUnknown:AddRef (This=0x726258) returned 0x3
	[0141.161] IWbemServices:ExecQuery (in: This=0x726258, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x19d6a4 | out: ppEnum=0x19d6a4*=0x742bb8) returned 0x0
	[0141.331] IUnknown:QueryInterface (in: This=0x742bb8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d508 | out: ppvObject=0x19d508*=0x742bbc) returned 0x0
	[0141.331] IClientSecurity:QueryBlanket (in: This=0x742bbc, pProxy=0x742bb8, pAuthnSvc=0x19d558, pAuthzSvc=0x19d554, pServerPrincName=0x19d54c, pAuthnLevel=0x19d550, pImpLevel=0x19d540, pAuthInfo=0x19d544, pCapabilites=0x19d548 | out: pAuthnSvc=0x19d558*=0xa, pAuthzSvc=0x19d554*=0x0, pServerPrincName=0x19d54c, pAuthnLevel=0x19d550*=0x6, pImpLevel=0x19d540*=0x2, pAuthInfo=0x19d544, pCapabilites=0x19d548*=0x1) returned 0x0
	[0141.331] IUnknown:Release (This=0x742bbc) returned 0x1
	[0141.331] IUnknown:QueryInterface (in: This=0x742bb8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4fc | out: ppvObject=0x19d4fc*=0x7488c8) returned 0x0
	[0141.332] IUnknown:QueryInterface (in: This=0x742bb8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4f8 | out: ppvObject=0x19d4f8*=0x742bbc) returned 0x0
	[0141.332] IClientSecurity:SetBlanket (This=0x742bbc, pProxy=0x742bb8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0141.372] IUnknown:Release (This=0x742bbc) returned 0x2
	[0141.372] WbemLocator:IUnknown:Release (This=0x7488c8) returned 0x1
	[0141.372] CoTaskMemFree (pv=0x748110) 
	[0141.372] IUnknown:QueryInterface (in: This=0x742bb8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d0f4 | out: ppvObject=0x19d0f4*=0x7488c8) returned 0x0
	[0141.373] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d0b0 | out: ppvObject=0x19d0b0*=0x0) returned 0x80004002
	[0141.374] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19cecc | out: ppvObject=0x19cecc*=0x0) returned 0x80004002
	[0141.374] IUnknown:QueryInterface (in: This=0x742bb8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cca4 | out: ppvObject=0x19cca4*=0x0) returned 0x80004002
	[0141.376] WbemLocator:IUnknown:AddRef (This=0x7488c8) returned 0x3
	[0141.376] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19ca0c | out: ppvObject=0x19ca0c*=0x0) returned 0x80004002
	[0141.376] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19c9bc | out: ppvObject=0x19c9bc*=0x0) returned 0x80004002
	[0141.376] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19c9c8 | out: ppvObject=0x19c9c8*=0x748824) returned 0x0
	[0141.376] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748824, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19c9d0 | out: pCid=0x19c9d0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0141.376] WbemLocator:IUnknown:Release (This=0x748824) returned 0x3
	[0141.376] CoGetContextToken (in: pToken=0x19ca28 | out: pToken=0x19ca28) returned 0x0
	[0141.376] CoGetContextToken (in: pToken=0x19ce30 | out: pToken=0x19ce30) returned 0x0
	[0141.377] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cec0 | out: ppvObject=0x19cec0*=0x7488ac) returned 0x0
	[0141.377] WbemLocator:IRpcOptions:Query (in: This=0x7488ac, pPrx=0x7488c8, dwProperty=2, pdwValue=0x19cee8 | out: pdwValue=0x19cee8) returned 0x80004002
	[0141.377] WbemLocator:IUnknown:Release (This=0x7488ac) returned 0x3
	[0141.377] WbemLocator:IUnknown:Release (This=0x7488c8) returned 0x2
	[0141.377] CoGetContextToken (in: pToken=0x19d408 | out: pToken=0x19d408) returned 0x0
	[0141.377] CoGetContextToken (in: pToken=0x19d368 | out: pToken=0x19d368) returned 0x0
	[0141.377] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x19d438*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d434 | out: ppvObject=0x19d434*=0x742bb8) returned 0x0
	[0141.377] IUnknown:AddRef (This=0x742bb8) returned 0x4
	[0141.377] IUnknown:Release (This=0x742bb8) returned 0x3
	[0141.377] IUnknown:Release (This=0x742bb8) returned 0x2
	[0141.377] WbemLocator:IUnknown:Release (This=0x726258) returned 0x2
	[0141.377] SysStringLen (param_1=0x0) returned 0x0
	[0141.378] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x72bc20, puCount=0x19d6f0 | out: puCount=0x19d6f0*=0x2) returned 0x0
	[0141.378] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d6ec*=0x0, pszText=0x0 | out: puBuffLength=0x19d6ec*=0xf, pszText=0x0) returned 0x0
	[0141.378] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d6ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d6ec*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0141.378] CoGetContextToken (in: pToken=0x19d540 | out: pToken=0x19d540) returned 0x0
	[0141.378] IUnknown:AddRef (This=0x742bb8) returned 0x3
	[0141.378] IEnumWbemClassObject:Clone (in: This=0x742bb8, ppEnum=0x19d6fc | out: ppEnum=0x19d6fc*=0x742708) returned 0x0
	[0141.424] IUnknown:QueryInterface (in: This=0x742708, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d5c0 | out: ppvObject=0x19d5c0*=0x74270c) returned 0x0
	[0141.424] IClientSecurity:QueryBlanket (in: This=0x74270c, pProxy=0x742708, pAuthnSvc=0x19d610, pAuthzSvc=0x19d60c, pServerPrincName=0x19d604, pAuthnLevel=0x19d608, pImpLevel=0x19d5f8, pAuthInfo=0x19d5fc, pCapabilites=0x19d600 | out: pAuthnSvc=0x19d610*=0xa, pAuthzSvc=0x19d60c*=0x0, pServerPrincName=0x19d604, pAuthnLevel=0x19d608*=0x6, pImpLevel=0x19d5f8*=0x2, pAuthInfo=0x19d5fc, pCapabilites=0x19d600*=0x1) returned 0x0
	[0141.424] IUnknown:Release (This=0x74270c) returned 0x1
	[0141.424] IUnknown:QueryInterface (in: This=0x742708, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d5b4 | out: ppvObject=0x19d5b4*=0x749fc8) returned 0x0
	[0141.425] IUnknown:QueryInterface (in: This=0x742708, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d5b0 | out: ppvObject=0x19d5b0*=0x74270c) returned 0x0
	[0141.425] IClientSecurity:SetBlanket (This=0x74270c, pProxy=0x742708, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0141.430] IUnknown:Release (This=0x74270c) returned 0x2
	[0141.430] WbemLocator:IUnknown:Release (This=0x749fc8) returned 0x1
	[0141.430] CoTaskMemFree (pv=0x7482c0) 
	[0141.430] IUnknown:QueryInterface (in: This=0x742708, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d19c | out: ppvObject=0x19d19c*=0x749fc8) returned 0x0
	[0141.431] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d158 | out: ppvObject=0x19d158*=0x0) returned 0x80004002
	[0141.452] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19cf74 | out: ppvObject=0x19cf74*=0x0) returned 0x80004002
	[0141.454] IUnknown:QueryInterface (in: This=0x742708, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cd4c | out: ppvObject=0x19cd4c*=0x0) returned 0x80004002
	[0141.793] WbemLocator:IUnknown:AddRef (This=0x749fc8) returned 0x3
	[0141.793] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cab4 | out: ppvObject=0x19cab4*=0x0) returned 0x80004002
	[0141.793] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19ca64 | out: ppvObject=0x19ca64*=0x0) returned 0x80004002
	[0141.793] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ca70 | out: ppvObject=0x19ca70*=0x749f24) returned 0x0
	[0141.793] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749f24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19ca78 | out: pCid=0x19ca78*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0141.793] WbemLocator:IUnknown:Release (This=0x749f24) returned 0x3
	[0141.794] CoGetContextToken (in: pToken=0x19cad0 | out: pToken=0x19cad0) returned 0x0
	[0141.794] CoGetContextToken (in: pToken=0x19ced8 | out: pToken=0x19ced8) returned 0x0
	[0141.794] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf68 | out: ppvObject=0x19cf68*=0x749fac) returned 0x0
	[0141.794] WbemLocator:IRpcOptions:Query (in: This=0x749fac, pPrx=0x749fc8, dwProperty=2, pdwValue=0x19cf90 | out: pdwValue=0x19cf90) returned 0x80004002
	[0141.794] WbemLocator:IUnknown:Release (This=0x749fac) returned 0x3
	[0141.794] WbemLocator:IUnknown:Release (This=0x749fc8) returned 0x2
	[0141.794] CoGetContextToken (in: pToken=0x19d4b0 | out: pToken=0x19d4b0) returned 0x0
	[0141.794] CoGetContextToken (in: pToken=0x19d410 | out: pToken=0x19d410) returned 0x0
	[0141.794] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x19d4e0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d4dc | out: ppvObject=0x19d4dc*=0x742708) returned 0x0
	[0141.794] IUnknown:AddRef (This=0x742708) returned 0x4
	[0141.794] IUnknown:Release (This=0x742708) returned 0x3
	[0141.794] IUnknown:Release (This=0x742708) returned 0x2
	[0141.794] IUnknown:Release (This=0x742bb8) returned 0x2
	[0141.794] SysStringLen (param_1=0x0) returned 0x0
	[0141.795] IEnumWbemClassObject:Reset (This=0x742708) returned 0x0
	[0142.126] CoTaskMemAlloc (cb=0x4) returned 0x702ab0
	[0142.126] IEnumWbemClassObject:Next (in: This=0x742708, lTimeout=-1, uCount=0x1, apObjects=0x702ab0, puReturned=0x27fc274 | out: apObjects=0x702ab0*=0x7205f8, puReturned=0x27fc274*=0x1) returned 0x0
	[0153.946] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cd60 | out: ppvObject=0x19cd60*=0x7205f8) returned 0x0
	[0153.947] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19cd1c | out: ppvObject=0x19cd1c*=0x0) returned 0x80004002
	[0153.947] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19cb3c | out: ppvObject=0x19cb3c*=0x0) returned 0x80004002
	[0153.947] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19c914 | out: ppvObject=0x19c914*=0x0) returned 0x80004002
	[0153.948] IUnknown:AddRef (This=0x7205f8) returned 0x3
	[0153.948] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19c67c | out: ppvObject=0x19c67c*=0x0) returned 0x80004002
	[0153.948] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19c62c | out: ppvObject=0x19c62c*=0x0) returned 0x80004002
	[0153.948] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19c638 | out: ppvObject=0x19c638*=0x7205fc) returned 0x0
	[0153.948] IMarshal:GetUnmarshalClass (in: This=0x7205fc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19c640 | out: pCid=0x19c640*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0153.948] IUnknown:Release (This=0x7205fc) returned 0x3
	[0153.948] CoGetContextToken (in: pToken=0x19c698 | out: pToken=0x19c698) returned 0x0
	[0153.949] CoGetContextToken (in: pToken=0x19caa0 | out: pToken=0x19caa0) returned 0x0
	[0153.949] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb30 | out: ppvObject=0x19cb30*=0x0) returned 0x80004002
	[0153.949] IUnknown:Release (This=0x7205f8) returned 0x2
	[0153.949] CoGetContextToken (in: pToken=0x19d070 | out: pToken=0x19d070) returned 0x0
	[0153.949] CoGetContextToken (in: pToken=0x19cfd0 | out: pToken=0x19cfd0) returned 0x0
	[0153.949] IUnknown:QueryInterface (in: This=0x7205f8, riid=0x19d0a0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19d09c | out: ppvObject=0x19d09c*=0x7205f8) returned 0x0
	[0153.950] IUnknown:AddRef (This=0x7205f8) returned 0x4
	[0153.950] IUnknown:Release (This=0x7205f8) returned 0x3
	[0153.950] IUnknown:Release (This=0x7205f8) returned 0x2
	[0153.951] CoTaskMemFree (pv=0x702ab0) 
	[0153.951] CoGetContextToken (in: pToken=0x19d3d8 | out: pToken=0x19d3d8) returned 0x0
	[0153.951] IUnknown:AddRef (This=0x7205f8) returned 0x3
	[0153.955] IWbemClassObject:Get (in: This=0x7205f8, wszName="__GENUS", lFlags=0, pVal=0x19d6ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19d76c*=0, plFlavor=0x19d768*=0 | out: pVal=0x19d6ec*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19d76c*=3, plFlavor=0x19d768*=64) returned 0x0
	[0153.959] IWbemClassObject:Get (in: This=0x7205f8, wszName="__PATH", lFlags=0, pVal=0x19d6d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19d754*=0, plFlavor=0x19d750*=0 | out: pVal=0x19d6d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x19d754*=8, plFlavor=0x19d750*=64) returned 0x0
	[0153.961] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0153.961] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0153.962] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1f8
	[0153.962] SetEvent (hEvent=0x2bc) returned 1
	[0153.963] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19d6a8*=0x1f8, lpdwindex=0x19d4c4 | out: lpdwindex=0x19d4c4) returned 0x0
	[0153.971] CoGetContextToken (in: pToken=0x19d578 | out: pToken=0x19d578) returned 0x0
	[0153.971] CoGetContextToken (in: pToken=0x19d4d8 | out: pToken=0x19d4d8) returned 0x0
	[0153.971] WbemDefPath:IUnknown:QueryInterface (in: This=0x73ee48, riid=0x19d5a8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19d5a4 | out: ppvObject=0x19d5a4*=0x73ee48) returned 0x0
	[0153.971] WbemDefPath:IUnknown:AddRef (This=0x73ee48) returned 0x3
	[0153.971] WbemDefPath:IUnknown:Release (This=0x73ee48) returned 0x2
	[0153.971] WbemDefPath:IWbemPath:SetText (This=0x73ee48, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0153.972] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x72bc20, puCount=0x19d728 | out: puCount=0x19d728*=0x2) returned 0x0
	[0153.972] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d724*=0x0, pszText=0x0 | out: puBuffLength=0x19d724*=0xf, pszText=0x0) returned 0x0
	[0153.972] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d724*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d724*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0153.974] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x72bc20, puCount=0x19d6f4 | out: puCount=0x19d6f4*=0x2) returned 0x0
	[0153.974] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d6f0*=0x0, pszText=0x0 | out: puBuffLength=0x19d6f0*=0xf, pszText=0x0) returned 0x0
	[0153.974] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=4, puBuffLength=0x19d6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d6f0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0153.974] IWbemClassObject:Get (in: This=0x7205f8, wszName="Name", lFlags=0, pVal=0x19d6f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27fcbbc*=0, plFlavor=0x27fcbc0*=0 | out: pVal=0x19d6f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x27fcbbc*=8, plFlavor=0x27fcbc0*=0) returned 0x0
	[0153.974] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0153.974] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0153.974] IWbemClassObject:Get (in: This=0x7205f8, wszName="Name", lFlags=0, pVal=0x19d6f8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27fcbbc*=8, plFlavor=0x27fcbc0*=0 | out: pVal=0x19d6f8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x27fcbbc*=8, plFlavor=0x27fcbc0*=0) returned 0x0
	[0153.974] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0153.974] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0153.996] CoGetContextToken (in: pToken=0x19d628 | out: pToken=0x19d628) returned 0x0
	[0153.996] WbemLocator:IUnknown:Release (This=0x749fc8) returned 0x1
	[0153.996] IUnknown:Release (This=0x742708) returned 0x0
	[0154.022] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3c8
	[0154.022] SetEvent (hEvent=0x2bc) returned 1
	[0154.024] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19d6c4*=0x3c8, lpdwindex=0x19d4e4 | out: lpdwindex=0x19d4e4) returned 0x0
	[0154.048] CoGetContextToken (in: pToken=0x19d590 | out: pToken=0x19d590) returned 0x0
	[0154.048] CoGetContextToken (in: pToken=0x19d4f0 | out: pToken=0x19d4f0) returned 0x0
	[0154.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x751c08, riid=0x19d5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19d5bc | out: ppvObject=0x19d5bc*=0x751c08) returned 0x0
	[0154.048] WbemDefPath:IUnknown:AddRef (This=0x751c08) returned 0x3
	[0154.048] WbemDefPath:IUnknown:Release (This=0x751c08) returned 0x2
	[0154.048] WbemDefPath:IWbemPath:SetText (This=0x751c08, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0154.049] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x751c08, puCount=0x19d740 | out: puCount=0x19d740*=0x2) returned 0x0
	[0154.049] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d73c*=0x0, pszText=0x0 | out: puBuffLength=0x19d73c*=0xf, pszText=0x0) returned 0x0
	[0154.049] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d73c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d73c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0154.049] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x751c08, puCount=0x19d72c | out: puCount=0x19d72c*=0x2) returned 0x0
	[0154.049] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d728*=0x0, pszText=0x0 | out: puBuffLength=0x19d728*=0xf, pszText=0x0) returned 0x0
	[0154.049] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d728*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d728*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0154.118] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19d5e0*=0x3dc, lpdwindex=0x19d494 | out: lpdwindex=0x19d494) returned 0x0
	[0154.266] CoGetContextToken (in: pToken=0x19d3a0 | out: pToken=0x19d3a0) returned 0x0
	[0154.266] CoGetContextToken (in: pToken=0x19d348 | out: pToken=0x19d348) returned 0x0
	[0154.266] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d328 | out: ppvObject=0x19d328*=0x712148) returned 0x0
	[0154.266] CObjectContext::ContextCallback () returned 0x0
	[0154.269] IUnknown:Release (This=0x712148) returned 0x1
	[0154.269] CoUnmarshalInterface (in: pStm=0x743870, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d390 | out: ppv=0x19d390*=0x749dc8) returned 0x0
	[0154.269] CoMarshalInterface (pStm=0x743870, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749dc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0154.270] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d234 | out: ppvObject=0x19d234*=0x749dc8) returned 0x0
	[0154.270] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d1f0 | out: ppvObject=0x19d1f0*=0x0) returned 0x80004002
	[0154.271] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d00c | out: ppvObject=0x19d00c*=0x0) returned 0x80004002
	[0154.271] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cde4 | out: ppvObject=0x19cde4*=0x0) returned 0x80004002
	[0154.272] WbemLocator:IUnknown:AddRef (This=0x749dc8) returned 0x3
	[0154.272] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cb4c | out: ppvObject=0x19cb4c*=0x0) returned 0x80004002
	[0154.272] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cafc | out: ppvObject=0x19cafc*=0x0) returned 0x80004002
	[0154.272] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb08 | out: ppvObject=0x19cb08*=0x749d24) returned 0x0
	[0154.272] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749d24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cb10 | out: pCid=0x19cb10*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0154.272] WbemLocator:IUnknown:Release (This=0x749d24) returned 0x3
	[0154.272] CoGetContextToken (in: pToken=0x19cb68 | out: pToken=0x19cb68) returned 0x0
	[0154.272] CoGetContextToken (in: pToken=0x19cf70 | out: pToken=0x19cf70) returned 0x0
	[0154.272] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d000 | out: ppvObject=0x19d000*=0x749dac) returned 0x0
	[0154.272] WbemLocator:IRpcOptions:Query (in: This=0x749dac, pPrx=0x749dc8, dwProperty=2, pdwValue=0x19d028 | out: pdwValue=0x19d028) returned 0x0
	[0154.272] WbemLocator:IUnknown:Release (This=0x749dac) returned 0x3
	[0154.272] WbemLocator:IUnknown:Release (This=0x749dc8) returned 0x2
	[0154.272] WbemLocator:IUnknown:Release (This=0x749dc8) returned 0x1
	[0154.272] CoGetContextToken (in: pToken=0x19d2e0 | out: pToken=0x19d2e0) returned 0x0
	[0154.272] WbemLocator:IUnknown:AddRef (This=0x749dc8) returned 0x2
	[0154.273] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d598 | out: ppvObject=0x19d598*=0x749da4) returned 0x0
	[0154.273] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x749da4, pProxy=0x749dc8, pAuthnSvc=0x19d5e8, pAuthzSvc=0x19d5e4, pServerPrincName=0x19d5dc, pAuthnLevel=0x19d5e0, pImpLevel=0x19d5d0, pAuthInfo=0x19d5d4, pCapabilites=0x19d5d8 | out: pAuthnSvc=0x19d5e8*=0xa, pAuthzSvc=0x19d5e4*=0x0, pServerPrincName=0x19d5dc, pAuthnLevel=0x19d5e0*=0x6, pImpLevel=0x19d5d0*=0x2, pAuthInfo=0x19d5d4, pCapabilites=0x19d5d8*=0x1) returned 0x0
	[0154.273] WbemLocator:IUnknown:Release (This=0x749da4) returned 0x2
	[0154.273] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d58c | out: ppvObject=0x19d58c*=0x749dc8) returned 0x0
	[0154.273] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d588 | out: ppvObject=0x19d588*=0x749da4) returned 0x0
	[0154.273] WbemLocator:IClientSecurity:SetBlanket (This=0x749da4, pProxy=0x749dc8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0154.273] WbemLocator:IUnknown:Release (This=0x749da4) returned 0x3
	[0154.273] WbemLocator:IUnknown:Release (This=0x749dc8) returned 0x2
	[0154.273] CoTaskMemFree (pv=0x748230) 
	[0154.274] WbemLocator:IUnknown:Release (This=0x749dc8) returned 0x1
	[0154.274] SysStringLen (param_1=0x0) returned 0x0
	[0154.274] CoGetContextToken (in: pToken=0x19d550 | out: pToken=0x19d550) returned 0x0
	[0154.274] CoGetContextToken (in: pToken=0x19d4b0 | out: pToken=0x19d4b0) returned 0x0
	[0154.274] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x19d580*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19d57c | out: ppvObject=0x19d57c*=0x726a28) returned 0x0
	[0154.274] WbemLocator:IUnknown:AddRef (This=0x726a28) returned 0x3
	[0154.274] WbemLocator:IUnknown:Release (This=0x726a28) returned 0x2
	[0154.274] CoGetContextToken (in: pToken=0x19d510 | out: pToken=0x19d510) returned 0x0
	[0154.274] WbemLocator:IUnknown:AddRef (This=0x726a28) returned 0x3
	[0154.275] WbemLocator:IUnknown:QueryInterface (in: This=0x726a28, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d598 | out: ppvObject=0x19d598*=0x749da4) returned 0x0
	[0154.275] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x749da4, pProxy=0x726a28, pAuthnSvc=0x19d5e8, pAuthzSvc=0x19d5e4, pServerPrincName=0x19d5dc, pAuthnLevel=0x19d5e0, pImpLevel=0x19d5d0, pAuthInfo=0x19d5d4, pCapabilites=0x19d5d8 | out: pAuthnSvc=0x19d5e8*=0xa, pAuthzSvc=0x19d5e4*=0x0, pServerPrincName=0x19d5dc, pAuthnLevel=0x19d5e0*=0x6, pImpLevel=0x19d5d0*=0x2, pAuthInfo=0x19d5d4, pCapabilites=0x19d5d8*=0x1) returned 0x0
	[0154.275] WbemLocator:IUnknown:Release (This=0x749da4) returned 0x3
	[0154.275] WbemLocator:IUnknown:QueryInterface (in: This=0x726a28, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d58c | out: ppvObject=0x19d58c*=0x749dc8) returned 0x0
	[0154.275] WbemLocator:IUnknown:QueryInterface (in: This=0x726a28, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d588 | out: ppvObject=0x19d588*=0x749da4) returned 0x0
	[0154.275] WbemLocator:IClientSecurity:SetBlanket (This=0x749da4, pProxy=0x726a28, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0154.275] WbemLocator:IUnknown:Release (This=0x749da4) returned 0x4
	[0154.275] WbemLocator:IUnknown:Release (This=0x749dc8) returned 0x3
	[0154.275] CoTaskMemFree (pv=0x747d80) 
	[0154.275] WbemLocator:IUnknown:Release (This=0x726a28) returned 0x2
	[0154.275] SysStringLen (param_1=0x0) returned 0x0
	[0154.276] CoGetContextToken (in: pToken=0x19d488 | out: pToken=0x19d488) returned 0x0
	[0154.276] WbemLocator:IUnknown:AddRef (This=0x726a28) returned 0x3
	[0154.276] IWbemServices:ExecQuery (in: This=0x726a28, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19d6a4 | out: ppEnum=0x19d6a4*=0x742af0) returned 0x0
	[0154.295] IUnknown:QueryInterface (in: This=0x742af0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4fc | out: ppvObject=0x19d4fc*=0x742af4) returned 0x0
	[0154.295] IClientSecurity:QueryBlanket (in: This=0x742af4, pProxy=0x742af0, pAuthnSvc=0x19d54c, pAuthzSvc=0x19d548, pServerPrincName=0x19d540, pAuthnLevel=0x19d544, pImpLevel=0x19d534, pAuthInfo=0x19d538, pCapabilites=0x19d53c | out: pAuthnSvc=0x19d54c*=0xa, pAuthzSvc=0x19d548*=0x0, pServerPrincName=0x19d540, pAuthnLevel=0x19d544*=0x6, pImpLevel=0x19d534*=0x2, pAuthInfo=0x19d538, pCapabilites=0x19d53c*=0x1) returned 0x0
	[0154.295] IUnknown:Release (This=0x742af4) returned 0x1
	[0154.295] IUnknown:QueryInterface (in: This=0x742af0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4f0 | out: ppvObject=0x19d4f0*=0x749ac8) returned 0x0
	[0154.295] IUnknown:QueryInterface (in: This=0x742af0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4ec | out: ppvObject=0x19d4ec*=0x742af4) returned 0x0
	[0154.296] IClientSecurity:SetBlanket (This=0x742af4, pProxy=0x742af0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0154.298] IUnknown:Release (This=0x742af4) returned 0x2
	[0154.299] WbemLocator:IUnknown:Release (This=0x749ac8) returned 0x1
	[0154.299] CoTaskMemFree (pv=0x748230) 
	[0154.299] IUnknown:QueryInterface (in: This=0x742af0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d0e8 | out: ppvObject=0x19d0e8*=0x749ac8) returned 0x0
	[0154.299] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d0a4 | out: ppvObject=0x19d0a4*=0x0) returned 0x80004002
	[0154.300] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19cec4 | out: ppvObject=0x19cec4*=0x0) returned 0x80004002
	[0154.301] IUnknown:QueryInterface (in: This=0x742af0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cc9c | out: ppvObject=0x19cc9c*=0x0) returned 0x80004002
	[0154.301] WbemLocator:IUnknown:AddRef (This=0x749ac8) returned 0x3
	[0154.301] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19ca04 | out: ppvObject=0x19ca04*=0x0) returned 0x80004002
	[0154.301] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19c9b4 | out: ppvObject=0x19c9b4*=0x0) returned 0x80004002
	[0154.301] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19c9c0 | out: ppvObject=0x19c9c0*=0x749a24) returned 0x0
	[0154.302] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749a24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19c9c8 | out: pCid=0x19c9c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0154.302] WbemLocator:IUnknown:Release (This=0x749a24) returned 0x3
	[0154.302] CoGetContextToken (in: pToken=0x19ca20 | out: pToken=0x19ca20) returned 0x0
	[0154.302] CoGetContextToken (in: pToken=0x19ce28 | out: pToken=0x19ce28) returned 0x0
	[0154.302] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ceb8 | out: ppvObject=0x19ceb8*=0x749aac) returned 0x0
	[0154.302] WbemLocator:IRpcOptions:Query (in: This=0x749aac, pPrx=0x749ac8, dwProperty=2, pdwValue=0x19cee0 | out: pdwValue=0x19cee0) returned 0x80004002
	[0154.302] WbemLocator:IUnknown:Release (This=0x749aac) returned 0x3
	[0154.302] WbemLocator:IUnknown:Release (This=0x749ac8) returned 0x2
	[0154.302] CoGetContextToken (in: pToken=0x19d3f8 | out: pToken=0x19d3f8) returned 0x0
	[0154.302] CoGetContextToken (in: pToken=0x19d358 | out: pToken=0x19d358) returned 0x0
	[0154.302] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x19d428*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d424 | out: ppvObject=0x19d424*=0x742af0) returned 0x0
	[0154.303] IUnknown:AddRef (This=0x742af0) returned 0x4
	[0154.303] IUnknown:Release (This=0x742af0) returned 0x3
	[0154.303] IUnknown:Release (This=0x742af0) returned 0x2
	[0154.303] WbemLocator:IUnknown:Release (This=0x726a28) returned 0x2
	[0154.303] SysStringLen (param_1=0x0) returned 0x0
	[0154.303] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x751c08, puCount=0x19d6f0 | out: puCount=0x19d6f0*=0x2) returned 0x0
	[0154.303] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d6ec*=0x0, pszText=0x0 | out: puBuffLength=0x19d6ec*=0xf, pszText=0x0) returned 0x0
	[0154.303] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d6ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d6ec*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0154.303] CoGetContextToken (in: pToken=0x19d540 | out: pToken=0x19d540) returned 0x0
	[0154.303] IUnknown:AddRef (This=0x742af0) returned 0x3
	[0154.303] IEnumWbemClassObject:Clone (in: This=0x742af0, ppEnum=0x19d6fc | out: ppEnum=0x19d6fc*=0x742578) returned 0x0
	[0154.391] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d5c0 | out: ppvObject=0x19d5c0*=0x74257c) returned 0x0
	[0154.391] IClientSecurity:QueryBlanket (in: This=0x74257c, pProxy=0x742578, pAuthnSvc=0x19d610, pAuthzSvc=0x19d60c, pServerPrincName=0x19d604, pAuthnLevel=0x19d608, pImpLevel=0x19d5f8, pAuthInfo=0x19d5fc, pCapabilites=0x19d600 | out: pAuthnSvc=0x19d610*=0xa, pAuthzSvc=0x19d60c*=0x0, pServerPrincName=0x19d604, pAuthnLevel=0x19d608*=0x6, pImpLevel=0x19d5f8*=0x2, pAuthInfo=0x19d5fc, pCapabilites=0x19d600*=0x1) returned 0x0
	[0154.391] IUnknown:Release (This=0x74257c) returned 0x1
	[0154.391] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d5b4 | out: ppvObject=0x19d5b4*=0x7492c8) returned 0x0
	[0154.392] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d5b0 | out: ppvObject=0x19d5b0*=0x74257c) returned 0x0
	[0154.392] IClientSecurity:SetBlanket (This=0x74257c, pProxy=0x742578, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0154.406] IUnknown:Release (This=0x74257c) returned 0x2
	[0154.406] WbemLocator:IUnknown:Release (This=0x7492c8) returned 0x1
	[0154.406] CoTaskMemFree (pv=0x747ff0) 
	[0154.406] IUnknown:QueryInterface (in: This=0x742578, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d19c | out: ppvObject=0x19d19c*=0x7492c8) returned 0x0
	[0154.407] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d158 | out: ppvObject=0x19d158*=0x0) returned 0x80004002
	[0154.420] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19cf74 | out: ppvObject=0x19cf74*=0x0) returned 0x80004002
	[0154.424] IUnknown:QueryInterface (in: This=0x742578, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cd4c | out: ppvObject=0x19cd4c*=0x0) returned 0x80004002
	[0154.431] WbemLocator:IUnknown:AddRef (This=0x7492c8) returned 0x3
	[0154.431] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cab4 | out: ppvObject=0x19cab4*=0x0) returned 0x80004002
	[0154.431] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19ca64 | out: ppvObject=0x19ca64*=0x0) returned 0x80004002
	[0154.431] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ca70 | out: ppvObject=0x19ca70*=0x749224) returned 0x0
	[0154.433] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749224, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19ca78 | out: pCid=0x19ca78*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0154.433] WbemLocator:IUnknown:Release (This=0x749224) returned 0x3
	[0154.433] CoGetContextToken (in: pToken=0x19cad0 | out: pToken=0x19cad0) returned 0x0
	[0154.433] CoGetContextToken (in: pToken=0x19ced8 | out: pToken=0x19ced8) returned 0x0
	[0154.433] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf68 | out: ppvObject=0x19cf68*=0x7492ac) returned 0x0
	[0154.434] WbemLocator:IRpcOptions:Query (in: This=0x7492ac, pPrx=0x7492c8, dwProperty=2, pdwValue=0x19cf90 | out: pdwValue=0x19cf90) returned 0x80004002
	[0154.434] WbemLocator:IUnknown:Release (This=0x7492ac) returned 0x3
	[0154.434] WbemLocator:IUnknown:Release (This=0x7492c8) returned 0x2
	[0154.434] CoGetContextToken (in: pToken=0x19d4b0 | out: pToken=0x19d4b0) returned 0x0
	[0154.434] CoGetContextToken (in: pToken=0x19d410 | out: pToken=0x19d410) returned 0x0
	[0154.434] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x19d4e0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d4dc | out: ppvObject=0x19d4dc*=0x742578) returned 0x0
	[0154.434] IUnknown:AddRef (This=0x742578) returned 0x4
	[0154.434] IUnknown:Release (This=0x742578) returned 0x3
	[0154.434] IUnknown:Release (This=0x742578) returned 0x2
	[0154.434] IUnknown:Release (This=0x742af0) returned 0x2
	[0154.434] SysStringLen (param_1=0x0) returned 0x0
	[0154.434] IEnumWbemClassObject:Reset (This=0x742578) returned 0x0
	[0154.437] CoTaskMemAlloc (cb=0x4) returned 0x7545e8
	[0154.437] IEnumWbemClassObject:Next (in: This=0x742578, lTimeout=-1, uCount=0x1, apObjects=0x7545e8, puReturned=0x27fde00 | out: apObjects=0x7545e8*=0x720ac0, puReturned=0x27fde00*=0x1) returned 0x0
	[0154.454] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cd60 | out: ppvObject=0x19cd60*=0x720ac0) returned 0x0
	[0154.455] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19cd1c | out: ppvObject=0x19cd1c*=0x0) returned 0x80004002
	[0154.455] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19cb3c | out: ppvObject=0x19cb3c*=0x0) returned 0x80004002
	[0154.455] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19c914 | out: ppvObject=0x19c914*=0x0) returned 0x80004002
	[0154.455] IUnknown:AddRef (This=0x720ac0) returned 0x3
	[0154.455] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19c67c | out: ppvObject=0x19c67c*=0x0) returned 0x80004002
	[0154.455] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19c62c | out: ppvObject=0x19c62c*=0x0) returned 0x80004002
	[0154.455] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19c638 | out: ppvObject=0x19c638*=0x720ac4) returned 0x0
	[0154.455] IMarshal:GetUnmarshalClass (in: This=0x720ac4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19c640 | out: pCid=0x19c640*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0154.455] IUnknown:Release (This=0x720ac4) returned 0x3
	[0154.456] CoGetContextToken (in: pToken=0x19c698 | out: pToken=0x19c698) returned 0x0
	[0154.456] CoGetContextToken (in: pToken=0x19caa0 | out: pToken=0x19caa0) returned 0x0
	[0154.456] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb30 | out: ppvObject=0x19cb30*=0x0) returned 0x80004002
	[0154.456] IUnknown:Release (This=0x720ac0) returned 0x2
	[0154.456] CoGetContextToken (in: pToken=0x19d070 | out: pToken=0x19d070) returned 0x0
	[0154.456] CoGetContextToken (in: pToken=0x19cfd0 | out: pToken=0x19cfd0) returned 0x0
	[0154.456] IUnknown:QueryInterface (in: This=0x720ac0, riid=0x19d0a0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19d09c | out: ppvObject=0x19d09c*=0x720ac0) returned 0x0
	[0154.456] IUnknown:AddRef (This=0x720ac0) returned 0x4
	[0154.456] IUnknown:Release (This=0x720ac0) returned 0x3
	[0154.456] IUnknown:Release (This=0x720ac0) returned 0x2
	[0154.456] CoTaskMemFree (pv=0x7545e8) 
	[0154.456] CoGetContextToken (in: pToken=0x19d3d8 | out: pToken=0x19d3d8) returned 0x0
	[0154.456] IUnknown:AddRef (This=0x720ac0) returned 0x3
	[0154.456] IWbemClassObject:Get (in: This=0x720ac0, wszName="__GENUS", lFlags=0, pVal=0x19d6ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19d76c*=0, plFlavor=0x19d768*=0 | out: pVal=0x19d6ec*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19d76c*=3, plFlavor=0x19d768*=64) returned 0x0
	[0154.457] IWbemClassObject:Get (in: This=0x720ac0, wszName="__PATH", lFlags=0, pVal=0x19d6d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19d754*=0, plFlavor=0x19d750*=0 | out: pVal=0x19d6d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19d754*=8, plFlavor=0x19d750*=64) returned 0x0
	[0154.457] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0154.457] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0154.457] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3e0
	[0154.457] SetEvent (hEvent=0x2bc) returned 1
	[0154.457] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19d6a8*=0x3e0, lpdwindex=0x19d4c4 | out: lpdwindex=0x19d4c4) returned 0x0
	[0154.462] CoGetContextToken (in: pToken=0x19d578 | out: pToken=0x19d578) returned 0x0
	[0154.462] CoGetContextToken (in: pToken=0x19d4d8 | out: pToken=0x19d4d8) returned 0x0
	[0154.463] WbemDefPath:IUnknown:QueryInterface (in: This=0x751ce8, riid=0x19d5a8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19d5a4 | out: ppvObject=0x19d5a4*=0x751ce8) returned 0x0
	[0154.463] WbemDefPath:IUnknown:AddRef (This=0x751ce8) returned 0x3
	[0154.463] WbemDefPath:IUnknown:Release (This=0x751ce8) returned 0x2
	[0154.463] WbemDefPath:IWbemPath:SetText (This=0x751ce8, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0
	[0154.463] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x751c08, puCount=0x19d728 | out: puCount=0x19d728*=0x2) returned 0x0
	[0154.463] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d724*=0x0, pszText=0x0 | out: puBuffLength=0x19d724*=0xf, pszText=0x0) returned 0x0
	[0154.463] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d724*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d724*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0154.463] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x751c08, puCount=0x19d6f4 | out: puCount=0x19d6f4*=0x2) returned 0x0
	[0154.463] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d6f0*=0x0, pszText=0x0 | out: puBuffLength=0x19d6f0*=0xf, pszText=0x0) returned 0x0
	[0154.463] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=4, puBuffLength=0x19d6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19d6f0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0154.463] IWbemClassObject:Get (in: This=0x720ac0, wszName="Name", lFlags=0, pVal=0x19d6f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27fe674*=0, plFlavor=0x27fe678*=0 | out: pVal=0x19d6f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x27fe674*=8, plFlavor=0x27fe678*=0) returned 0x0
	[0154.463] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0154.463] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0154.464] IWbemClassObject:Get (in: This=0x720ac0, wszName="Name", lFlags=0, pVal=0x19d6f8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27fe674*=8, plFlavor=0x27fe678*=0 | out: pVal=0x19d6f8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x27fe674*=8, plFlavor=0x27fe678*=0) returned 0x0
	[0154.464] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0154.464] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0154.464] CoGetContextToken (in: pToken=0x19d628 | out: pToken=0x19d628) returned 0x0
	[0154.464] WbemLocator:IUnknown:Release (This=0x7492c8) returned 0x1
	[0154.464] IUnknown:Release (This=0x742578) returned 0x0
	[0154.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x19d134, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0154.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x19d19c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0154.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d5fc) returned 1
	[0154.509] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19d678 | out: lpFileInformation=0x19d678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0154.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d5f8) returned 1
	[0154.629] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x19d38c | out: pfEnabled=0x19d38c) returned 0x0
	[0155.293] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", nBufferLength=0x105, lpBuffer=0x19d2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", lpFilePart=0x0) returned 0x44
	[0155.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d758) returned 1
	[0155.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef"), fInfoLevelId=0x0, lpFileInformation=0x19d7d4 | out: lpFileInformation=0x19d7d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0155.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d754) returned 1
	[0155.295] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", nBufferLength=0x105, lpBuffer=0x19d300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", lpFilePart=0x0) returned 0x44
	[0155.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d6e8) returned 1
	[0155.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef"), fInfoLevelId=0x0, lpFileInformation=0x19d764 | out: lpFileInformation=0x19d764*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0155.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d6e4) returned 1
	[0155.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d6e8) returned 1
	[0155.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef"), fInfoLevelId=0x0, lpFileInformation=0x19d764 | out: lpFileInformation=0x19d764*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0155.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d6e4) returned 1
	[0155.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d6e8) returned 1
	[0155.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x19d764 | out: lpFileInformation=0x19d764*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0155.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d6e4) returned 1
	[0155.297] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef"), lpSecurityAttributes=0x0) returned 1
	[0155.307] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", nBufferLength=0x105, lpBuffer=0x19d2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", lpFilePart=0x0) returned 0x44
	[0155.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d798) returned 1
	[0155.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef"), fInfoLevelId=0x0, lpFileInformation=0x28254cc | out: lpFileInformation=0x28254cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29d722, ftCreationTime.dwHighDateTime=0x1d83d26, ftLastAccessTime.dwLowDateTime=0xa29d722, ftLastAccessTime.dwHighDateTime=0x1d83d26, ftLastWriteTime.dwLowDateTime=0xa29d722, ftLastWriteTime.dwHighDateTime=0x1d83d26, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0155.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d794) returned 1
	[0155.309] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", nBufferLength=0x105, lpBuffer=0x19d270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", lpFilePart=0x0) returned 0x44
	[0155.312] SetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", dwFileAttributes=0x12) returned 1
	[0155.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", nBufferLength=0x105, lpBuffer=0x19ee8c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", lpFilePart=0x0) returned 0x42
	[0155.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", nBufferLength=0x105, lpBuffer=0x19ee34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", lpFilePart=0x0) returned 0x42
	[0156.134] GetCurrentProcess () returned 0xffffffff
	[0156.134] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f1ec | out: TokenHandle=0x19f1ec*=0x3e8) returned 1
	[0156.140] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0156.143] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19f1ec | out: lpFileInformation=0x19f1ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0156.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19ec94, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0156.146] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19f1ec | out: lpFileInformation=0x19f1ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0156.148] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0156.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f118) returned 1
	[0156.148] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
	[0156.149] GetFileType (hFile=0x404) returned 0x1
	[0156.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f114) returned 1
	[0156.149] GetFileType (hFile=0x404) returned 0x1
	[0156.196] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x19f1e0 | out: lpFileSizeHigh=0x19f1e0*=0x0) returned 0x8c8f
	[0156.197] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f19c, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19f19c*=0x1000, lpOverlapped=0x0) returned 1
	[0156.243] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f038, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19f038*=0x1000, lpOverlapped=0x0) returned 1
	[0156.248] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19eeec, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19eeec*=0x1000, lpOverlapped=0x0) returned 1
	[0156.250] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19eeec, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19eeec*=0x1000, lpOverlapped=0x0) returned 1
	[0156.250] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19eeec, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19eeec*=0x1000, lpOverlapped=0x0) returned 1
	[0156.251] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ee24, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19ee24*=0x1000, lpOverlapped=0x0) returned 1
	[0156.256] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19efa0, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19efa0*=0x1000, lpOverlapped=0x0) returned 1
	[0156.259] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19eeb4, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19eeb4*=0x1000, lpOverlapped=0x0) returned 1
	[0156.259] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19eeb4, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19eeb4*=0xc8f, lpOverlapped=0x0) returned 1
	[0156.259] ReadFile (in: hFile=0x404, lpBuffer=0x2828b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ef74, lpOverlapped=0x0 | out: lpBuffer=0x2828b98*, lpNumberOfBytesRead=0x19ef74*=0x0, lpOverlapped=0x0) returned 1
	[0156.259] CloseHandle (hObject=0x404) returned 1
	[0156.262] GetCurrentProcess () returned 0xffffffff
	[0156.262] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f314 | out: TokenHandle=0x19f314*=0x404) returned 1
	[0156.263] GetCurrentProcess () returned 0xffffffff
	[0156.263] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f314 | out: TokenHandle=0x19f314*=0x408) returned 1
	[0156.264] GetCurrentProcess () returned 0xffffffff
	[0156.264] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f1ec | out: TokenHandle=0x19f1ec*=0x40c) returned 1
	[0156.264] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19f1ec | out: lpFileInformation=0x19f1ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebcd76, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97a89f7e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97a89f7e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0156.264] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", nBufferLength=0x105, lpBuffer=0x19ec94, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", lpFilePart=0x0) returned 0x42
	[0156.264] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19f1ec | out: lpFileInformation=0x19f1ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebcd76, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97a89f7e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97a89f7e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0156.265] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config", lpFilePart=0x0) returned 0x42
	[0156.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f118) returned 1
	[0156.265] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x410
	[0156.265] GetFileType (hFile=0x410) returned 0x1
	[0156.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f114) returned 1
	[0156.265] GetFileType (hFile=0x410) returned 0x1
	[0156.265] GetFileSize (in: hFile=0x410, lpFileSizeHigh=0x19f1e0 | out: lpFileSizeHigh=0x19f1e0*=0x0) returned 0x119
	[0156.266] ReadFile (in: hFile=0x410, lpBuffer=0x2841070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f19c, lpOverlapped=0x0 | out: lpBuffer=0x2841070*, lpNumberOfBytesRead=0x19f19c*=0x119, lpOverlapped=0x0) returned 1
	[0156.267] ReadFile (in: hFile=0x410, lpBuffer=0x2841070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f060, lpOverlapped=0x0 | out: lpBuffer=0x2841070*, lpNumberOfBytesRead=0x19f060*=0x0, lpOverlapped=0x0) returned 1
	[0156.267] CloseHandle (hObject=0x410) returned 1
	[0156.267] GetCurrentProcess () returned 0xffffffff
	[0156.267] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f314 | out: TokenHandle=0x19f314*=0x410) returned 1
	[0156.268] GetCurrentProcess () returned 0xffffffff
	[0156.268] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f314 | out: TokenHandle=0x19f314*=0x414) returned 1
	[0156.295] GetCurrentProcess () returned 0xffffffff
	[0156.295] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f0d8 | out: TokenHandle=0x19f0d8*=0x418) returned 1
	[0156.307] GetCurrentProcess () returned 0xffffffff
	[0156.307] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f0ec | out: TokenHandle=0x19f0ec*=0x41c) returned 1
	[0156.339] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x420
	[0156.339] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x424
	[0156.355] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e604 | out: phkResult=0x19e604*=0x428) returned 0x0
	[0156.356] RegQueryValueExW (in: hKey=0x428, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19e624, lpData=0x0, lpcbData=0x19e620*=0x0 | out: lpType=0x19e624*=0x1, lpData=0x0, lpcbData=0x19e620*=0xe) returned 0x0
	[0156.356] RegQueryValueExW (in: hKey=0x428, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19e624, lpData=0x28466a0, lpcbData=0x19e620*=0xe | out: lpType=0x19e624*=0x1, lpData="Client", lpcbData=0x19e620*=0xe) returned 0x0
	[0156.356] RegCloseKey (hKey=0x428) returned 0x0
	[0156.392] GetCurrentProcess () returned 0xffffffff
	[0156.392] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e20c | out: TokenHandle=0x19e20c*=0x428) returned 1
	[0156.419] GetCurrentProcess () returned 0xffffffff
	[0156.419] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e220 | out: TokenHandle=0x19e220*=0x42c) returned 1
	[0156.447] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19dee8 | out: phkResult=0x19dee8*=0x0) returned 0x2
	[0156.455] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f404 | out: phkResult=0x19f404*=0x430) returned 0x0
	[0156.455] RegQueryValueExW (in: hKey=0x430, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x19f420, lpData=0x0, lpcbData=0x19f41c*=0x0 | out: lpType=0x19f420*=0x0, lpData=0x0, lpcbData=0x19f41c*=0x0) returned 0x2
	[0156.455] RegCloseKey (hKey=0x430) returned 0x0
	[0156.467] GetCurrentProcess () returned 0xffffffff
	[0156.467] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f080 | out: TokenHandle=0x19f080*=0x430) returned 1
	[0156.468] GetCurrentProcess () returned 0xffffffff
	[0156.468] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f094 | out: TokenHandle=0x19f094*=0x434) returned 1
	[0156.477] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x438
	[0156.480] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="9D16FBEF0D8A8F87529DE06A1C43C737") returned 0x43c
	[0156.481] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f470*=0x43c, lpdwindex=0x19f28c | out: lpdwindex=0x19f28c) returned 0x0
	[0156.500] GetACP () returned 0x4e4
	[0156.531] GetCurrentProcess () returned 0xffffffff
	[0156.531] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19efd8 | out: TokenHandle=0x19efd8*=0x444) returned 1
	[0156.534] GetCurrentProcess () returned 0xffffffff
	[0156.534] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19efec | out: TokenHandle=0x19efec*=0x448) returned 1
	[0156.540] QueryPerformanceFrequency (in: lpFrequency=0x515e50 | out: lpFrequency=0x515e50*=100000000) returned 1
	[0156.540] QueryPerformanceCounter (in: lpPerformanceCount=0x19f3f4 | out: lpPerformanceCount=0x19f3f4*=1219883341655) returned 1
	[0156.546] GetCurrentProcess () returned 0xffffffff
	[0156.546] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19efbc | out: TokenHandle=0x19efbc*=0x44c) returned 1
	[0156.548] GetCurrentProcess () returned 0xffffffff
	[0156.548] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19efd0 | out: TokenHandle=0x19efd0*=0x450) returned 1
	[0156.553] GetCurrentProcess () returned 0xffffffff
	[0156.553] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f2dc | out: TokenHandle=0x19f2dc*=0x454) returned 1
	[0157.489] CoTaskMemAlloc (cb=0xcc0) returned 0x768f60
	[0157.490] RasEnumConnectionsW (in: param_1=0x768f60, param_2=0x19f2ec, param_3=0x19f2f0 | out: param_1=0x768f60, param_2=0x19f2ec, param_3=0x19f2f0) returned 0x0
	[0157.857] CoTaskMemFree (pv=0x768f60) 
	[0157.953] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19f0d4 | out: lpWSAData=0x19f0d4) returned 0
	[0157.963] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x4a4
	[0158.726] setsockopt (s=0x4a4, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0158.727] closesocket (s=0x4a4) returned 0
	[0158.727] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x4a4
	[0158.729] setsockopt (s=0x4a4, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0158.729] closesocket (s=0x4a4) returned 0
	[0158.730] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4a4
	[0158.731] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4a8
	[0158.731] ioctlsocket (in: s=0x4a4, cmd=-2147195266, argp=0x19f2f4 | out: argp=0x19f2f4) returned 0
	[0158.732] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4ac
	[0158.732] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4b0
	[0158.732] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x19f2f4 | out: argp=0x19f2f4) returned 0
	[0158.734] WSAIoctl (in: s=0x4a4, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19f2dc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19f2dc, lpOverlapped=0x0) returned -1
	[0158.736] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19f00c, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0158.786] WSAEventSelect (s=0x4a4, hEventObject=0x4a8, lNetworkEvents=512) returned 0
	[0158.786] WSAIoctl (in: s=0x4ac, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19f2dc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19f2dc, lpOverlapped=0x0) returned -1
	[0158.786] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19f00c, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0158.786] WSAEventSelect (s=0x4ac, hEventObject=0x4b0, lNetworkEvents=512) returned 0
	[0158.786] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4b8
	[0158.787] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x4b8, param_3=0x3) returned 0x0
	[0158.797] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x19f308 | out: phkResult=0x19f308*=0x4d0) returned 0x0
	[0158.798] RegOpenKeyExW (in: hKey=0x4d0, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2b8 | out: phkResult=0x19f2b8*=0x4d4) returned 0x0
	[0158.798] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4d8
	[0158.798] RegNotifyChangeKeyValue (hKey=0x4d4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4d8, fAsynchronous=1) returned 0x0
	[0158.799] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2bc | out: phkResult=0x19f2bc*=0x4dc) returned 0x0
	[0158.800] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4e0
	[0158.800] RegNotifyChangeKeyValue (hKey=0x4dc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4e0, fAsynchronous=1) returned 0x0
	[0158.800] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2bc | out: phkResult=0x19f2bc*=0x4e4) returned 0x0
	[0158.801] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4e8
	[0158.801] RegNotifyChangeKeyValue (hKey=0x4e4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4e8, fAsynchronous=1) returned 0x0
	[0158.801] GetCurrentProcess () returned 0xffffffff
	[0158.801] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f2b0 | out: TokenHandle=0x19f2b0*=0x4ec) returned 1
	[0158.836] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ebc0 | out: phkResult=0x19ebc0*=0x4fc) returned 0x0
	[0158.836] RegQueryValueExW (in: hKey=0x4fc, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x19ebdc, lpData=0x0, lpcbData=0x19ebd8*=0x0 | out: lpType=0x19ebdc*=0x0, lpData=0x0, lpcbData=0x19ebd8*=0x0) returned 0x2
	[0158.836] RegCloseKey (hKey=0x4fc) returned 0x0
	[0159.242] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x763388
	[0159.670] WinHttpSetTimeouts (hInternet=0x763388, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1
	[0159.672] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x19f2bc | out: pProxyConfig=0x19f2bc) returned 1
	[0160.141] CoTaskMemAlloc (cb=0x20c) returned 0x77c3f0
	[0160.141] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x77c3f0, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0160.141] CoTaskMemFree (pv=0x77c3f0) 
	[0160.141] CoTaskMemAlloc (cb=0x20c) returned 0x77c3f0
	[0160.141] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x77c3f0, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0160.141] CoTaskMemFree (pv=0x77c3f0) 
	[0160.144] EtwEventRegister (in: ProviderId=0x285308c, EnableCallback=0x1250716, CallbackContext=0x0, RegHandle=0x2853068 | out: RegHandle=0x2853068) returned 0x0
	[0160.145] EtwEventSetInformation (RegHandle=0x768098, InformationClass=0x4e, EventInformation=0x2, InformationLength=0x2853028) returned 0x0
	[0160.150] GetCurrentProcess () returned 0xffffffff
	[0160.150] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ef84 | out: TokenHandle=0x19ef84*=0x538) returned 1
	[0160.153] GetCurrentProcess () returned 0xffffffff
	[0160.153] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ef98 | out: TokenHandle=0x19ef98*=0x53c) returned 1
	[0160.159] EtwEventRegister (in: ProviderId=0x285461c, EnableCallback=0x125073e, CallbackContext=0x0, RegHandle=0x28545f8 | out: RegHandle=0x28545f8) returned 0x0
	[0160.159] EtwEventSetInformation (RegHandle=0x767878, InformationClass=0x4f, EventInformation=0x2, InformationLength=0x28545bc) returned 0x0
	[0160.164] SetEvent (hEvent=0x420) returned 1
	[0160.220] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f208*=0x4b8, lpdwindex=0x19f024 | out: lpdwindex=0x19f024) returned 0x80010115
	[0160.221] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f1e8*=0x4a8, lpdwindex=0x19f004 | out: lpdwindex=0x19f004) returned 0x80010115
	[0160.222] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f1e8*=0x4b0, lpdwindex=0x19f004 | out: lpdwindex=0x19f004) returned 0x80010115
	[0160.222] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f23c*=0x4d8, lpdwindex=0x19f05c | out: lpdwindex=0x19f05c) returned 0x80010115
	[0160.222] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f23c*=0x4e0, lpdwindex=0x19f05c | out: lpdwindex=0x19f05c) returned 0x80010115
	[0160.223] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f23c*=0x4e8, lpdwindex=0x19f05c | out: lpdwindex=0x19f05c) returned 0x80010115
	[0160.226] SetEvent (hEvent=0x420) returned 1
	[0160.230] CoTaskMemAlloc (cb=0x20c) returned 0x76d5d0
	[0160.230] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x76d5d0, nSize=0x104 | out: lpBuffer="") returned 0x0
	[0160.230] CoTaskMemFree (pv=0x76d5d0) 
	[0160.230] CoTaskMemAlloc (cb=0x210) returned 0x76d5d0
	[0160.230] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x76d5d0, nSize=0x106 | out: lpBuffer="") returned 0x0
	[0160.231] CoTaskMemFree (pv=0x76d5d0) 
	[0160.238] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x558
	[0160.240] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x55c
	[0160.243] GetAddrInfoW (in: pNodeName="ip-api.com", pServiceName=0x0, pHints=0x19f13c*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x19f0e4 | out: ppResult=0x19f0e4*=0x7669d8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ip-api.com", ai_addr=0x76e450*(sa_family=2, sin_port=0x0, sin_addr="208.95.112.1"), ai_next=0x0)) returned 0
	[0161.204] FreeAddrInfoW (pAddrInfo=0x7669d8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ip-api.com", ai_addr=0x76e450*(sa_family=2, sin_port=0x0, sin_addr="208.95.112.1"), ai_next=0x0)) 
	[0161.205] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x574
	[0161.206] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x580
	[0161.206] ioctlsocket (in: s=0x574, cmd=-2147195266, argp=0x19f114 | out: argp=0x19f114) returned 0
	[0161.211] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x584
	[0161.211] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x588
	[0161.211] ioctlsocket (in: s=0x584, cmd=-2147195266, argp=0x19f114 | out: argp=0x19f114) returned 0
	[0161.212] WSAIoctl (in: s=0x574, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19f0fc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19f0fc, lpOverlapped=0x0) returned -1
	[0161.212] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19ee2c, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0161.212] WSAEventSelect (s=0x574, hEventObject=0x580, lNetworkEvents=512) returned 0
	[0161.212] WSAIoctl (in: s=0x584, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19f0fc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19f0fc, lpOverlapped=0x0) returned -1
	[0161.212] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19ee2c, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0161.212] WSAEventSelect (s=0x584, hEventObject=0x588, lNetworkEvents=512) returned 0
	[0161.221] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x19f0f8*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x19f0f8*=0xa78) returned 0x6f
	[0161.227] LocalAlloc (uFlags=0x0, uBytes=0xa78) returned 0x7772a0
	[0161.227] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x7772a0, SizePointer=0x19f0f8*=0xa78 | out: AdapterAddresses=0x7772a0*(Alignment=0x500000178, Length=0x178, IfIndex=0x5, Next=0x777548, AdapterName="{E25A642B-6CEB-4194-8F83-8BC82AF94F5A}", FirstUnicastAddress=0x7774bc, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection", FriendlyName="Ethernet", PhysicalAddress=([0]=0x0, [1]=0x30, [2]=0xb5, [3]=0x28, [4]=0x8d, [5]=0x94, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x5, ZoneIndices=([0]=0x5, [1]=0x5, [2]=0x5, [3]=0x5, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6008000000000, Dhcpv4Server.lpSockaddr=0x777418*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11eb6c9dc20d55b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x28, [5]=0xb6, [6]=0x28, [7]=0x5e, [8]=0x0, [9]=0xf, [10]=0xf3, [11]=0xe1, [12]=0x61, [13]=0x38, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x300053a, FirstDnsSuffix=0x0), SizePointer=0x19f0f8*=0xa78) returned 0x0
	[0161.261] LocalFree (hMem=0x7772a0) returned 0x0
	[0161.264] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f108 | out: phkResult=0x19f108*=0x58c) returned 0x0
	[0161.265] RegQueryValueExW (in: hKey=0x58c, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x19f124, lpData=0x0, lpcbData=0x19f120*=0x0 | out: lpType=0x19f124*=0x0, lpData=0x0, lpcbData=0x19f120*=0x0) returned 0x2
	[0161.265] RegCloseKey (hKey=0x58c) returned 0x0
	[0161.266] WSAConnect (in: s=0x558, name=0x285d6dc*(sa_family=2, sin_port=0x50, sin_addr="208.95.112.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0161.322] closesocket (s=0x55c) returned 0
	[0161.330] send (s=0x558, buf=0x285e22c*, len=80, flags=0) returned 80
	[0161.335] setsockopt (s=0x558, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0161.336] recv (in: s=0x558, buf=0x28596d0, len=4096, flags=0 | out: buf=0x28596d0*) returned 175
	[0161.738] setsockopt (s=0x558, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0
	[0161.739] SetEvent (hEvent=0x420) returned 1
	[0161.895] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x55c
	[0161.895] SetEvent (hEvent=0x2bc) returned 1
	[0161.895] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19ecd4*=0x55c, lpdwindex=0x19eaf4 | out: lpdwindex=0x19eaf4) returned 0x0
	[0161.957] CoGetContextToken (in: pToken=0x19eba0 | out: pToken=0x19eba0) returned 0x0
	[0161.957] CoGetContextToken (in: pToken=0x19eb00 | out: pToken=0x19eb00) returned 0x0
	[0161.957] WbemDefPath:IUnknown:QueryInterface (in: This=0x763d78, riid=0x19ebd0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19ebcc | out: ppvObject=0x19ebcc*=0x763d78) returned 0x0
	[0161.957] WbemDefPath:IUnknown:AddRef (This=0x763d78) returned 0x3
	[0161.957] WbemDefPath:IUnknown:Release (This=0x763d78) returned 0x2
	[0161.957] WbemDefPath:IWbemPath:SetText (This=0x763d78, uMode=0x4, pszPath="//./root/cimv2") returned 0x0
	[0161.958] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f44c | out: puCount=0x19f44c*=0x2) returned 0x0
	[0161.958] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f448*=0x0, pszText=0x0 | out: puBuffLength=0x19f448*=0xf, pszText=0x0) returned 0x0
	[0161.958] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f448*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f448*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0162.056] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f2f8*=0x59c, lpdwindex=0x19f1ac | out: lpdwindex=0x19f1ac) returned 0x0
	[0162.231] CoGetContextToken (in: pToken=0x19f0b8 | out: pToken=0x19f0b8) returned 0x0
	[0162.231] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0162.231] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f040 | out: ppvObject=0x19f040*=0x712148) returned 0x0
	[0162.231] CObjectContext::ContextCallback () returned 0x0
	[0162.234] IUnknown:Release (This=0x712148) returned 0x1
	[0162.234] CoUnmarshalInterface (in: pStm=0x7438d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f0a8 | out: ppv=0x19f0a8*=0x7494c8) returned 0x0
	[0162.235] CoMarshalInterface (pStm=0x7438d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7494c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0162.235] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ef4c | out: ppvObject=0x19ef4c*=0x7494c8) returned 0x0
	[0162.235] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ef08 | out: ppvObject=0x19ef08*=0x0) returned 0x80004002
	[0162.236] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed24 | out: ppvObject=0x19ed24*=0x0) returned 0x80004002
	[0162.237] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19eafc | out: ppvObject=0x19eafc*=0x0) returned 0x80004002
	[0162.237] WbemLocator:IUnknown:AddRef (This=0x7494c8) returned 0x3
	[0162.237] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e864 | out: ppvObject=0x19e864*=0x0) returned 0x80004002
	[0162.237] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e814 | out: ppvObject=0x19e814*=0x0) returned 0x80004002
	[0162.237] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e820 | out: ppvObject=0x19e820*=0x749424) returned 0x0
	[0162.238] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749424, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e828 | out: pCid=0x19e828*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.238] WbemLocator:IUnknown:Release (This=0x749424) returned 0x3
	[0162.238] CoGetContextToken (in: pToken=0x19e880 | out: pToken=0x19e880) returned 0x0
	[0162.238] CoGetContextToken (in: pToken=0x19ec88 | out: pToken=0x19ec88) returned 0x0
	[0162.238] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed18 | out: ppvObject=0x19ed18*=0x7494ac) returned 0x0
	[0162.238] WbemLocator:IRpcOptions:Query (in: This=0x7494ac, pPrx=0x7494c8, dwProperty=2, pdwValue=0x19ed40 | out: pdwValue=0x19ed40) returned 0x0
	[0162.238] WbemLocator:IUnknown:Release (This=0x7494ac) returned 0x3
	[0162.238] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x2
	[0162.238] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x1
	[0162.238] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0
	[0162.238] WbemLocator:IUnknown:AddRef (This=0x7494c8) returned 0x2
	[0162.239] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x7494a4) returned 0x0
	[0162.239] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7494a4, pProxy=0x7494c8, pAuthnSvc=0x19f300, pAuthzSvc=0x19f2fc, pServerPrincName=0x19f2f4, pAuthnLevel=0x19f2f8, pImpLevel=0x19f2e8, pAuthInfo=0x19f2ec, pCapabilites=0x19f2f0 | out: pAuthnSvc=0x19f300*=0xa, pAuthzSvc=0x19f2fc*=0x0, pServerPrincName=0x19f2f4, pAuthnLevel=0x19f2f8*=0x6, pImpLevel=0x19f2e8*=0x2, pAuthInfo=0x19f2ec, pCapabilites=0x19f2f0*=0x1) returned 0x0
	[0162.239] WbemLocator:IUnknown:Release (This=0x7494a4) returned 0x2
	[0162.239] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a4 | out: ppvObject=0x19f2a4*=0x7494c8) returned 0x0
	[0162.239] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a0 | out: ppvObject=0x19f2a0*=0x7494a4) returned 0x0
	[0162.239] WbemLocator:IClientSecurity:SetBlanket (This=0x7494a4, pProxy=0x7494c8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.239] WbemLocator:IUnknown:Release (This=0x7494a4) returned 0x3
	[0162.239] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x2
	[0162.239] CoTaskMemFree (pv=0x747de0) 
	[0162.240] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x1
	[0162.240] SysStringLen (param_1=0x0) returned 0x0
	[0162.247] CoGetContextToken (in: pToken=0x19f268 | out: pToken=0x19f268) returned 0x0
	[0162.247] CoGetContextToken (in: pToken=0x19f1c8 | out: pToken=0x19f1c8) returned 0x0
	[0162.247] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x19f298*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19f294 | out: ppvObject=0x19f294*=0x776a38) returned 0x0
	[0162.248] WbemLocator:IUnknown:AddRef (This=0x776a38) returned 0x3
	[0162.248] WbemLocator:IUnknown:Release (This=0x776a38) returned 0x2
	[0162.248] CoGetContextToken (in: pToken=0x19f228 | out: pToken=0x19f228) returned 0x0
	[0162.249] WbemLocator:IUnknown:AddRef (This=0x776a38) returned 0x3
	[0162.249] WbemLocator:IUnknown:QueryInterface (in: This=0x776a38, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x7494a4) returned 0x0
	[0162.249] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7494a4, pProxy=0x776a38, pAuthnSvc=0x19f300, pAuthzSvc=0x19f2fc, pServerPrincName=0x19f2f4, pAuthnLevel=0x19f2f8, pImpLevel=0x19f2e8, pAuthInfo=0x19f2ec, pCapabilites=0x19f2f0 | out: pAuthnSvc=0x19f300*=0xa, pAuthzSvc=0x19f2fc*=0x0, pServerPrincName=0x19f2f4, pAuthnLevel=0x19f2f8*=0x6, pImpLevel=0x19f2e8*=0x2, pAuthInfo=0x19f2ec, pCapabilites=0x19f2f0*=0x1) returned 0x0
	[0162.249] WbemLocator:IUnknown:Release (This=0x7494a4) returned 0x3
	[0162.249] WbemLocator:IUnknown:QueryInterface (in: This=0x776a38, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a4 | out: ppvObject=0x19f2a4*=0x7494c8) returned 0x0
	[0162.249] WbemLocator:IUnknown:QueryInterface (in: This=0x776a38, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a0 | out: ppvObject=0x19f2a0*=0x7494a4) returned 0x0
	[0162.249] WbemLocator:IClientSecurity:SetBlanket (This=0x7494a4, pProxy=0x776a38, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.250] WbemLocator:IUnknown:Release (This=0x7494a4) returned 0x4
	[0162.250] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x3
	[0162.250] CoTaskMemFree (pv=0x748050) 
	[0162.250] WbemLocator:IUnknown:Release (This=0x776a38) returned 0x2
	[0162.250] SysStringLen (param_1=0x0) returned 0x0
	[0162.250] CoGetContextToken (in: pToken=0x19f1a8 | out: pToken=0x19f1a8) returned 0x0
	[0162.250] WbemLocator:IUnknown:AddRef (This=0x776a38) returned 0x3
	[0162.250] IWbemServices:ExecQuery (in: This=0x776a38, strQueryLanguage="WQL", strQuery="Select * from Win32_ComputerSystem", lFlags=16, pCtx=0x0, ppEnum=0x19f3bc | out: ppEnum=0x19f3bc*=0x7432c0) returned 0x0
	[0162.297] IUnknown:QueryInterface (in: This=0x7432c0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f218 | out: ppvObject=0x19f218*=0x7432c4) returned 0x0
	[0162.297] IClientSecurity:QueryBlanket (in: This=0x7432c4, pProxy=0x7432c0, pAuthnSvc=0x19f268, pAuthzSvc=0x19f264, pServerPrincName=0x19f25c, pAuthnLevel=0x19f260, pImpLevel=0x19f250, pAuthInfo=0x19f254, pCapabilites=0x19f258 | out: pAuthnSvc=0x19f268*=0xa, pAuthzSvc=0x19f264*=0x0, pServerPrincName=0x19f25c, pAuthnLevel=0x19f260*=0x6, pImpLevel=0x19f250*=0x2, pAuthInfo=0x19f254, pCapabilites=0x19f258*=0x1) returned 0x0
	[0162.298] IUnknown:Release (This=0x7432c4) returned 0x1
	[0162.298] IUnknown:QueryInterface (in: This=0x7432c0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f20c | out: ppvObject=0x19f20c*=0x74a5c8) returned 0x0
	[0162.298] IUnknown:QueryInterface (in: This=0x7432c0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f208 | out: ppvObject=0x19f208*=0x7432c4) returned 0x0
	[0162.298] IClientSecurity:SetBlanket (This=0x7432c4, pProxy=0x7432c0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.300] IUnknown:Release (This=0x7432c4) returned 0x2
	[0162.300] WbemLocator:IUnknown:Release (This=0x74a5c8) returned 0x1
	[0162.300] CoTaskMemFree (pv=0x747e70) 
	[0162.300] IUnknown:QueryInterface (in: This=0x7432c0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee04 | out: ppvObject=0x19ee04*=0x74a5c8) returned 0x0
	[0162.301] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19edc0 | out: ppvObject=0x19edc0*=0x0) returned 0x80004002
	[0162.301] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ebdc | out: ppvObject=0x19ebdc*=0x0) returned 0x80004002
	[0162.302] IUnknown:QueryInterface (in: This=0x7432c0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e9b4 | out: ppvObject=0x19e9b4*=0x0) returned 0x80004002
	[0162.302] WbemLocator:IUnknown:AddRef (This=0x74a5c8) returned 0x3
	[0162.302] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e71c | out: ppvObject=0x19e71c*=0x0) returned 0x80004002
	[0162.302] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e6cc | out: ppvObject=0x19e6cc*=0x0) returned 0x80004002
	[0162.302] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6d8 | out: ppvObject=0x19e6d8*=0x74a524) returned 0x0
	[0162.303] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74a524, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e6e0 | out: pCid=0x19e6e0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.303] WbemLocator:IUnknown:Release (This=0x74a524) returned 0x3
	[0162.303] CoGetContextToken (in: pToken=0x19e738 | out: pToken=0x19e738) returned 0x0
	[0162.303] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0162.303] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebd0 | out: ppvObject=0x19ebd0*=0x74a5ac) returned 0x0
	[0162.303] WbemLocator:IRpcOptions:Query (in: This=0x74a5ac, pPrx=0x74a5c8, dwProperty=2, pdwValue=0x19ebf8 | out: pdwValue=0x19ebf8) returned 0x80004002
	[0162.303] WbemLocator:IUnknown:Release (This=0x74a5ac) returned 0x3
	[0162.303] WbemLocator:IUnknown:Release (This=0x74a5c8) returned 0x2
	[0162.303] CoGetContextToken (in: pToken=0x19f118 | out: pToken=0x19f118) returned 0x0
	[0162.303] CoGetContextToken (in: pToken=0x19f078 | out: pToken=0x19f078) returned 0x0
	[0162.303] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x19f148*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f144 | out: ppvObject=0x19f144*=0x7432c0) returned 0x0
	[0162.303] IUnknown:AddRef (This=0x7432c0) returned 0x4
	[0162.303] IUnknown:Release (This=0x7432c0) returned 0x3
	[0162.303] IUnknown:Release (This=0x7432c0) returned 0x2
	[0162.303] WbemLocator:IUnknown:Release (This=0x776a38) returned 0x2
	[0162.303] SysStringLen (param_1=0x0) returned 0x0
	[0162.304] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f408 | out: puCount=0x19f408*=0x2) returned 0x0
	[0162.304] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f404*=0x0, pszText=0x0 | out: puBuffLength=0x19f404*=0xf, pszText=0x0) returned 0x0
	[0162.304] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f404*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f404*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0162.304] CoGetContextToken (in: pToken=0x19f258 | out: pToken=0x19f258) returned 0x0
	[0162.304] IUnknown:AddRef (This=0x7432c0) returned 0x3
	[0162.304] IEnumWbemClassObject:Clone (in: This=0x7432c0, ppEnum=0x19f414 | out: ppEnum=0x19f414*=0x742c80) returned 0x0
	[0162.305] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2d8 | out: ppvObject=0x19f2d8*=0x742c84) returned 0x0
	[0162.306] IClientSecurity:QueryBlanket (in: This=0x742c84, pProxy=0x742c80, pAuthnSvc=0x19f328, pAuthzSvc=0x19f324, pServerPrincName=0x19f31c, pAuthnLevel=0x19f320, pImpLevel=0x19f310, pAuthInfo=0x19f314, pCapabilites=0x19f318 | out: pAuthnSvc=0x19f328*=0xa, pAuthzSvc=0x19f324*=0x0, pServerPrincName=0x19f31c, pAuthnLevel=0x19f320*=0x6, pImpLevel=0x19f310*=0x2, pAuthInfo=0x19f314, pCapabilites=0x19f318*=0x1) returned 0x0
	[0162.306] IUnknown:Release (This=0x742c84) returned 0x1
	[0162.306] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2cc | out: ppvObject=0x19f2cc*=0x74a1c8) returned 0x0
	[0162.306] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2c8 | out: ppvObject=0x19f2c8*=0x742c84) returned 0x0
	[0162.306] IClientSecurity:SetBlanket (This=0x742c84, pProxy=0x742c80, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.307] IUnknown:Release (This=0x742c84) returned 0x2
	[0162.307] WbemLocator:IUnknown:Release (This=0x74a1c8) returned 0x1
	[0162.308] CoTaskMemFree (pv=0x7480b0) 
	[0162.308] IUnknown:QueryInterface (in: This=0x742c80, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eeb4 | out: ppvObject=0x19eeb4*=0x74a1c8) returned 0x0
	[0162.308] WbemLocator:IUnknown:QueryInterface (in: This=0x74a1c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ee70 | out: ppvObject=0x19ee70*=0x0) returned 0x80004002
	[0162.309] WbemLocator:IUnknown:QueryInterface (in: This=0x74a1c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ec8c | out: ppvObject=0x19ec8c*=0x0) returned 0x80004002
	[0162.309] IUnknown:QueryInterface (in: This=0x742c80, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ea64 | out: ppvObject=0x19ea64*=0x0) returned 0x80004002
	[0162.310] WbemLocator:IUnknown:AddRef (This=0x74a1c8) returned 0x3
	[0162.310] WbemLocator:IUnknown:QueryInterface (in: This=0x74a1c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e7cc | out: ppvObject=0x19e7cc*=0x0) returned 0x80004002
	[0162.310] WbemLocator:IUnknown:QueryInterface (in: This=0x74a1c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e77c | out: ppvObject=0x19e77c*=0x0) returned 0x80004002
	[0162.310] WbemLocator:IUnknown:QueryInterface (in: This=0x74a1c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e788 | out: ppvObject=0x19e788*=0x74a124) returned 0x0
	[0162.310] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74a124, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e790 | out: pCid=0x19e790*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.310] WbemLocator:IUnknown:Release (This=0x74a124) returned 0x3
	[0162.310] CoGetContextToken (in: pToken=0x19e7e8 | out: pToken=0x19e7e8) returned 0x0
	[0162.310] CoGetContextToken (in: pToken=0x19ebf0 | out: pToken=0x19ebf0) returned 0x0
	[0162.310] WbemLocator:IUnknown:QueryInterface (in: This=0x74a1c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec80 | out: ppvObject=0x19ec80*=0x74a1ac) returned 0x0
	[0162.310] WbemLocator:IRpcOptions:Query (in: This=0x74a1ac, pPrx=0x74a1c8, dwProperty=2, pdwValue=0x19eca8 | out: pdwValue=0x19eca8) returned 0x80004002
	[0162.311] WbemLocator:IUnknown:Release (This=0x74a1ac) returned 0x3
	[0162.311] WbemLocator:IUnknown:Release (This=0x74a1c8) returned 0x2
	[0162.311] CoGetContextToken (in: pToken=0x19f1c8 | out: pToken=0x19f1c8) returned 0x0
	[0162.311] CoGetContextToken (in: pToken=0x19f128 | out: pToken=0x19f128) returned 0x0
	[0162.311] WbemLocator:IUnknown:QueryInterface (in: This=0x74a1c8, riid=0x19f1f8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f1f4 | out: ppvObject=0x19f1f4*=0x742c80) returned 0x0
	[0162.311] IUnknown:AddRef (This=0x742c80) returned 0x4
	[0162.311] IUnknown:Release (This=0x742c80) returned 0x3
	[0162.311] IUnknown:Release (This=0x742c80) returned 0x2
	[0162.311] IUnknown:Release (This=0x7432c0) returned 0x2
	[0162.311] SysStringLen (param_1=0x0) returned 0x0
	[0162.311] IEnumWbemClassObject:Reset (This=0x742c80) returned 0x0
	[0162.312] CoTaskMemAlloc (cb=0x4) returned 0x754938
	[0162.312] IEnumWbemClassObject:Next (in: This=0x742c80, lTimeout=-1, uCount=0x1, apObjects=0x754938, puReturned=0x2861ce4 | out: apObjects=0x754938*=0x720df0, puReturned=0x2861ce4*=0x1) returned 0x0
	[0162.333] IUnknown:QueryInterface (in: This=0x720df0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x720df0) returned 0x0
	[0162.334] IUnknown:QueryInterface (in: This=0x720df0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0162.334] IUnknown:QueryInterface (in: This=0x720df0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0162.334] IUnknown:QueryInterface (in: This=0x720df0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0162.334] IUnknown:AddRef (This=0x720df0) returned 0x3
	[0162.334] IUnknown:QueryInterface (in: This=0x720df0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0162.334] IUnknown:QueryInterface (in: This=0x720df0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0162.334] IUnknown:QueryInterface (in: This=0x720df0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x720df4) returned 0x0
	[0162.335] IMarshal:GetUnmarshalClass (in: This=0x720df4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0162.335] IUnknown:Release (This=0x720df4) returned 0x3
	[0162.335] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0162.335] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0162.335] IUnknown:QueryInterface (in: This=0x720df0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0162.335] IUnknown:Release (This=0x720df0) returned 0x2
	[0162.335] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0162.335] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0162.336] IUnknown:QueryInterface (in: This=0x720df0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x720df0) returned 0x0
	[0162.336] IUnknown:AddRef (This=0x720df0) returned 0x4
	[0162.336] IUnknown:Release (This=0x720df0) returned 0x3
	[0162.336] IUnknown:Release (This=0x720df0) returned 0x2
	[0162.336] CoTaskMemFree (pv=0x754938) 
	[0162.336] CoGetContextToken (in: pToken=0x19f0f0 | out: pToken=0x19f0f0) returned 0x0
	[0162.336] IUnknown:AddRef (This=0x720df0) returned 0x3
	[0162.336] IWbemClassObject:Get (in: This=0x720df0, wszName="__GENUS", lFlags=0, pVal=0x19f404*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f484*=0, plFlavor=0x19f480*=0 | out: pVal=0x19f404*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f484*=3, plFlavor=0x19f480*=64) returned 0x0
	[0162.337] IWbemClassObject:Get (in: This=0x720df0, wszName="__PATH", lFlags=0, pVal=0x19f3e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f46c*=0, plFlavor=0x19f468*=0 | out: pVal=0x19f3e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"XC64ZB\"", varVal2=0x0), pType=0x19f46c*=8, plFlavor=0x19f468*=64) returned 0x0
	[0162.337] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"XC64ZB\"") returned 0x6c
	[0162.337] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"XC64ZB\"") returned 0x6c
	[0162.337] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5a0
	[0162.337] SetEvent (hEvent=0x2bc) returned 1
	[0162.338] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c0*=0x5a0, lpdwindex=0x19f1dc | out: lpdwindex=0x19f1dc) returned 0x0
	[0162.400] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0162.400] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0162.400] WbemDefPath:IUnknown:QueryInterface (in: This=0x764398, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x764398) returned 0x0
	[0162.400] WbemDefPath:IUnknown:AddRef (This=0x764398) returned 0x3
	[0162.400] WbemDefPath:IUnknown:Release (This=0x764398) returned 0x2
	[0162.400] WbemDefPath:IWbemPath:SetText (This=0x764398, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"XC64ZB\"") returned 0x0
	[0162.401] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f440 | out: puCount=0x19f440*=0x2) returned 0x0
	[0162.401] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f43c*=0x0, pszText=0x0 | out: puBuffLength=0x19f43c*=0xf, pszText=0x0) returned 0x0
	[0162.401] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f43c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f43c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0162.401] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f40c | out: puCount=0x19f40c*=0x2) returned 0x0
	[0162.401] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f408*=0x0, pszText=0x0 | out: puBuffLength=0x19f408*=0xf, pszText=0x0) returned 0x0
	[0162.401] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f408*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f408*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0162.401] IWbemClassObject:Get (in: This=0x720df0, wszName="Manufacturer", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28625c8*=0, plFlavor=0x28625cc*=0 | out: pVal=0x19f408*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Dell Inc.", varVal2=0x0), pType=0x28625c8*=8, plFlavor=0x28625cc*=0) returned 0x0
	[0162.401] SysStringByteLen (bstr="Dell Inc.") returned 0x12
	[0162.401] SysStringByteLen (bstr="Dell Inc.") returned 0x12
	[0162.401] IWbemClassObject:Get (in: This=0x720df0, wszName="Manufacturer", lFlags=0, pVal=0x19f410*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28625c8*=8, plFlavor=0x28625cc*=0 | out: pVal=0x19f410*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Dell Inc.", varVal2=0x0), pType=0x28625c8*=8, plFlavor=0x28625cc*=0) returned 0x0
	[0162.401] SysStringByteLen (bstr="Dell Inc.") returned 0x12
	[0162.401] SysStringByteLen (bstr="Dell Inc.") returned 0x12
	[0162.402] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f40c | out: puCount=0x19f40c*=0x2) returned 0x0
	[0162.402] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f408*=0x0, pszText=0x0 | out: puBuffLength=0x19f408*=0xf, pszText=0x0) returned 0x0
	[0162.402] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f408*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f408*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0162.402] IWbemClassObject:Get (in: This=0x720df0, wszName="Manufacturer", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x286276c*=0, plFlavor=0x2862770*=0 | out: pVal=0x19f408*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Dell Inc.", varVal2=0x0), pType=0x286276c*=8, plFlavor=0x2862770*=0) returned 0x0
	[0162.402] SysStringByteLen (bstr="Dell Inc.") returned 0x12
	[0162.402] SysStringByteLen (bstr="Dell Inc.") returned 0x12
	[0162.402] IWbemClassObject:Get (in: This=0x720df0, wszName="Manufacturer", lFlags=0, pVal=0x19f410*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x286276c*=8, plFlavor=0x2862770*=0 | out: pVal=0x19f410*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Dell Inc.", varVal2=0x0), pType=0x286276c*=8, plFlavor=0x2862770*=0) returned 0x0
	[0162.402] SysStringByteLen (bstr="Dell Inc.") returned 0x12
	[0162.402] SysStringByteLen (bstr="Dell Inc.") returned 0x12
	[0162.402] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f40c | out: puCount=0x19f40c*=0x2) returned 0x0
	[0162.402] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f408*=0x0, pszText=0x0 | out: puBuffLength=0x19f408*=0xf, pszText=0x0) returned 0x0
	[0162.402] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f408*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f408*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0162.402] IWbemClassObject:Get (in: This=0x720df0, wszName="Model", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28628fc*=0, plFlavor=0x2862900*=0 | out: pVal=0x19f408*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="PowerEdge R610", varVal2=0x0), pType=0x28628fc*=8, plFlavor=0x2862900*=0) returned 0x0
	[0162.403] SysStringByteLen (bstr="PowerEdge R610") returned 0x1c
	[0162.403] SysStringByteLen (bstr="PowerEdge R610") returned 0x1c
	[0162.403] IWbemClassObject:Get (in: This=0x720df0, wszName="Model", lFlags=0, pVal=0x19f410*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28628fc*=8, plFlavor=0x2862900*=0 | out: pVal=0x19f410*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="PowerEdge R610", varVal2=0x0), pType=0x28628fc*=8, plFlavor=0x2862900*=0) returned 0x0
	[0162.403] SysStringByteLen (bstr="PowerEdge R610") returned 0x1c
	[0162.403] SysStringByteLen (bstr="PowerEdge R610") returned 0x1c
	[0162.403] CoTaskMemAlloc (cb=0x4) returned 0x754858
	[0162.403] IEnumWbemClassObject:Next (in: This=0x742c80, lTimeout=-1, uCount=0x1, apObjects=0x754858, puReturned=0x2861ce4 | out: apObjects=0x754858*=0x0, puReturned=0x2861ce4*=0x0) returned 0x1
	[0162.404] CoTaskMemFree (pv=0x754858) 
	[0162.404] CoGetContextToken (in: pToken=0x19f340 | out: pToken=0x19f340) returned 0x0
	[0162.404] WbemLocator:IUnknown:Release (This=0x74a1c8) returned 0x1
	[0162.404] IUnknown:Release (This=0x742c80) returned 0x0
	[0162.412] CoGetContextToken (in: pToken=0x19f340 | out: pToken=0x19f340) returned 0x0
	[0162.412] WbemLocator:IUnknown:Release (This=0x74a5c8) returned 0x1
	[0162.412] IUnknown:Release (This=0x7432c0) returned 0x0
	[0162.423] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5a4
	[0162.423] SetEvent (hEvent=0x2bc) returned 1
	[0162.423] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3dc*=0x5a4, lpdwindex=0x19f1fc | out: lpdwindex=0x19f1fc) returned 0x0
	[0162.427] CoGetContextToken (in: pToken=0x19f2a8 | out: pToken=0x19f2a8) returned 0x0
	[0162.427] CoGetContextToken (in: pToken=0x19f208 | out: pToken=0x19f208) returned 0x0
	[0162.427] WbemDefPath:IUnknown:QueryInterface (in: This=0x7640f8, riid=0x19f2d8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2d4 | out: ppvObject=0x19f2d4*=0x7640f8) returned 0x0
	[0162.428] WbemDefPath:IUnknown:AddRef (This=0x7640f8) returned 0x3
	[0162.428] WbemDefPath:IUnknown:Release (This=0x7640f8) returned 0x2
	[0162.428] WbemDefPath:IWbemPath:SetText (This=0x7640f8, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0162.428] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7640f8, puCount=0x19f458 | out: puCount=0x19f458*=0x2) returned 0x0
	[0162.428] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f454*=0x0, pszText=0x0 | out: puBuffLength=0x19f454*=0xf, pszText=0x0) returned 0x0
	[0162.428] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f454*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f454*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0162.428] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7640f8, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0162.428] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0162.428] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0162.440] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f2f8*=0x5b8, lpdwindex=0x19f1ac | out: lpdwindex=0x19f1ac) returned 0x0
	[0162.528] CoGetContextToken (in: pToken=0x19f0b8 | out: pToken=0x19f0b8) returned 0x0
	[0162.528] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0162.528] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f040 | out: ppvObject=0x19f040*=0x712148) returned 0x0
	[0162.528] CObjectContext::ContextCallback () returned 0x0
	[0162.530] IUnknown:Release (This=0x712148) returned 0x1
	[0162.530] CoUnmarshalInterface (in: pStm=0x7435d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f0a8 | out: ppv=0x19f0a8*=0x7496c8) returned 0x0
	[0162.531] CoMarshalInterface (pStm=0x7435d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7496c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0162.531] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ef4c | out: ppvObject=0x19ef4c*=0x7496c8) returned 0x0
	[0162.531] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ef08 | out: ppvObject=0x19ef08*=0x0) returned 0x80004002
	[0162.532] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed24 | out: ppvObject=0x19ed24*=0x0) returned 0x80004002
	[0162.532] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19eafc | out: ppvObject=0x19eafc*=0x0) returned 0x80004002
	[0162.533] WbemLocator:IUnknown:AddRef (This=0x7496c8) returned 0x3
	[0162.533] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e864 | out: ppvObject=0x19e864*=0x0) returned 0x80004002
	[0162.533] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e814 | out: ppvObject=0x19e814*=0x0) returned 0x80004002
	[0162.533] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e820 | out: ppvObject=0x19e820*=0x749624) returned 0x0
	[0162.533] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749624, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e828 | out: pCid=0x19e828*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.533] WbemLocator:IUnknown:Release (This=0x749624) returned 0x3
	[0162.534] CoGetContextToken (in: pToken=0x19e880 | out: pToken=0x19e880) returned 0x0
	[0162.534] CoGetContextToken (in: pToken=0x19ec88 | out: pToken=0x19ec88) returned 0x0
	[0162.534] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed18 | out: ppvObject=0x19ed18*=0x7496ac) returned 0x0
	[0162.534] WbemLocator:IRpcOptions:Query (in: This=0x7496ac, pPrx=0x7496c8, dwProperty=2, pdwValue=0x19ed40 | out: pdwValue=0x19ed40) returned 0x0
	[0162.534] WbemLocator:IUnknown:Release (This=0x7496ac) returned 0x3
	[0162.534] WbemLocator:IUnknown:Release (This=0x7496c8) returned 0x2
	[0162.534] WbemLocator:IUnknown:Release (This=0x7496c8) returned 0x1
	[0162.534] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0
	[0162.534] WbemLocator:IUnknown:AddRef (This=0x7496c8) returned 0x2
	[0162.534] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x7496a4) returned 0x0
	[0162.535] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7496a4, pProxy=0x7496c8, pAuthnSvc=0x19f300, pAuthzSvc=0x19f2fc, pServerPrincName=0x19f2f4, pAuthnLevel=0x19f2f8, pImpLevel=0x19f2e8, pAuthInfo=0x19f2ec, pCapabilites=0x19f2f0 | out: pAuthnSvc=0x19f300*=0xa, pAuthzSvc=0x19f2fc*=0x0, pServerPrincName=0x19f2f4, pAuthnLevel=0x19f2f8*=0x6, pImpLevel=0x19f2e8*=0x2, pAuthInfo=0x19f2ec, pCapabilites=0x19f2f0*=0x1) returned 0x0
	[0162.535] WbemLocator:IUnknown:Release (This=0x7496a4) returned 0x2
	[0162.535] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a4 | out: ppvObject=0x19f2a4*=0x7496c8) returned 0x0
	[0162.535] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a0 | out: ppvObject=0x19f2a0*=0x7496a4) returned 0x0
	[0162.535] WbemLocator:IClientSecurity:SetBlanket (This=0x7496a4, pProxy=0x7496c8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.535] WbemLocator:IUnknown:Release (This=0x7496a4) returned 0x3
	[0162.535] WbemLocator:IUnknown:Release (This=0x7496c8) returned 0x2
	[0162.535] CoTaskMemFree (pv=0x747f00) 
	[0162.535] WbemLocator:IUnknown:Release (This=0x7496c8) returned 0x1
	[0162.535] SysStringLen (param_1=0x0) returned 0x0
	[0162.536] CoGetContextToken (in: pToken=0x19f268 | out: pToken=0x19f268) returned 0x0
	[0162.536] CoGetContextToken (in: pToken=0x19f1c8 | out: pToken=0x19f1c8) returned 0x0
	[0162.536] WbemLocator:IUnknown:QueryInterface (in: This=0x7496c8, riid=0x19f298*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19f294 | out: ppvObject=0x19f294*=0x776498) returned 0x0
	[0162.537] WbemLocator:IUnknown:AddRef (This=0x776498) returned 0x3
	[0162.537] WbemLocator:IUnknown:Release (This=0x776498) returned 0x2
	[0162.537] CoGetContextToken (in: pToken=0x19f228 | out: pToken=0x19f228) returned 0x0
	[0162.537] WbemLocator:IUnknown:AddRef (This=0x776498) returned 0x3
	[0162.537] WbemLocator:IUnknown:QueryInterface (in: This=0x776498, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2b0 | out: ppvObject=0x19f2b0*=0x7496a4) returned 0x0
	[0162.537] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7496a4, pProxy=0x776498, pAuthnSvc=0x19f300, pAuthzSvc=0x19f2fc, pServerPrincName=0x19f2f4, pAuthnLevel=0x19f2f8, pImpLevel=0x19f2e8, pAuthInfo=0x19f2ec, pCapabilites=0x19f2f0 | out: pAuthnSvc=0x19f300*=0xa, pAuthzSvc=0x19f2fc*=0x0, pServerPrincName=0x19f2f4, pAuthnLevel=0x19f2f8*=0x6, pImpLevel=0x19f2e8*=0x2, pAuthInfo=0x19f2ec, pCapabilites=0x19f2f0*=0x1) returned 0x0
	[0162.537] WbemLocator:IUnknown:Release (This=0x7496a4) returned 0x3
	[0162.537] WbemLocator:IUnknown:QueryInterface (in: This=0x776498, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a4 | out: ppvObject=0x19f2a4*=0x7496c8) returned 0x0
	[0162.537] WbemLocator:IUnknown:QueryInterface (in: This=0x776498, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a0 | out: ppvObject=0x19f2a0*=0x7496a4) returned 0x0
	[0162.537] WbemLocator:IClientSecurity:SetBlanket (This=0x7496a4, pProxy=0x776498, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.538] WbemLocator:IUnknown:Release (This=0x7496a4) returned 0x4
	[0162.538] WbemLocator:IUnknown:Release (This=0x7496c8) returned 0x3
	[0162.538] CoTaskMemFree (pv=0x7481a0) 
	[0162.538] WbemLocator:IUnknown:Release (This=0x776498) returned 0x2
	[0162.538] SysStringLen (param_1=0x0) returned 0x0
	[0162.538] CoGetContextToken (in: pToken=0x19f1a0 | out: pToken=0x19f1a0) returned 0x0
	[0162.538] WbemLocator:IUnknown:AddRef (This=0x776498) returned 0x3
	[0162.538] IWbemServices:ExecQuery (in: This=0x776498, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19f3bc | out: ppEnum=0x19f3bc*=0x742fa0) returned 0x0
	[0162.564] IUnknown:QueryInterface (in: This=0x742fa0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f214 | out: ppvObject=0x19f214*=0x742fa4) returned 0x0
	[0162.565] IClientSecurity:QueryBlanket (in: This=0x742fa4, pProxy=0x742fa0, pAuthnSvc=0x19f264, pAuthzSvc=0x19f260, pServerPrincName=0x19f258, pAuthnLevel=0x19f25c, pImpLevel=0x19f24c, pAuthInfo=0x19f250, pCapabilites=0x19f254 | out: pAuthnSvc=0x19f264*=0xa, pAuthzSvc=0x19f260*=0x0, pServerPrincName=0x19f258, pAuthnLevel=0x19f25c*=0x6, pImpLevel=0x19f24c*=0x2, pAuthInfo=0x19f250, pCapabilites=0x19f254*=0x1) returned 0x0
	[0162.565] IUnknown:Release (This=0x742fa4) returned 0x1
	[0162.565] IUnknown:QueryInterface (in: This=0x742fa0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f208 | out: ppvObject=0x19f208*=0x7492c8) returned 0x0
	[0162.565] IUnknown:QueryInterface (in: This=0x742fa0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f204 | out: ppvObject=0x19f204*=0x742fa4) returned 0x0
	[0162.565] IClientSecurity:SetBlanket (This=0x742fa4, pProxy=0x742fa0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.567] IUnknown:Release (This=0x742fa4) returned 0x2
	[0162.567] WbemLocator:IUnknown:Release (This=0x7492c8) returned 0x1
	[0162.567] CoTaskMemFree (pv=0x748080) 
	[0162.567] IUnknown:QueryInterface (in: This=0x742fa0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee00 | out: ppvObject=0x19ee00*=0x7492c8) returned 0x0
	[0162.568] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19edbc | out: ppvObject=0x19edbc*=0x0) returned 0x80004002
	[0162.568] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ebdc | out: ppvObject=0x19ebdc*=0x0) returned 0x80004002
	[0162.569] IUnknown:QueryInterface (in: This=0x742fa0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e9b4 | out: ppvObject=0x19e9b4*=0x0) returned 0x80004002
	[0162.569] WbemLocator:IUnknown:AddRef (This=0x7492c8) returned 0x3
	[0162.569] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e71c | out: ppvObject=0x19e71c*=0x0) returned 0x80004002
	[0162.570] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e6cc | out: ppvObject=0x19e6cc*=0x0) returned 0x80004002
	[0162.570] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6d8 | out: ppvObject=0x19e6d8*=0x749224) returned 0x0
	[0162.570] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749224, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e6e0 | out: pCid=0x19e6e0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.570] WbemLocator:IUnknown:Release (This=0x749224) returned 0x3
	[0162.570] CoGetContextToken (in: pToken=0x19e738 | out: pToken=0x19e738) returned 0x0
	[0162.570] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0162.570] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebd0 | out: ppvObject=0x19ebd0*=0x7492ac) returned 0x0
	[0162.570] WbemLocator:IRpcOptions:Query (in: This=0x7492ac, pPrx=0x7492c8, dwProperty=2, pdwValue=0x19ebf8 | out: pdwValue=0x19ebf8) returned 0x80004002
	[0162.570] WbemLocator:IUnknown:Release (This=0x7492ac) returned 0x3
	[0162.571] WbemLocator:IUnknown:Release (This=0x7492c8) returned 0x2
	[0162.571] CoGetContextToken (in: pToken=0x19f110 | out: pToken=0x19f110) returned 0x0
	[0162.571] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0
	[0162.571] WbemLocator:IUnknown:QueryInterface (in: This=0x7492c8, riid=0x19f140*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f13c | out: ppvObject=0x19f13c*=0x742fa0) returned 0x0
	[0162.571] IUnknown:AddRef (This=0x742fa0) returned 0x4
	[0162.571] IUnknown:Release (This=0x742fa0) returned 0x3
	[0162.571] IUnknown:Release (This=0x742fa0) returned 0x2
	[0162.571] WbemLocator:IUnknown:Release (This=0x776498) returned 0x2
	[0162.571] SysStringLen (param_1=0x0) returned 0x0
	[0162.622] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7640f8, puCount=0x19f408 | out: puCount=0x19f408*=0x2) returned 0x0
	[0162.622] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f404*=0x0, pszText=0x0 | out: puBuffLength=0x19f404*=0xf, pszText=0x0) returned 0x0
	[0162.622] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f404*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f404*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0162.622] CoGetContextToken (in: pToken=0x19f258 | out: pToken=0x19f258) returned 0x0
	[0162.622] IUnknown:AddRef (This=0x742fa0) returned 0x3
	[0162.622] IEnumWbemClassObject:Clone (in: This=0x742fa0, ppEnum=0x19f414 | out: ppEnum=0x19f414*=0x742c80) returned 0x0
	[0162.623] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2d8 | out: ppvObject=0x19f2d8*=0x742c84) returned 0x0
	[0162.624] IClientSecurity:QueryBlanket (in: This=0x742c84, pProxy=0x742c80, pAuthnSvc=0x19f328, pAuthzSvc=0x19f324, pServerPrincName=0x19f31c, pAuthnLevel=0x19f320, pImpLevel=0x19f310, pAuthInfo=0x19f314, pCapabilites=0x19f318 | out: pAuthnSvc=0x19f328*=0xa, pAuthzSvc=0x19f324*=0x0, pServerPrincName=0x19f31c, pAuthnLevel=0x19f320*=0x6, pImpLevel=0x19f310*=0x2, pAuthInfo=0x19f314, pCapabilites=0x19f318*=0x1) returned 0x0
	[0162.624] IUnknown:Release (This=0x742c84) returned 0x1
	[0162.624] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2cc | out: ppvObject=0x19f2cc*=0x749ec8) returned 0x0
	[0162.624] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2c8 | out: ppvObject=0x19f2c8*=0x742c84) returned 0x0
	[0162.624] IClientSecurity:SetBlanket (This=0x742c84, pProxy=0x742c80, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.626] IUnknown:Release (This=0x742c84) returned 0x2
	[0162.626] WbemLocator:IUnknown:Release (This=0x749ec8) returned 0x1
	[0162.626] CoTaskMemFree (pv=0x747e40) 
	[0162.626] IUnknown:QueryInterface (in: This=0x742c80, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eeb4 | out: ppvObject=0x19eeb4*=0x749ec8) returned 0x0
	[0162.627] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ee70 | out: ppvObject=0x19ee70*=0x0) returned 0x80004002
	[0162.627] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ec8c | out: ppvObject=0x19ec8c*=0x0) returned 0x80004002
	[0162.628] IUnknown:QueryInterface (in: This=0x742c80, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ea64 | out: ppvObject=0x19ea64*=0x0) returned 0x80004002
	[0162.629] WbemLocator:IUnknown:AddRef (This=0x749ec8) returned 0x3
	[0162.629] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e7cc | out: ppvObject=0x19e7cc*=0x0) returned 0x80004002
	[0162.629] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e77c | out: ppvObject=0x19e77c*=0x0) returned 0x80004002
	[0162.629] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e788 | out: ppvObject=0x19e788*=0x749e24) returned 0x0
	[0162.629] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749e24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e790 | out: pCid=0x19e790*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.629] WbemLocator:IUnknown:Release (This=0x749e24) returned 0x3
	[0162.629] CoGetContextToken (in: pToken=0x19e7e8 | out: pToken=0x19e7e8) returned 0x0
	[0162.629] CoGetContextToken (in: pToken=0x19ebf0 | out: pToken=0x19ebf0) returned 0x0
	[0162.629] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec80 | out: ppvObject=0x19ec80*=0x749eac) returned 0x0
	[0162.630] WbemLocator:IRpcOptions:Query (in: This=0x749eac, pPrx=0x749ec8, dwProperty=2, pdwValue=0x19eca8 | out: pdwValue=0x19eca8) returned 0x80004002
	[0162.630] WbemLocator:IUnknown:Release (This=0x749eac) returned 0x3
	[0162.630] WbemLocator:IUnknown:Release (This=0x749ec8) returned 0x2
	[0162.630] CoGetContextToken (in: pToken=0x19f1c8 | out: pToken=0x19f1c8) returned 0x0
	[0162.630] CoGetContextToken (in: pToken=0x19f128 | out: pToken=0x19f128) returned 0x0
	[0162.630] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x19f1f8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f1f4 | out: ppvObject=0x19f1f4*=0x742c80) returned 0x0
	[0162.630] IUnknown:AddRef (This=0x742c80) returned 0x4
	[0162.630] IUnknown:Release (This=0x742c80) returned 0x3
	[0162.630] IUnknown:Release (This=0x742c80) returned 0x2
	[0162.630] IUnknown:Release (This=0x742fa0) returned 0x2
	[0162.630] SysStringLen (param_1=0x0) returned 0x0
	[0162.630] IEnumWbemClassObject:Reset (This=0x742c80) returned 0x0
	[0162.631] CoTaskMemAlloc (cb=0x4) returned 0x7547b8
	[0162.631] IEnumWbemClassObject:Next (in: This=0x742c80, lTimeout=-1, uCount=0x1, apObjects=0x7547b8, puReturned=0x2863a98 | out: apObjects=0x7547b8*=0x7202c8, puReturned=0x2863a98*=0x1) returned 0x0
	[0162.655] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7202c8) returned 0x0
	[0162.655] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0162.655] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0162.655] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0162.655] IUnknown:AddRef (This=0x7202c8) returned 0x3
	[0162.656] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0162.656] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0162.656] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7202cc) returned 0x0
	[0162.656] IMarshal:GetUnmarshalClass (in: This=0x7202cc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0162.656] IUnknown:Release (This=0x7202cc) returned 0x3
	[0162.656] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0162.656] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0162.656] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0162.656] IUnknown:Release (This=0x7202c8) returned 0x2
	[0162.656] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0162.656] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0162.656] IUnknown:QueryInterface (in: This=0x7202c8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7202c8) returned 0x0
	[0162.656] IUnknown:AddRef (This=0x7202c8) returned 0x4
	[0162.656] IUnknown:Release (This=0x7202c8) returned 0x3
	[0162.656] IUnknown:Release (This=0x7202c8) returned 0x2
	[0162.657] CoTaskMemFree (pv=0x7547b8) 
	[0162.657] CoGetContextToken (in: pToken=0x19f0f0 | out: pToken=0x19f0f0) returned 0x0
	[0162.657] IUnknown:AddRef (This=0x7202c8) returned 0x3
	[0162.657] IWbemClassObject:Get (in: This=0x7202c8, wszName="__GENUS", lFlags=0, pVal=0x19f404*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f484*=0, plFlavor=0x19f480*=0 | out: pVal=0x19f404*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f484*=3, plFlavor=0x19f480*=64) returned 0x0
	[0162.657] IWbemClassObject:Get (in: This=0x7202c8, wszName="__PATH", lFlags=0, pVal=0x19f3e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f46c*=0, plFlavor=0x19f468*=0 | out: pVal=0x19f3e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19f46c*=8, plFlavor=0x19f468*=64) returned 0x0
	[0162.657] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0162.657] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0162.657] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5bc
	[0162.657] SetEvent (hEvent=0x2bc) returned 1
	[0162.658] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c0*=0x5bc, lpdwindex=0x19f1dc | out: lpdwindex=0x19f1dc) returned 0x0
	[0162.665] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0162.665] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0162.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x764088, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x764088) returned 0x0
	[0162.665] WbemDefPath:IUnknown:AddRef (This=0x764088) returned 0x3
	[0162.665] WbemDefPath:IUnknown:Release (This=0x764088) returned 0x2
	[0162.665] WbemDefPath:IWbemPath:SetText (This=0x764088, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0
	[0162.665] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7640f8, puCount=0x19f440 | out: puCount=0x19f440*=0x2) returned 0x0
	[0162.666] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f43c*=0x0, pszText=0x0 | out: puBuffLength=0x19f43c*=0xf, pszText=0x0) returned 0x0
	[0162.666] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f43c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f43c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0162.666] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7640f8, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0162.666] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0162.666] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0162.666] IWbemClassObject:Get (in: This=0x7202c8, wszName="Name", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x286430c*=0, plFlavor=0x2864310*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x286430c*=8, plFlavor=0x2864310*=0) returned 0x0
	[0162.666] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0162.666] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0162.666] IWbemClassObject:Get (in: This=0x7202c8, wszName="Name", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x286430c*=8, plFlavor=0x2864310*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x286430c*=8, plFlavor=0x2864310*=0) returned 0x0
	[0162.666] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0162.666] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0162.667] CoTaskMemAlloc (cb=0x4) returned 0x754878
	[0162.667] IEnumWbemClassObject:Next (in: This=0x742c80, lTimeout=-1, uCount=0x1, apObjects=0x754878, puReturned=0x2863a98 | out: apObjects=0x754878*=0x0, puReturned=0x2863a98*=0x0) returned 0x1
	[0162.668] CoTaskMemFree (pv=0x754878) 
	[0162.668] CoGetContextToken (in: pToken=0x19f340 | out: pToken=0x19f340) returned 0x0
	[0162.668] WbemLocator:IUnknown:Release (This=0x749ec8) returned 0x1
	[0162.668] IUnknown:Release (This=0x742c80) returned 0x0
	[0162.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SbieDll.dll", cchWideChar=11, lpMultiByteStr=0x19f460, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SbieDll.dlllk\x81d", lpUsedDefaultChar=0x0) returned 11
	[0162.717] GetModuleHandleA (lpModuleName="SbieDll.dll") returned 0x0
	[0162.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SxIn.dll", cchWideChar=8, lpMultiByteStr=0x19f464, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SxIn.dllk\x81d", lpUsedDefaultChar=0x0) returned 8
	[0162.717] GetModuleHandleA (lpModuleName="SxIn.dll") returned 0x0
	[0162.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sf2.dll", cchWideChar=7, lpMultiByteStr=0x19f464, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sf2.dlllk\x81d", lpUsedDefaultChar=0x0) returned 7
	[0162.718] GetModuleHandleA (lpModuleName="Sf2.dll") returned 0x0
	[0162.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snxhk.dll", cchWideChar=9, lpMultiByteStr=0x19f464, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snxhk.dll\x81d", lpUsedDefaultChar=0x0) returned 9
	[0162.718] GetModuleHandleA (lpModuleName="snxhk.dll") returned 0x0
	[0162.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdvrt32.dll", cchWideChar=12, lpMultiByteStr=0x19f460, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmdvrt32.dllk\x81d", lpUsedDefaultChar=0x0) returned 12
	[0162.718] GetModuleHandleA (lpModuleName="cmdvrt32.dll") returned 0x0
	[0162.727] GetCurrentProcessId () returned 0x774
	[0162.729] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x19ed5c | out: lpLuid=0x19ed5c*(LowPart=0x14, HighPart=0)) returned 1
	[0162.732] GetCurrentProcess () returned 0xffffffff
	[0162.733] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ed58 | out: TokenHandle=0x19ed58*=0x57c) returned 1
	[0162.733] AdjustTokenPrivileges (in: TokenHandle=0x57c, DisableAllPrivileges=0, NewState=0x2864878*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0162.734] CloseHandle (hObject=0x57c) returned 1
	[0162.734] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x774) returned 0x57c
	[0162.735] GetExitCodeProcess (in: hProcess=0x57c, lpExitCode=0x2864804 | out: lpExitCode=0x2864804*=0x103) returned 1
	[0162.767] CheckRemoteDebuggerPresent (in: hProcess=0x57c, pbDebuggerPresent=0x19f4b0 | out: pbDebuggerPresent=0x19f4b0) returned 1
	[0162.811] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x37e94b0, Length=0x20000, ResultLength=0x19f470 | out: SystemInformation=0x37e94b0, ResultLength=0x19f470*=0x17298) returned 0x0
	[0162.910] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f450 | out: puCount=0x19f450*=0x2) returned 0x0
	[0162.910] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f44c*=0x0, pszText=0x0 | out: puBuffLength=0x19f44c*=0xf, pszText=0x0) returned 0x0
	[0162.911] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f44c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f44c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0162.994] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f2fc*=0x5d4, lpdwindex=0x19f1ac | out: lpdwindex=0x19f1ac) returned 0x0
	[0163.053] CoGetContextToken (in: pToken=0x19f0b8 | out: pToken=0x19f0b8) returned 0x0
	[0163.053] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0163.053] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f040 | out: ppvObject=0x19f040*=0x712148) returned 0x0
	[0163.053] CObjectContext::ContextCallback () returned 0x0
	[0163.056] IUnknown:Release (This=0x712148) returned 0x1
	[0163.057] CoUnmarshalInterface (in: pStm=0x743710, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f0a8 | out: ppv=0x19f0a8*=0x7489c8) returned 0x0
	[0163.057] CoMarshalInterface (pStm=0x743710, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7489c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0163.057] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ef4c | out: ppvObject=0x19ef4c*=0x7489c8) returned 0x0
	[0163.057] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ef08 | out: ppvObject=0x19ef08*=0x0) returned 0x80004002
	[0163.058] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed24 | out: ppvObject=0x19ed24*=0x0) returned 0x80004002
	[0163.058] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19eafc | out: ppvObject=0x19eafc*=0x0) returned 0x80004002
	[0163.059] WbemLocator:IUnknown:AddRef (This=0x7489c8) returned 0x3
	[0163.059] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e864 | out: ppvObject=0x19e864*=0x0) returned 0x80004002
	[0163.059] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e814 | out: ppvObject=0x19e814*=0x0) returned 0x80004002
	[0163.059] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e820 | out: ppvObject=0x19e820*=0x748924) returned 0x0
	[0163.060] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748924, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e828 | out: pCid=0x19e828*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.060] WbemLocator:IUnknown:Release (This=0x748924) returned 0x3
	[0163.060] CoGetContextToken (in: pToken=0x19e880 | out: pToken=0x19e880) returned 0x0
	[0163.060] CoGetContextToken (in: pToken=0x19ec88 | out: pToken=0x19ec88) returned 0x0
	[0163.060] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed18 | out: ppvObject=0x19ed18*=0x7489ac) returned 0x0
	[0163.060] WbemLocator:IRpcOptions:Query (in: This=0x7489ac, pPrx=0x7489c8, dwProperty=2, pdwValue=0x19ed40 | out: pdwValue=0x19ed40) returned 0x0
	[0163.060] WbemLocator:IUnknown:Release (This=0x7489ac) returned 0x3
	[0163.060] WbemLocator:IUnknown:Release (This=0x7489c8) returned 0x2
	[0163.061] WbemLocator:IUnknown:Release (This=0x7489c8) returned 0x1
	[0163.061] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0
	[0163.061] WbemLocator:IUnknown:AddRef (This=0x7489c8) returned 0x2
	[0163.061] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2b4 | out: ppvObject=0x19f2b4*=0x7489a4) returned 0x0
	[0163.062] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7489a4, pProxy=0x7489c8, pAuthnSvc=0x19f304, pAuthzSvc=0x19f300, pServerPrincName=0x19f2f8, pAuthnLevel=0x19f2fc, pImpLevel=0x19f2ec, pAuthInfo=0x19f2f0, pCapabilites=0x19f2f4 | out: pAuthnSvc=0x19f304*=0xa, pAuthzSvc=0x19f300*=0x0, pServerPrincName=0x19f2f8, pAuthnLevel=0x19f2fc*=0x6, pImpLevel=0x19f2ec*=0x2, pAuthInfo=0x19f2f0, pCapabilites=0x19f2f4*=0x1) returned 0x0
	[0163.062] WbemLocator:IUnknown:Release (This=0x7489a4) returned 0x2
	[0163.062] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a8 | out: ppvObject=0x19f2a8*=0x7489c8) returned 0x0
	[0163.062] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a4 | out: ppvObject=0x19f2a4*=0x7489a4) returned 0x0
	[0163.062] WbemLocator:IClientSecurity:SetBlanket (This=0x7489a4, pProxy=0x7489c8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0163.062] WbemLocator:IUnknown:Release (This=0x7489a4) returned 0x3
	[0163.062] WbemLocator:IUnknown:Release (This=0x7489c8) returned 0x2
	[0163.062] CoTaskMemFree (pv=0x7480b0) 
	[0163.063] WbemLocator:IUnknown:Release (This=0x7489c8) returned 0x1
	[0163.063] SysStringLen (param_1=0x0) returned 0x0
	[0163.063] CoGetContextToken (in: pToken=0x19f270 | out: pToken=0x19f270) returned 0x0
	[0163.063] CoGetContextToken (in: pToken=0x19f1d0 | out: pToken=0x19f1d0) returned 0x0
	[0163.063] WbemLocator:IUnknown:QueryInterface (in: This=0x7489c8, riid=0x19f2a0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19f29c | out: ppvObject=0x19f29c*=0x776358) returned 0x0
	[0163.064] WbemLocator:IUnknown:AddRef (This=0x776358) returned 0x3
	[0163.064] WbemLocator:IUnknown:Release (This=0x776358) returned 0x2
	[0163.064] CoGetContextToken (in: pToken=0x19f230 | out: pToken=0x19f230) returned 0x0
	[0163.064] WbemLocator:IUnknown:AddRef (This=0x776358) returned 0x3
	[0163.064] WbemLocator:IUnknown:QueryInterface (in: This=0x776358, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2b4 | out: ppvObject=0x19f2b4*=0x7489a4) returned 0x0
	[0163.064] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7489a4, pProxy=0x776358, pAuthnSvc=0x19f304, pAuthzSvc=0x19f300, pServerPrincName=0x19f2f8, pAuthnLevel=0x19f2fc, pImpLevel=0x19f2ec, pAuthInfo=0x19f2f0, pCapabilites=0x19f2f4 | out: pAuthnSvc=0x19f304*=0xa, pAuthzSvc=0x19f300*=0x0, pServerPrincName=0x19f2f8, pAuthnLevel=0x19f2fc*=0x6, pImpLevel=0x19f2ec*=0x2, pAuthInfo=0x19f2f0, pCapabilites=0x19f2f4*=0x1) returned 0x0
	[0163.064] WbemLocator:IUnknown:Release (This=0x7489a4) returned 0x3
	[0163.064] WbemLocator:IUnknown:QueryInterface (in: This=0x776358, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a8 | out: ppvObject=0x19f2a8*=0x7489c8) returned 0x0
	[0163.064] WbemLocator:IUnknown:QueryInterface (in: This=0x776358, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2a4 | out: ppvObject=0x19f2a4*=0x7489a4) returned 0x0
	[0163.064] WbemLocator:IClientSecurity:SetBlanket (This=0x7489a4, pProxy=0x776358, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0163.065] WbemLocator:IUnknown:Release (This=0x7489a4) returned 0x4
	[0163.065] WbemLocator:IUnknown:Release (This=0x7489c8) returned 0x3
	[0163.065] CoTaskMemFree (pv=0x7481a0) 
	[0163.065] WbemLocator:IUnknown:Release (This=0x776358) returned 0x2
	[0163.065] SysStringLen (param_1=0x0) returned 0x0
	[0163.065] CoGetContextToken (in: pToken=0x19f1b8 | out: pToken=0x19f1b8) returned 0x0
	[0163.065] WbemLocator:IUnknown:AddRef (This=0x776358) returned 0x3
	[0163.065] IWbemServices:ExecQuery (in: This=0x776358, strQueryLanguage="WQL", strQuery="Select * From Win32_Process", lFlags=16, pCtx=0x0, ppEnum=0x19f3c0 | out: ppEnum=0x19f3c0*=0x742898) returned 0x0
	[0163.091] IUnknown:QueryInterface (in: This=0x742898, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f228 | out: ppvObject=0x19f228*=0x74289c) returned 0x0
	[0163.091] IClientSecurity:QueryBlanket (in: This=0x74289c, pProxy=0x742898, pAuthnSvc=0x19f278, pAuthzSvc=0x19f274, pServerPrincName=0x19f26c, pAuthnLevel=0x19f270, pImpLevel=0x19f260, pAuthInfo=0x19f264, pCapabilites=0x19f268 | out: pAuthnSvc=0x19f278*=0xa, pAuthzSvc=0x19f274*=0x0, pServerPrincName=0x19f26c, pAuthnLevel=0x19f270*=0x6, pImpLevel=0x19f260*=0x2, pAuthInfo=0x19f264, pCapabilites=0x19f268*=0x1) returned 0x0
	[0163.091] IUnknown:Release (This=0x74289c) returned 0x1
	[0163.091] IUnknown:QueryInterface (in: This=0x742898, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f21c | out: ppvObject=0x19f21c*=0x74a4c8) returned 0x0
	[0163.091] IUnknown:QueryInterface (in: This=0x742898, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f218 | out: ppvObject=0x19f218*=0x74289c) returned 0x0
	[0163.091] IClientSecurity:SetBlanket (This=0x74289c, pProxy=0x742898, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0163.179] IUnknown:Release (This=0x74289c) returned 0x2
	[0163.179] WbemLocator:IUnknown:Release (This=0x74a4c8) returned 0x1
	[0163.179] CoTaskMemFree (pv=0x7481d0) 
	[0163.180] IUnknown:QueryInterface (in: This=0x742898, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee14 | out: ppvObject=0x19ee14*=0x74a4c8) returned 0x0
	[0163.180] WbemLocator:IUnknown:QueryInterface (in: This=0x74a4c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19edd0 | out: ppvObject=0x19edd0*=0x0) returned 0x80004002
	[0163.185] WbemLocator:IUnknown:QueryInterface (in: This=0x74a4c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ebec | out: ppvObject=0x19ebec*=0x0) returned 0x80004002
	[0163.187] IUnknown:QueryInterface (in: This=0x742898, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x0) returned 0x80004002
	[0163.190] WbemLocator:IUnknown:AddRef (This=0x74a4c8) returned 0x3
	[0163.190] WbemLocator:IUnknown:QueryInterface (in: This=0x74a4c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e72c | out: ppvObject=0x19e72c*=0x0) returned 0x80004002
	[0163.190] WbemLocator:IUnknown:QueryInterface (in: This=0x74a4c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e6dc | out: ppvObject=0x19e6dc*=0x0) returned 0x80004002
	[0163.190] WbemLocator:IUnknown:QueryInterface (in: This=0x74a4c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6e8 | out: ppvObject=0x19e6e8*=0x74a424) returned 0x0
	[0163.190] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74a424, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e6f0 | out: pCid=0x19e6f0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.191] WbemLocator:IUnknown:Release (This=0x74a424) returned 0x3
	[0163.191] CoGetContextToken (in: pToken=0x19e748 | out: pToken=0x19e748) returned 0x0
	[0163.191] CoGetContextToken (in: pToken=0x19eb50 | out: pToken=0x19eb50) returned 0x0
	[0163.191] WbemLocator:IUnknown:QueryInterface (in: This=0x74a4c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebe0 | out: ppvObject=0x19ebe0*=0x74a4ac) returned 0x0
	[0163.191] WbemLocator:IRpcOptions:Query (in: This=0x74a4ac, pPrx=0x74a4c8, dwProperty=2, pdwValue=0x19ec08 | out: pdwValue=0x19ec08) returned 0x80004002
	[0163.191] WbemLocator:IUnknown:Release (This=0x74a4ac) returned 0x3
	[0163.191] WbemLocator:IUnknown:Release (This=0x74a4c8) returned 0x2
	[0163.191] CoGetContextToken (in: pToken=0x19f128 | out: pToken=0x19f128) returned 0x0
	[0163.191] CoGetContextToken (in: pToken=0x19f088 | out: pToken=0x19f088) returned 0x0
	[0163.191] WbemLocator:IUnknown:QueryInterface (in: This=0x74a4c8, riid=0x19f158*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f154 | out: ppvObject=0x19f154*=0x742898) returned 0x0
	[0163.191] IUnknown:AddRef (This=0x742898) returned 0x4
	[0163.191] IUnknown:Release (This=0x742898) returned 0x3
	[0163.191] IUnknown:Release (This=0x742898) returned 0x2
	[0163.192] WbemLocator:IUnknown:Release (This=0x776358) returned 0x2
	[0163.192] SysStringLen (param_1=0x0) returned 0x0
	[0163.192] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f40c | out: puCount=0x19f40c*=0x2) returned 0x0
	[0163.192] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f408*=0x0, pszText=0x0 | out: puBuffLength=0x19f408*=0xf, pszText=0x0) returned 0x0
	[0163.192] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f408*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f408*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.192] CoGetContextToken (in: pToken=0x19f258 | out: pToken=0x19f258) returned 0x0
	[0163.192] IUnknown:AddRef (This=0x742898) returned 0x3
	[0163.192] IEnumWbemClassObject:Clone (in: This=0x742898, ppEnum=0x19f418 | out: ppEnum=0x19f418*=0x742d48) returned 0x0
	[0163.223] IUnknown:QueryInterface (in: This=0x742d48, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2dc | out: ppvObject=0x19f2dc*=0x742d4c) returned 0x0
	[0163.223] IClientSecurity:QueryBlanket (in: This=0x742d4c, pProxy=0x742d48, pAuthnSvc=0x19f32c, pAuthzSvc=0x19f328, pServerPrincName=0x19f320, pAuthnLevel=0x19f324, pImpLevel=0x19f314, pAuthInfo=0x19f318, pCapabilites=0x19f31c | out: pAuthnSvc=0x19f32c*=0xa, pAuthzSvc=0x19f328*=0x0, pServerPrincName=0x19f320, pAuthnLevel=0x19f324*=0x6, pImpLevel=0x19f314*=0x2, pAuthInfo=0x19f318, pCapabilites=0x19f31c*=0x1) returned 0x0
	[0163.223] IUnknown:Release (This=0x742d4c) returned 0x1
	[0163.223] IUnknown:QueryInterface (in: This=0x742d48, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2d0 | out: ppvObject=0x19f2d0*=0x748fc8) returned 0x0
	[0163.223] IUnknown:QueryInterface (in: This=0x742d48, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f2cc | out: ppvObject=0x19f2cc*=0x742d4c) returned 0x0
	[0163.223] IClientSecurity:SetBlanket (This=0x742d4c, pProxy=0x742d48, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0163.242] IUnknown:Release (This=0x742d4c) returned 0x2
	[0163.242] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x1
	[0163.242] CoTaskMemFree (pv=0x7483b0) 
	[0163.242] IUnknown:QueryInterface (in: This=0x742d48, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eeb8 | out: ppvObject=0x19eeb8*=0x748fc8) returned 0x0
	[0163.243] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ee74 | out: ppvObject=0x19ee74*=0x0) returned 0x80004002
	[0163.250] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ec94 | out: ppvObject=0x19ec94*=0x0) returned 0x80004002
	[0163.351] IUnknown:QueryInterface (in: This=0x742d48, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x0) returned 0x80004002
	[0163.361] WbemLocator:IUnknown:AddRef (This=0x748fc8) returned 0x3
	[0163.361] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e7d4 | out: ppvObject=0x19e7d4*=0x0) returned 0x80004002
	[0163.361] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e784 | out: ppvObject=0x19e784*=0x0) returned 0x80004002
	[0163.361] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e790 | out: ppvObject=0x19e790*=0x748f24) returned 0x0
	[0163.362] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748f24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e798 | out: pCid=0x19e798*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.362] WbemLocator:IUnknown:Release (This=0x748f24) returned 0x3
	[0163.362] CoGetContextToken (in: pToken=0x19e7f0 | out: pToken=0x19e7f0) returned 0x0
	[0163.362] CoGetContextToken (in: pToken=0x19ebf8 | out: pToken=0x19ebf8) returned 0x0
	[0163.362] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec88 | out: ppvObject=0x19ec88*=0x748fac) returned 0x0
	[0163.362] WbemLocator:IRpcOptions:Query (in: This=0x748fac, pPrx=0x748fc8, dwProperty=2, pdwValue=0x19ecb0 | out: pdwValue=0x19ecb0) returned 0x80004002
	[0163.362] WbemLocator:IUnknown:Release (This=0x748fac) returned 0x3
	[0163.363] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x2
	[0163.363] CoGetContextToken (in: pToken=0x19f1c8 | out: pToken=0x19f1c8) returned 0x0
	[0163.363] CoGetContextToken (in: pToken=0x19f128 | out: pToken=0x19f128) returned 0x0
	[0163.363] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x19f1f8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f1f4 | out: ppvObject=0x19f1f4*=0x742d48) returned 0x0
	[0163.363] IUnknown:AddRef (This=0x742d48) returned 0x4
	[0163.363] IUnknown:Release (This=0x742d48) returned 0x3
	[0163.363] IUnknown:Release (This=0x742d48) returned 0x2
	[0163.363] IUnknown:Release (This=0x742898) returned 0x2
	[0163.363] SysStringLen (param_1=0x0) returned 0x0
	[0163.363] IEnumWbemClassObject:Reset (This=0x742d48) returned 0x0
	[0163.387] CoTaskMemAlloc (cb=0x4) returned 0x754948
	[0163.387] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x754948, puReturned=0x2892750 | out: apObjects=0x754948*=0x7756e0, puReturned=0x2892750*=0x1) returned 0x0
	[0163.562] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7756e0) returned 0x0
	[0163.562] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0163.563] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0163.563] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0163.563] IUnknown:AddRef (This=0x7756e0) returned 0x3
	[0163.563] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0163.563] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0163.563] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7756e4) returned 0x0
	[0163.563] IMarshal:GetUnmarshalClass (in: This=0x7756e4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0163.563] IUnknown:Release (This=0x7756e4) returned 0x3
	[0163.563] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0163.564] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0163.564] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0163.564] IUnknown:Release (This=0x7756e0) returned 0x2
	[0163.564] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0163.564] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0163.564] IUnknown:QueryInterface (in: This=0x7756e0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7756e0) returned 0x0
	[0163.564] IUnknown:AddRef (This=0x7756e0) returned 0x4
	[0163.564] IUnknown:Release (This=0x7756e0) returned 0x3
	[0163.564] IUnknown:Release (This=0x7756e0) returned 0x2
	[0163.564] CoTaskMemFree (pv=0x754948) 
	[0163.564] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0163.564] IUnknown:AddRef (This=0x7756e0) returned 0x3
	[0163.564] IWbemClassObject:Get (in: This=0x7756e0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0163.564] IWbemClassObject:Get (in: This=0x7756e0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"0\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0163.565] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"0\"") returned 0x58
	[0163.565] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"0\"") returned 0x58
	[0163.565] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5d8
	[0163.566] SetEvent (hEvent=0x2bc) returned 1
	[0163.566] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5d8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0163.640] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0163.640] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0163.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x764168, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x764168) returned 0x0
	[0163.640] WbemDefPath:IUnknown:AddRef (This=0x764168) returned 0x3
	[0163.640] WbemDefPath:IUnknown:Release (This=0x764168) returned 0x2
	[0163.640] WbemDefPath:IWbemPath:SetText (This=0x764168, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"0\"") returned 0x0
	[0163.640] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0163.640] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0163.640] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.641] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0163.641] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0163.641] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.641] IWbemClassObject:Get (in: This=0x7756e0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289302c*=0, plFlavor=0x2893030*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289302c*=8, plFlavor=0x2893030*=32) returned 0x0
	[0163.647] IWbemClassObject:Get (in: This=0x7756e0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289302c*=8, plFlavor=0x2893030*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289302c*=8, plFlavor=0x2893030*=32) returned 0x0
	[0163.647] CoTaskMemAlloc (cb=0x4) returned 0x7547e8
	[0163.647] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7547e8, puReturned=0x2892750 | out: apObjects=0x7547e8*=0x774228, puReturned=0x2892750*=0x1) returned 0x0
	[0163.670] IUnknown:QueryInterface (in: This=0x774228, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x774228) returned 0x0
	[0163.671] IUnknown:QueryInterface (in: This=0x774228, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0163.671] IUnknown:QueryInterface (in: This=0x774228, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0163.671] IUnknown:QueryInterface (in: This=0x774228, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0163.671] IUnknown:AddRef (This=0x774228) returned 0x3
	[0163.671] IUnknown:QueryInterface (in: This=0x774228, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0163.671] IUnknown:QueryInterface (in: This=0x774228, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0163.671] IUnknown:QueryInterface (in: This=0x774228, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x77422c) returned 0x0
	[0163.672] IMarshal:GetUnmarshalClass (in: This=0x77422c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0163.672] IUnknown:Release (This=0x77422c) returned 0x3
	[0163.672] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0163.672] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0163.672] IUnknown:QueryInterface (in: This=0x774228, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0163.672] IUnknown:Release (This=0x774228) returned 0x2
	[0163.672] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0163.672] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0163.672] IUnknown:QueryInterface (in: This=0x774228, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x774228) returned 0x0
	[0163.672] IUnknown:AddRef (This=0x774228) returned 0x4
	[0163.672] IUnknown:Release (This=0x774228) returned 0x3
	[0163.672] IUnknown:Release (This=0x774228) returned 0x2
	[0163.673] CoTaskMemFree (pv=0x7547e8) 
	[0163.673] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0163.673] IUnknown:AddRef (This=0x774228) returned 0x3
	[0163.673] IWbemClassObject:Get (in: This=0x774228, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0163.673] IWbemClassObject:Get (in: This=0x774228, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0163.673] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4\"") returned 0x58
	[0163.673] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4\"") returned 0x58
	[0163.673] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5dc
	[0163.673] SetEvent (hEvent=0x2bc) returned 1
	[0163.674] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5dc, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0163.713] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0163.713] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0163.713] WbemDefPath:IUnknown:QueryInterface (in: This=0x7642b8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7642b8) returned 0x0
	[0163.713] WbemDefPath:IUnknown:AddRef (This=0x7642b8) returned 0x3
	[0163.713] WbemDefPath:IUnknown:Release (This=0x7642b8) returned 0x2
	[0163.713] WbemDefPath:IWbemPath:SetText (This=0x7642b8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4\"") returned 0x0
	[0163.713] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0163.713] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0163.713] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.713] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0163.713] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0163.713] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.713] IWbemClassObject:Get (in: This=0x774228, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289385c*=0, plFlavor=0x2893860*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289385c*=8, plFlavor=0x2893860*=32) returned 0x0
	[0163.714] IWbemClassObject:Get (in: This=0x774228, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289385c*=8, plFlavor=0x2893860*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289385c*=8, plFlavor=0x2893860*=32) returned 0x0
	[0163.714] CoTaskMemAlloc (cb=0x4) returned 0x7548c8
	[0163.714] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7548c8, puReturned=0x2892750 | out: apObjects=0x7548c8*=0x775a10, puReturned=0x2892750*=0x1) returned 0x0
	[0163.747] IUnknown:QueryInterface (in: This=0x775a10, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x775a10) returned 0x0
	[0163.747] IUnknown:QueryInterface (in: This=0x775a10, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0163.747] IUnknown:QueryInterface (in: This=0x775a10, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0163.747] IUnknown:QueryInterface (in: This=0x775a10, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0163.747] IUnknown:AddRef (This=0x775a10) returned 0x3
	[0163.748] IUnknown:QueryInterface (in: This=0x775a10, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0163.748] IUnknown:QueryInterface (in: This=0x775a10, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0163.748] IUnknown:QueryInterface (in: This=0x775a10, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x775a14) returned 0x0
	[0163.748] IMarshal:GetUnmarshalClass (in: This=0x775a14, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0163.748] IUnknown:Release (This=0x775a14) returned 0x3
	[0163.748] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0163.748] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0163.748] IUnknown:QueryInterface (in: This=0x775a10, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0163.748] IUnknown:Release (This=0x775a10) returned 0x2
	[0163.748] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0163.748] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0163.748] IUnknown:QueryInterface (in: This=0x775a10, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x775a10) returned 0x0
	[0163.748] IUnknown:AddRef (This=0x775a10) returned 0x4
	[0163.749] IUnknown:Release (This=0x775a10) returned 0x3
	[0163.749] IUnknown:Release (This=0x775a10) returned 0x2
	[0163.749] CoTaskMemFree (pv=0x7548c8) 
	[0163.749] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0163.749] IUnknown:AddRef (This=0x775a10) returned 0x3
	[0163.749] IWbemClassObject:Get (in: This=0x775a10, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0163.749] IWbemClassObject:Get (in: This=0x775a10, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"300\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0163.749] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"300\"") returned 0x5c
	[0163.749] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"300\"") returned 0x5c
	[0163.749] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5e0
	[0163.749] SetEvent (hEvent=0x2bc) returned 1
	[0163.750] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5e0, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0163.781] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0163.781] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0163.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x763fa8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x763fa8) returned 0x0
	[0163.781] WbemDefPath:IUnknown:AddRef (This=0x763fa8) returned 0x3
	[0163.781] WbemDefPath:IUnknown:Release (This=0x763fa8) returned 0x2
	[0163.781] WbemDefPath:IWbemPath:SetText (This=0x763fa8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"300\"") returned 0x0
	[0163.781] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0163.781] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0163.782] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.782] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0163.782] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0163.782] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.782] IWbemClassObject:Get (in: This=0x775a10, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2894090*=0, plFlavor=0x2894094*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2894090*=8, plFlavor=0x2894094*=32) returned 0x0
	[0163.783] IWbemClassObject:Get (in: This=0x775a10, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2894090*=8, plFlavor=0x2894094*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2894090*=8, plFlavor=0x2894094*=32) returned 0x0
	[0163.783] CoTaskMemAlloc (cb=0x4) returned 0x7548c8
	[0163.783] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7548c8, puReturned=0x2892750 | out: apObjects=0x7548c8*=0x775548, puReturned=0x2892750*=0x1) returned 0x0
	[0163.802] IUnknown:QueryInterface (in: This=0x775548, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x775548) returned 0x0
	[0163.802] IUnknown:QueryInterface (in: This=0x775548, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0163.802] IUnknown:QueryInterface (in: This=0x775548, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0163.802] IUnknown:QueryInterface (in: This=0x775548, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0163.803] IUnknown:AddRef (This=0x775548) returned 0x3
	[0163.803] IUnknown:QueryInterface (in: This=0x775548, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0163.803] IUnknown:QueryInterface (in: This=0x775548, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0163.803] IUnknown:QueryInterface (in: This=0x775548, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x77554c) returned 0x0
	[0163.803] IMarshal:GetUnmarshalClass (in: This=0x77554c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0163.803] IUnknown:Release (This=0x77554c) returned 0x3
	[0163.803] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0163.803] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0163.803] IUnknown:QueryInterface (in: This=0x775548, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0163.803] IUnknown:Release (This=0x775548) returned 0x2
	[0163.803] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0163.803] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0163.803] IUnknown:QueryInterface (in: This=0x775548, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x775548) returned 0x0
	[0163.803] IUnknown:AddRef (This=0x775548) returned 0x4
	[0163.803] IUnknown:Release (This=0x775548) returned 0x3
	[0163.803] IUnknown:Release (This=0x775548) returned 0x2
	[0163.804] CoTaskMemFree (pv=0x7548c8) 
	[0163.804] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0163.804] IUnknown:AddRef (This=0x775548) returned 0x3
	[0163.804] IWbemClassObject:Get (in: This=0x775548, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0163.804] IWbemClassObject:Get (in: This=0x775548, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"372\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0163.804] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"372\"") returned 0x5c
	[0163.804] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"372\"") returned 0x5c
	[0163.804] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5e4
	[0163.804] SetEvent (hEvent=0x2bc) returned 1
	[0163.804] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5e4, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0163.807] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0163.807] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0163.807] WbemDefPath:IUnknown:QueryInterface (in: This=0x764408, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x764408) returned 0x0
	[0163.807] WbemDefPath:IUnknown:AddRef (This=0x764408) returned 0x3
	[0163.808] WbemDefPath:IUnknown:Release (This=0x764408) returned 0x2
	[0163.808] WbemDefPath:IWbemPath:SetText (This=0x764408, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"372\"") returned 0x0
	[0163.808] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0163.808] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0163.808] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.808] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0163.808] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0163.808] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.808] IWbemClassObject:Get (in: This=0x775548, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28948c4*=0, plFlavor=0x28948c8*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28948c4*=8, plFlavor=0x28948c8*=32) returned 0x0
	[0163.808] IWbemClassObject:Get (in: This=0x775548, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28948c4*=8, plFlavor=0x28948c8*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28948c4*=8, plFlavor=0x28948c8*=32) returned 0x0
	[0163.808] CoTaskMemAlloc (cb=0x4) returned 0x754948
	[0163.808] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x754948, puReturned=0x2892750 | out: apObjects=0x754948*=0x775878, puReturned=0x2892750*=0x1) returned 0x0
	[0163.864] IUnknown:QueryInterface (in: This=0x775878, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x775878) returned 0x0
	[0163.864] IUnknown:QueryInterface (in: This=0x775878, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0163.864] IUnknown:QueryInterface (in: This=0x775878, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0163.864] IUnknown:QueryInterface (in: This=0x775878, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0163.865] IUnknown:AddRef (This=0x775878) returned 0x3
	[0163.865] IUnknown:QueryInterface (in: This=0x775878, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0163.865] IUnknown:QueryInterface (in: This=0x775878, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0163.865] IUnknown:QueryInterface (in: This=0x775878, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x77587c) returned 0x0
	[0163.866] IMarshal:GetUnmarshalClass (in: This=0x77587c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0163.866] IUnknown:Release (This=0x77587c) returned 0x3
	[0163.866] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0163.866] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0163.867] IUnknown:QueryInterface (in: This=0x775878, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0163.867] IUnknown:Release (This=0x775878) returned 0x2
	[0163.867] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0163.867] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0163.867] IUnknown:QueryInterface (in: This=0x775878, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x775878) returned 0x0
	[0163.867] IUnknown:AddRef (This=0x775878) returned 0x4
	[0163.868] IUnknown:Release (This=0x775878) returned 0x3
	[0163.868] IUnknown:Release (This=0x775878) returned 0x2
	[0163.868] CoTaskMemFree (pv=0x754948) 
	[0163.868] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0163.868] IUnknown:AddRef (This=0x775878) returned 0x3
	[0163.868] IWbemClassObject:Get (in: This=0x775878, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0163.868] IWbemClassObject:Get (in: This=0x775878, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"444\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0163.869] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"444\"") returned 0x5c
	[0163.869] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"444\"") returned 0x5c
	[0163.869] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5e8
	[0163.869] SetEvent (hEvent=0x2bc) returned 1
	[0163.870] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5e8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0163.893] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0163.893] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0163.893] WbemDefPath:IUnknown:QueryInterface (in: This=0x764018, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x764018) returned 0x0
	[0163.893] WbemDefPath:IUnknown:AddRef (This=0x764018) returned 0x3
	[0163.893] WbemDefPath:IUnknown:Release (This=0x764018) returned 0x2
	[0163.893] WbemDefPath:IWbemPath:SetText (This=0x764018, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"444\"") returned 0x0
	[0163.894] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0163.894] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0163.894] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.894] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0163.894] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0163.894] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.904] IWbemClassObject:Get (in: This=0x775878, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28950f8*=0, plFlavor=0x28950fc*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28950f8*=8, plFlavor=0x28950fc*=32) returned 0x0
	[0163.904] IWbemClassObject:Get (in: This=0x775878, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28950f8*=8, plFlavor=0x28950fc*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28950f8*=8, plFlavor=0x28950fc*=32) returned 0x0
	[0163.904] CoTaskMemAlloc (cb=0x4) returned 0x7548d8
	[0163.904] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7548d8, puReturned=0x2892750 | out: apObjects=0x7548d8*=0x775ed8, puReturned=0x2892750*=0x1) returned 0x0
	[0163.905] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x775ed8) returned 0x0
	[0163.905] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0163.905] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0163.905] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0163.906] IUnknown:AddRef (This=0x775ed8) returned 0x3
	[0163.906] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0163.906] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0163.906] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x775edc) returned 0x0
	[0163.906] IMarshal:GetUnmarshalClass (in: This=0x775edc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0163.906] IUnknown:Release (This=0x775edc) returned 0x3
	[0163.906] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0163.906] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0163.906] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0163.906] IUnknown:Release (This=0x775ed8) returned 0x2
	[0163.906] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0163.906] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0163.906] IUnknown:QueryInterface (in: This=0x775ed8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x775ed8) returned 0x0
	[0163.906] IUnknown:AddRef (This=0x775ed8) returned 0x4
	[0163.906] IUnknown:Release (This=0x775ed8) returned 0x3
	[0163.906] IUnknown:Release (This=0x775ed8) returned 0x2
	[0163.906] CoTaskMemFree (pv=0x7548d8) 
	[0163.906] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0163.906] IUnknown:AddRef (This=0x775ed8) returned 0x3
	[0163.907] IWbemClassObject:Get (in: This=0x775ed8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0163.907] IWbemClassObject:Get (in: This=0x775ed8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0163.907] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x5c
	[0163.907] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x5c
	[0163.907] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5ec
	[0163.907] SetEvent (hEvent=0x2bc) returned 1
	[0163.907] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5ec, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0163.914] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0163.914] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0163.914] WbemDefPath:IUnknown:QueryInterface (in: This=0x7641d8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7641d8) returned 0x0
	[0163.914] WbemDefPath:IUnknown:AddRef (This=0x7641d8) returned 0x3
	[0163.914] WbemDefPath:IUnknown:Release (This=0x7641d8) returned 0x2
	[0163.914] WbemDefPath:IWbemPath:SetText (This=0x7641d8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x0
	[0163.914] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0163.914] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0163.914] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.914] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0163.914] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0163.914] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.914] IWbemClassObject:Get (in: This=0x775ed8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289592c*=0, plFlavor=0x2895930*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289592c*=8, plFlavor=0x2895930*=32) returned 0x0
	[0163.914] IWbemClassObject:Get (in: This=0x775ed8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289592c*=8, plFlavor=0x2895930*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289592c*=8, plFlavor=0x2895930*=32) returned 0x0
	[0163.915] CoTaskMemAlloc (cb=0x4) returned 0x7546b8
	[0163.915] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7546b8, puReturned=0x2892750 | out: apObjects=0x7546b8*=0x775ba8, puReturned=0x2892750*=0x1) returned 0x0
	[0163.922] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x775ba8) returned 0x0
	[0163.922] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0163.922] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0163.922] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0163.922] IUnknown:AddRef (This=0x775ba8) returned 0x3
	[0163.922] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0163.922] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0163.922] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x775bac) returned 0x0
	[0163.923] IMarshal:GetUnmarshalClass (in: This=0x775bac, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0163.923] IUnknown:Release (This=0x775bac) returned 0x3
	[0163.923] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0163.923] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0163.923] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0163.923] IUnknown:Release (This=0x775ba8) returned 0x2
	[0163.923] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0163.923] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0163.923] IUnknown:QueryInterface (in: This=0x775ba8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x775ba8) returned 0x0
	[0163.923] IUnknown:AddRef (This=0x775ba8) returned 0x4
	[0163.923] IUnknown:Release (This=0x775ba8) returned 0x3
	[0163.923] IUnknown:Release (This=0x775ba8) returned 0x2
	[0163.923] CoTaskMemFree (pv=0x7546b8) 
	[0163.923] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0163.923] IUnknown:AddRef (This=0x775ba8) returned 0x3
	[0163.923] IWbemClassObject:Get (in: This=0x775ba8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0163.923] IWbemClassObject:Get (in: This=0x775ba8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0163.923] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x5c
	[0163.923] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x5c
	[0163.924] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5f0
	[0163.924] SetEvent (hEvent=0x2bc) returned 1
	[0163.924] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5f0, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0163.927] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0163.927] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0163.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x764248, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x764248) returned 0x0
	[0163.927] WbemDefPath:IUnknown:AddRef (This=0x764248) returned 0x3
	[0163.927] WbemDefPath:IUnknown:Release (This=0x764248) returned 0x2
	[0163.927] WbemDefPath:IWbemPath:SetText (This=0x764248, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x0
	[0163.927] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0163.927] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0163.927] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.928] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0163.928] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0163.928] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0163.928] IWbemClassObject:Get (in: This=0x775ba8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2896160*=0, plFlavor=0x2896164*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\winlogon.exe", varVal2=0x0), pType=0x2896160*=8, plFlavor=0x2896164*=0) returned 0x0
	[0163.928] SysStringByteLen (bstr="C:\\Windows\\system32\\winlogon.exe") returned 0x40
	[0163.928] SysStringByteLen (bstr="C:\\Windows\\system32\\winlogon.exe") returned 0x40
	[0163.928] IWbemClassObject:Get (in: This=0x775ba8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2896160*=8, plFlavor=0x2896164*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\winlogon.exe", varVal2=0x0), pType=0x2896160*=8, plFlavor=0x2896164*=0) returned 0x0
	[0163.928] SysStringByteLen (bstr="C:\\Windows\\system32\\winlogon.exe") returned 0x40
	[0163.928] SysStringByteLen (bstr="C:\\Windows\\system32\\winlogon.exe") returned 0x40
	[0163.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\winlogon.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\winlogon.exe", lpFilePart=0x0) returned 0x20
	[0163.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0163.929] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\winlogon.exe" (normalized: "c:\\windows\\syswow64\\winlogon.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0163.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0163.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\winlogon.exe", nBufferLength=0x105, lpBuffer=0x19ef58, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\winlogon.exe", lpFilePart=0x0) returned 0x20
	[0163.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\winlogon.exe", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\winlogon.exe", lpFilePart=0x0) returned 0x20
	[0164.213] CoTaskMemAlloc (cb=0x4) returned 0x7546b8
	[0164.213] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7546b8, puReturned=0x2892750 | out: apObjects=0x7546b8*=0x774a20, puReturned=0x2892750*=0x1) returned 0x0
	[0164.221] IUnknown:QueryInterface (in: This=0x774a20, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x774a20) returned 0x0
	[0164.222] IUnknown:QueryInterface (in: This=0x774a20, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0164.222] IUnknown:QueryInterface (in: This=0x774a20, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0164.222] IUnknown:QueryInterface (in: This=0x774a20, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0164.222] IUnknown:AddRef (This=0x774a20) returned 0x3
	[0164.222] IUnknown:QueryInterface (in: This=0x774a20, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0164.222] IUnknown:QueryInterface (in: This=0x774a20, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0164.222] IUnknown:QueryInterface (in: This=0x774a20, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x774a24) returned 0x0
	[0164.223] IMarshal:GetUnmarshalClass (in: This=0x774a24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0164.223] IUnknown:Release (This=0x774a24) returned 0x3
	[0164.223] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0164.223] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0164.223] IUnknown:QueryInterface (in: This=0x774a20, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0164.223] IUnknown:Release (This=0x774a20) returned 0x2
	[0164.223] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0164.223] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0164.223] IUnknown:QueryInterface (in: This=0x774a20, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x774a20) returned 0x0
	[0164.223] IUnknown:AddRef (This=0x774a20) returned 0x4
	[0164.223] IUnknown:Release (This=0x774a20) returned 0x3
	[0164.223] IUnknown:Release (This=0x774a20) returned 0x2
	[0164.223] CoTaskMemFree (pv=0x7546b8) 
	[0164.223] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0164.223] IUnknown:AddRef (This=0x774a20) returned 0x3
	[0164.224] IWbemClassObject:Get (in: This=0x774a20, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0164.224] IWbemClassObject:Get (in: This=0x774a20, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"532\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0164.224] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"532\"") returned 0x5c
	[0164.224] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"532\"") returned 0x5c
	[0164.224] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5f4
	[0164.225] SetEvent (hEvent=0x2bc) returned 1
	[0164.225] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5f4, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0164.236] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0164.236] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0164.236] WbemDefPath:IUnknown:QueryInterface (in: This=0x764478, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x764478) returned 0x0
	[0164.236] WbemDefPath:IUnknown:AddRef (This=0x764478) returned 0x3
	[0164.236] WbemDefPath:IUnknown:Release (This=0x764478) returned 0x2
	[0164.236] WbemDefPath:IWbemPath:SetText (This=0x764478, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"532\"") returned 0x0
	[0164.236] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0164.236] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0164.237] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0164.237] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0164.237] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0164.237] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0164.237] IWbemClassObject:Get (in: This=0x774a20, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2896cec*=0, plFlavor=0x2896cf0*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2896cec*=8, plFlavor=0x2896cf0*=32) returned 0x0
	[0164.237] IWbemClassObject:Get (in: This=0x774a20, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2896cec*=8, plFlavor=0x2896cf0*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2896cec*=8, plFlavor=0x2896cf0*=32) returned 0x0
	[0164.237] CoTaskMemAlloc (cb=0x4) returned 0x783110
	[0164.238] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783110, puReturned=0x2892750 | out: apObjects=0x783110*=0x7743c0, puReturned=0x2892750*=0x1) returned 0x0
	[0164.302] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7743c0) returned 0x0
	[0164.303] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0164.303] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0164.303] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0164.303] IUnknown:AddRef (This=0x7743c0) returned 0x3
	[0164.303] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0164.303] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0164.303] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7743c4) returned 0x0
	[0164.303] IMarshal:GetUnmarshalClass (in: This=0x7743c4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0164.303] IUnknown:Release (This=0x7743c4) returned 0x3
	[0164.303] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0164.303] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0164.303] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0164.303] IUnknown:Release (This=0x7743c0) returned 0x2
	[0164.303] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0164.303] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0164.303] IUnknown:QueryInterface (in: This=0x7743c0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7743c0) returned 0x0
	[0164.304] IUnknown:AddRef (This=0x7743c0) returned 0x4
	[0164.304] IUnknown:Release (This=0x7743c0) returned 0x3
	[0164.304] IUnknown:Release (This=0x7743c0) returned 0x2
	[0164.304] CoTaskMemFree (pv=0x783110) 
	[0164.304] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0164.304] IUnknown:AddRef (This=0x7743c0) returned 0x3
	[0164.304] IWbemClassObject:Get (in: This=0x7743c0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0164.304] IWbemClassObject:Get (in: This=0x7743c0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"540\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0164.304] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"540\"") returned 0x5c
	[0164.304] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"540\"") returned 0x5c
	[0164.304] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5f8
	[0164.304] SetEvent (hEvent=0x2bc) returned 1
	[0164.305] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5f8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0164.318] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0164.318] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0164.318] WbemDefPath:IUnknown:QueryInterface (in: This=0x764328, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x764328) returned 0x0
	[0164.318] WbemDefPath:IUnknown:AddRef (This=0x764328) returned 0x3
	[0164.318] WbemDefPath:IUnknown:Release (This=0x764328) returned 0x2
	[0164.319] WbemDefPath:IWbemPath:SetText (This=0x764328, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"540\"") returned 0x0
	[0164.319] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0164.319] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0164.319] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0164.319] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0164.319] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0164.319] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0164.319] IWbemClassObject:Get (in: This=0x7743c0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2897520*=0, plFlavor=0x2897524*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\lsass.exe", varVal2=0x0), pType=0x2897520*=8, plFlavor=0x2897524*=0) returned 0x0
	[0164.320] SysStringByteLen (bstr="C:\\Windows\\system32\\lsass.exe") returned 0x3a
	[0164.320] SysStringByteLen (bstr="C:\\Windows\\system32\\lsass.exe") returned 0x3a
	[0164.320] IWbemClassObject:Get (in: This=0x7743c0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2897520*=8, plFlavor=0x2897524*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\lsass.exe", varVal2=0x0), pType=0x2897520*=8, plFlavor=0x2897524*=0) returned 0x0
	[0164.320] SysStringByteLen (bstr="C:\\Windows\\system32\\lsass.exe") returned 0x3a
	[0164.320] SysStringByteLen (bstr="C:\\Windows\\system32\\lsass.exe") returned 0x3a
	[0164.320] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\lsass.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\lsass.exe", lpFilePart=0x0) returned 0x1d
	[0164.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0164.321] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\lsass.exe" (normalized: "c:\\windows\\syswow64\\lsass.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0164.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0164.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\lsass.exe", nBufferLength=0x105, lpBuffer=0x19ef58, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\lsass.exe", lpFilePart=0x0) returned 0x1d
	[0164.321] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\lsass.exe", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\lsass.exe", lpFilePart=0x0) returned 0x1d
	[0164.327] CoTaskMemAlloc (cb=0x4) returned 0x783070
	[0164.327] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783070, puReturned=0x2892750 | out: apObjects=0x783070*=0x774bb8, puReturned=0x2892750*=0x1) returned 0x0
	[0164.373] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x774bb8) returned 0x0
	[0164.373] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0164.373] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0164.373] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0164.373] IUnknown:AddRef (This=0x774bb8) returned 0x3
	[0164.374] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0164.374] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0164.374] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x774bbc) returned 0x0
	[0164.374] IMarshal:GetUnmarshalClass (in: This=0x774bbc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0164.374] IUnknown:Release (This=0x774bbc) returned 0x3
	[0164.374] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0164.374] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0164.374] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0164.374] IUnknown:Release (This=0x774bb8) returned 0x2
	[0164.374] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0164.374] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0164.374] IUnknown:QueryInterface (in: This=0x774bb8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x774bb8) returned 0x0
	[0164.374] IUnknown:AddRef (This=0x774bb8) returned 0x4
	[0164.374] IUnknown:Release (This=0x774bb8) returned 0x3
	[0164.374] IUnknown:Release (This=0x774bb8) returned 0x2
	[0164.375] CoTaskMemFree (pv=0x783070) 
	[0164.375] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0164.375] IUnknown:AddRef (This=0x774bb8) returned 0x3
	[0164.375] IWbemClassObject:Get (in: This=0x774bb8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0164.375] IWbemClassObject:Get (in: This=0x774bb8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"628\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0164.376] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"628\"") returned 0x5c
	[0164.376] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"628\"") returned 0x5c
	[0164.376] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5fc
	[0164.376] SetEvent (hEvent=0x2bc) returned 1
	[0164.377] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x5fc, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0164.397] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0164.397] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0164.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c0d0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c0d0) returned 0x0
	[0164.397] WbemDefPath:IUnknown:AddRef (This=0x78c0d0) returned 0x3
	[0164.397] WbemDefPath:IUnknown:Release (This=0x78c0d0) returned 0x2
	[0164.397] WbemDefPath:IWbemPath:SetText (This=0x78c0d0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"628\"") returned 0x0
	[0164.397] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0164.397] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0164.398] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0164.398] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0164.398] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0164.398] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0164.398] IWbemClassObject:Get (in: This=0x774bb8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2898084*=0, plFlavor=0x2898088*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x2898084*=8, plFlavor=0x2898088*=0) returned 0x0
	[0164.398] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0164.398] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0164.398] IWbemClassObject:Get (in: This=0x774bb8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2898084*=8, plFlavor=0x2898088*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x2898084*=8, plFlavor=0x2898088*=0) returned 0x0
	[0164.398] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0164.398] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0164.439] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0164.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0164.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0164.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0164.745] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.001] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x28981e0 | out: lpData=0x28981e0) returned 1
	[0165.003] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x289858c, puLen=0x19f470) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2898298, puLen=0x19f3f0) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28982ec, puLen=0x19f3f0) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2898350, puLen=0x19f3f0) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28983c0, puLen=0x19f3f0) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28983fc, puLen=0x19f3f0) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2898480, puLen=0x19f3f0) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28984c0, puLen=0x19f3f0) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2898530, puLen=0x19f3f0) returned 1
	[0165.006] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.007] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.007] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.007] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.007] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x289858c, puLen=0x19f3e4) returned 1
	[0165.007] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.072] VerQueryValueW (in: pBlock=0x28981e0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2898208, puLen=0x19f3f4) returned 1
	[0165.073] CoTaskMemAlloc (cb=0x4) returned 0x783030
	[0165.073] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783030, puReturned=0x2892750 | out: apObjects=0x783030*=0x7746f0, puReturned=0x2892750*=0x1) returned 0x0
	[0165.080] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7746f0) returned 0x0
	[0165.080] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.080] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.080] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.081] IUnknown:AddRef (This=0x7746f0) returned 0x3
	[0165.081] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.081] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.081] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7746f4) returned 0x0
	[0165.081] IMarshal:GetUnmarshalClass (in: This=0x7746f4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.081] IUnknown:Release (This=0x7746f4) returned 0x3
	[0165.081] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.081] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.081] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.081] IUnknown:Release (This=0x7746f0) returned 0x2
	[0165.081] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.081] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.081] IUnknown:QueryInterface (in: This=0x7746f0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7746f0) returned 0x0
	[0165.082] IUnknown:AddRef (This=0x7746f0) returned 0x4
	[0165.082] IUnknown:Release (This=0x7746f0) returned 0x3
	[0165.082] IUnknown:Release (This=0x7746f0) returned 0x2
	[0165.082] CoTaskMemFree (pv=0x783030) 
	[0165.082] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.082] IUnknown:AddRef (This=0x7746f0) returned 0x3
	[0165.082] IWbemClassObject:Get (in: This=0x7746f0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.082] IWbemClassObject:Get (in: This=0x7746f0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"660\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.082] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"660\"") returned 0x5c
	[0165.082] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"660\"") returned 0x5c
	[0165.082] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x604
	[0165.083] SetEvent (hEvent=0x2bc) returned 1
	[0165.083] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x604, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.086] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.086] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.086] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c370, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c370) returned 0x0
	[0165.086] WbemDefPath:IUnknown:AddRef (This=0x78c370) returned 0x3
	[0165.086] WbemDefPath:IUnknown:Release (This=0x78c370) returned 0x2
	[0165.086] WbemDefPath:IWbemPath:SetText (This=0x78c370, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"660\"") returned 0x0
	[0165.086] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.086] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.086] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.087] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.087] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.087] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.087] IWbemClassObject:Get (in: This=0x7746f0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289a0b4*=0, plFlavor=0x289a0b8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x289a0b4*=8, plFlavor=0x289a0b8*=0) returned 0x0
	[0165.087] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.087] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.087] IWbemClassObject:Get (in: This=0x7746f0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289a0b4*=8, plFlavor=0x289a0b8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x289a0b4*=8, plFlavor=0x289a0b8*=0) returned 0x0
	[0165.087] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.087] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.088] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.088] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.090] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.091] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x289a210 | out: lpData=0x289a210) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x289a5bc, puLen=0x19f470) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289a2c8, puLen=0x19f3f0) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289a31c, puLen=0x19f3f0) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289a380, puLen=0x19f3f0) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289a3f0, puLen=0x19f3f0) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289a42c, puLen=0x19f3f0) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289a4b0, puLen=0x19f3f0) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289a4f0, puLen=0x19f3f0) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289a560, puLen=0x19f3f0) returned 1
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x289a5bc, puLen=0x19f3e4) returned 1
	[0165.092] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.092] VerQueryValueW (in: pBlock=0x289a210, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x289a238, puLen=0x19f3f4) returned 1
	[0165.092] CoTaskMemAlloc (cb=0x4) returned 0x783110
	[0165.092] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783110, puReturned=0x2892750 | out: apObjects=0x783110*=0x7753b0, puReturned=0x2892750*=0x1) returned 0x0
	[0165.095] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7753b0) returned 0x0
	[0165.096] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.096] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.096] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.096] IUnknown:AddRef (This=0x7753b0) returned 0x3
	[0165.096] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.096] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.096] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7753b4) returned 0x0
	[0165.097] IMarshal:GetUnmarshalClass (in: This=0x7753b4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.097] IUnknown:Release (This=0x7753b4) returned 0x3
	[0165.097] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.097] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.097] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.097] IUnknown:Release (This=0x7753b0) returned 0x2
	[0165.097] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.097] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.097] IUnknown:QueryInterface (in: This=0x7753b0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7753b0) returned 0x0
	[0165.097] IUnknown:AddRef (This=0x7753b0) returned 0x4
	[0165.097] IUnknown:Release (This=0x7753b0) returned 0x3
	[0165.098] IUnknown:Release (This=0x7753b0) returned 0x2
	[0165.098] CoTaskMemFree (pv=0x783110) 
	[0165.098] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.098] IUnknown:AddRef (This=0x7753b0) returned 0x3
	[0165.098] IWbemClassObject:Get (in: This=0x7753b0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.098] IWbemClassObject:Get (in: This=0x7753b0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"784\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.098] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"784\"") returned 0x5c
	[0165.098] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"784\"") returned 0x5c
	[0165.098] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x60c
	[0165.098] SetEvent (hEvent=0x2bc) returned 1
	[0165.099] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x60c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.102] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.102] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.102] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cc30, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cc30) returned 0x0
	[0165.102] WbemDefPath:IUnknown:AddRef (This=0x78cc30) returned 0x3
	[0165.102] WbemDefPath:IUnknown:Release (This=0x78cc30) returned 0x2
	[0165.102] WbemDefPath:IWbemPath:SetText (This=0x78cc30, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"784\"") returned 0x0
	[0165.102] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.102] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.103] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.103] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.103] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.103] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.103] IWbemClassObject:Get (in: This=0x7753b0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289be6c*=0, plFlavor=0x289be70*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\dwm.exe", varVal2=0x0), pType=0x289be6c*=8, plFlavor=0x289be70*=0) returned 0x0
	[0165.103] SysStringByteLen (bstr="C:\\Windows\\system32\\dwm.exe") returned 0x36
	[0165.103] SysStringByteLen (bstr="C:\\Windows\\system32\\dwm.exe") returned 0x36
	[0165.104] IWbemClassObject:Get (in: This=0x7753b0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289be6c*=8, plFlavor=0x289be70*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\dwm.exe", varVal2=0x0), pType=0x289be6c*=8, plFlavor=0x289be70*=0) returned 0x0
	[0165.104] SysStringByteLen (bstr="C:\\Windows\\system32\\dwm.exe") returned 0x36
	[0165.104] SysStringByteLen (bstr="C:\\Windows\\system32\\dwm.exe") returned 0x36
	[0165.104] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\dwm.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\dwm.exe", lpFilePart=0x0) returned 0x1b
	[0165.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.104] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\dwm.exe" (normalized: "c:\\windows\\syswow64\\dwm.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0165.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.104] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\dwm.exe", nBufferLength=0x105, lpBuffer=0x19ef58, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\dwm.exe", lpFilePart=0x0) returned 0x1b
	[0165.104] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\dwm.exe", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\dwm.exe", lpFilePart=0x0) returned 0x1b
	[0165.106] CoTaskMemAlloc (cb=0x4) returned 0x783150
	[0165.106] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783150, puReturned=0x2892750 | out: apObjects=0x783150*=0x774d50, puReturned=0x2892750*=0x1) returned 0x0
	[0165.111] IUnknown:QueryInterface (in: This=0x774d50, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x774d50) returned 0x0
	[0165.112] IUnknown:QueryInterface (in: This=0x774d50, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.112] IUnknown:QueryInterface (in: This=0x774d50, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.112] IUnknown:QueryInterface (in: This=0x774d50, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.112] IUnknown:AddRef (This=0x774d50) returned 0x3
	[0165.112] IUnknown:QueryInterface (in: This=0x774d50, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.112] IUnknown:QueryInterface (in: This=0x774d50, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.112] IUnknown:QueryInterface (in: This=0x774d50, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x774d54) returned 0x0
	[0165.112] IMarshal:GetUnmarshalClass (in: This=0x774d54, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.112] IUnknown:Release (This=0x774d54) returned 0x3
	[0165.112] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.112] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.112] IUnknown:QueryInterface (in: This=0x774d50, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.112] IUnknown:Release (This=0x774d50) returned 0x2
	[0165.112] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.112] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.113] IUnknown:QueryInterface (in: This=0x774d50, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x774d50) returned 0x0
	[0165.113] IUnknown:AddRef (This=0x774d50) returned 0x4
	[0165.113] IUnknown:Release (This=0x774d50) returned 0x3
	[0165.113] IUnknown:Release (This=0x774d50) returned 0x2
	[0165.113] CoTaskMemFree (pv=0x783150) 
	[0165.113] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.113] IUnknown:AddRef (This=0x774d50) returned 0x3
	[0165.113] IWbemClassObject:Get (in: This=0x774d50, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.113] IWbemClassObject:Get (in: This=0x774d50, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"860\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.113] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"860\"") returned 0x5c
	[0165.113] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"860\"") returned 0x5c
	[0165.113] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x610
	[0165.113] SetEvent (hEvent=0x2bc) returned 1
	[0165.113] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x610, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.116] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.116] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c290, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c290) returned 0x0
	[0165.116] WbemDefPath:IUnknown:AddRef (This=0x78c290) returned 0x3
	[0165.116] WbemDefPath:IUnknown:Release (This=0x78c290) returned 0x2
	[0165.116] WbemDefPath:IWbemPath:SetText (This=0x78c290, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"860\"") returned 0x0
	[0165.116] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.116] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.116] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.116] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.116] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.117] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.117] IWbemClassObject:Get (in: This=0x774d50, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289c9bc*=0, plFlavor=0x289c9c0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x289c9bc*=8, plFlavor=0x289c9c0*=0) returned 0x0
	[0165.117] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.117] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.117] IWbemClassObject:Get (in: This=0x774d50, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289c9bc*=8, plFlavor=0x289c9c0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x289c9bc*=8, plFlavor=0x289c9c0*=0) returned 0x0
	[0165.117] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.117] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.117] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.117] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.117] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.118] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x289cb18 | out: lpData=0x289cb18) returned 1
	[0165.119] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x289cec4, puLen=0x19f470) returned 1
	[0165.119] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289cbd0, puLen=0x19f3f0) returned 1
	[0165.119] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289cc24, puLen=0x19f3f0) returned 1
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289cc88, puLen=0x19f3f0) returned 1
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289ccf8, puLen=0x19f3f0) returned 1
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289cd34, puLen=0x19f3f0) returned 1
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289cdb8, puLen=0x19f3f0) returned 1
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289cdf8, puLen=0x19f3f0) returned 1
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289ce68, puLen=0x19f3f0) returned 1
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x289cec4, puLen=0x19f3e4) returned 1
	[0165.120] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.120] VerQueryValueW (in: pBlock=0x289cb18, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x289cb40, puLen=0x19f3f4) returned 1
	[0165.120] CoTaskMemAlloc (cb=0x4) returned 0x782fc0
	[0165.120] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fc0, puReturned=0x2892750 | out: apObjects=0x782fc0*=0x774888, puReturned=0x2892750*=0x1) returned 0x0
	[0165.138] IUnknown:QueryInterface (in: This=0x774888, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x774888) returned 0x0
	[0165.138] IUnknown:QueryInterface (in: This=0x774888, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.138] IUnknown:QueryInterface (in: This=0x774888, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.138] IUnknown:QueryInterface (in: This=0x774888, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.139] IUnknown:AddRef (This=0x774888) returned 0x3
	[0165.139] IUnknown:QueryInterface (in: This=0x774888, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.139] IUnknown:QueryInterface (in: This=0x774888, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.139] IUnknown:QueryInterface (in: This=0x774888, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x77488c) returned 0x0
	[0165.139] IMarshal:GetUnmarshalClass (in: This=0x77488c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.139] IUnknown:Release (This=0x77488c) returned 0x3
	[0165.139] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.139] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.139] IUnknown:QueryInterface (in: This=0x774888, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.139] IUnknown:Release (This=0x774888) returned 0x2
	[0165.139] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.139] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.139] IUnknown:QueryInterface (in: This=0x774888, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x774888) returned 0x0
	[0165.139] IUnknown:AddRef (This=0x774888) returned 0x4
	[0165.139] IUnknown:Release (This=0x774888) returned 0x3
	[0165.139] IUnknown:Release (This=0x774888) returned 0x2
	[0165.140] CoTaskMemFree (pv=0x782fc0) 
	[0165.140] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.140] IUnknown:AddRef (This=0x774888) returned 0x3
	[0165.140] IWbemClassObject:Get (in: This=0x774888, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.140] IWbemClassObject:Get (in: This=0x774888, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"888\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.140] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"888\"") returned 0x5c
	[0165.140] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"888\"") returned 0x5c
	[0165.140] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x614
	[0165.140] SetEvent (hEvent=0x2bc) returned 1
	[0165.140] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x614, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.143] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.143] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.143] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c6f0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c6f0) returned 0x0
	[0165.143] WbemDefPath:IUnknown:AddRef (This=0x78c6f0) returned 0x3
	[0165.143] WbemDefPath:IUnknown:Release (This=0x78c6f0) returned 0x2
	[0165.143] WbemDefPath:IWbemPath:SetText (This=0x78c6f0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"888\"") returned 0x0
	[0165.143] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.143] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.143] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.143] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.143] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.143] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.144] IWbemClassObject:Get (in: This=0x774888, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289e774*=0, plFlavor=0x289e778*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\svchost.exe", varVal2=0x0), pType=0x289e774*=8, plFlavor=0x289e778*=0) returned 0x0
	[0165.144] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe") returned 0x3e
	[0165.144] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe") returned 0x3e
	[0165.144] IWbemClassObject:Get (in: This=0x774888, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x289e774*=8, plFlavor=0x289e778*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\svchost.exe", varVal2=0x0), pType=0x289e774*=8, plFlavor=0x289e778*=0) returned 0x0
	[0165.144] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe") returned 0x3e
	[0165.144] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe") returned 0x3e
	[0165.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.144] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.144] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\System32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.145] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\System32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x289e8d0 | out: lpData=0x289e8d0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x289ec7c, puLen=0x19f470) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289e988, puLen=0x19f3f0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289e9dc, puLen=0x19f3f0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289ea40, puLen=0x19f3f0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289eab0, puLen=0x19f3f0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289eaec, puLen=0x19f3f0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289eb70, puLen=0x19f3f0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289ebb0, puLen=0x19f3f0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x289ec20, puLen=0x19f3f0) returned 1
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.314] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x289ec7c, puLen=0x19f3e4) returned 1
	[0165.314] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.315] VerQueryValueW (in: pBlock=0x289e8d0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x289e8f8, puLen=0x19f3f4) returned 1
	[0165.315] CoTaskMemAlloc (cb=0x4) returned 0x783030
	[0165.315] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783030, puReturned=0x2892750 | out: apObjects=0x783030*=0x775d40, puReturned=0x2892750*=0x1) returned 0x0
	[0165.319] IUnknown:QueryInterface (in: This=0x775d40, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x775d40) returned 0x0
	[0165.320] IUnknown:QueryInterface (in: This=0x775d40, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.320] IUnknown:QueryInterface (in: This=0x775d40, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.320] IUnknown:QueryInterface (in: This=0x775d40, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.320] IUnknown:AddRef (This=0x775d40) returned 0x3
	[0165.320] IUnknown:QueryInterface (in: This=0x775d40, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.320] IUnknown:QueryInterface (in: This=0x775d40, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.320] IUnknown:QueryInterface (in: This=0x775d40, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x775d44) returned 0x0
	[0165.320] IMarshal:GetUnmarshalClass (in: This=0x775d44, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.320] IUnknown:Release (This=0x775d44) returned 0x3
	[0165.320] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.320] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.321] IUnknown:QueryInterface (in: This=0x775d40, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.321] IUnknown:Release (This=0x775d40) returned 0x2
	[0165.321] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.321] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.321] IUnknown:QueryInterface (in: This=0x775d40, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x775d40) returned 0x0
	[0165.321] IUnknown:AddRef (This=0x775d40) returned 0x4
	[0165.321] IUnknown:Release (This=0x775d40) returned 0x3
	[0165.321] IUnknown:Release (This=0x775d40) returned 0x2
	[0165.321] CoTaskMemFree (pv=0x783030) 
	[0165.321] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.321] IUnknown:AddRef (This=0x775d40) returned 0x3
	[0165.321] IWbemClassObject:Get (in: This=0x775d40, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.321] IWbemClassObject:Get (in: This=0x775d40, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"904\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.322] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"904\"") returned 0x5c
	[0165.322] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"904\"") returned 0x5c
	[0165.322] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x618
	[0165.322] SetEvent (hEvent=0x2bc) returned 1
	[0165.322] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x618, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.331] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.331] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.331] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c3e0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c3e0) returned 0x0
	[0165.331] WbemDefPath:IUnknown:AddRef (This=0x78c3e0) returned 0x3
	[0165.336] WbemDefPath:IUnknown:Release (This=0x78c3e0) returned 0x2
	[0165.336] WbemDefPath:IWbemPath:SetText (This=0x78c3e0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"904\"") returned 0x0
	[0165.337] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.337] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.337] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.337] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.337] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.337] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.337] IWbemClassObject:Get (in: This=0x775d40, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a052c*=0, plFlavor=0x28a0530*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a052c*=8, plFlavor=0x28a0530*=0) returned 0x0
	[0165.337] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.337] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.338] IWbemClassObject:Get (in: This=0x775d40, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a052c*=8, plFlavor=0x28a0530*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a052c*=8, plFlavor=0x28a0530*=0) returned 0x0
	[0165.338] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.338] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.338] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.338] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.338] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.339] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x28a0688 | out: lpData=0x28a0688) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28a0a34, puLen=0x19f470) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a0740, puLen=0x19f3f0) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a0794, puLen=0x19f3f0) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a07f8, puLen=0x19f3f0) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a0868, puLen=0x19f3f0) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a08a4, puLen=0x19f3f0) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a0928, puLen=0x19f3f0) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a0968, puLen=0x19f3f0) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a09d8, puLen=0x19f3f0) returned 1
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28a0a34, puLen=0x19f3e4) returned 1
	[0165.340] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.340] VerQueryValueW (in: pBlock=0x28a0688, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28a06b0, puLen=0x19f3f4) returned 1
	[0165.341] CoTaskMemAlloc (cb=0x4) returned 0x782ff0
	[0165.341] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782ff0, puReturned=0x2892750 | out: apObjects=0x782ff0*=0x774ee8, puReturned=0x2892750*=0x1) returned 0x0
	[0165.343] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x774ee8) returned 0x0
	[0165.343] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.343] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.343] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.344] IUnknown:AddRef (This=0x774ee8) returned 0x3
	[0165.344] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.344] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.344] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x774eec) returned 0x0
	[0165.344] IMarshal:GetUnmarshalClass (in: This=0x774eec, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.344] IUnknown:Release (This=0x774eec) returned 0x3
	[0165.344] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.344] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.344] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.344] IUnknown:Release (This=0x774ee8) returned 0x2
	[0165.344] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.344] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.344] IUnknown:QueryInterface (in: This=0x774ee8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x774ee8) returned 0x0
	[0165.345] IUnknown:AddRef (This=0x774ee8) returned 0x4
	[0165.345] IUnknown:Release (This=0x774ee8) returned 0x3
	[0165.345] IUnknown:Release (This=0x774ee8) returned 0x2
	[0165.345] CoTaskMemFree (pv=0x782ff0) 
	[0165.345] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.345] IUnknown:AddRef (This=0x774ee8) returned 0x3
	[0165.345] IWbemClassObject:Get (in: This=0x774ee8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.345] IWbemClassObject:Get (in: This=0x774ee8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"972\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.345] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"972\"") returned 0x5c
	[0165.345] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"972\"") returned 0x5c
	[0165.345] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x61c
	[0165.345] SetEvent (hEvent=0x2bc) returned 1
	[0165.346] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x61c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.350] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.350] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c990, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c990) returned 0x0
	[0165.350] WbemDefPath:IUnknown:AddRef (This=0x78c990) returned 0x3
	[0165.350] WbemDefPath:IUnknown:Release (This=0x78c990) returned 0x2
	[0165.350] WbemDefPath:IWbemPath:SetText (This=0x78c990, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"972\"") returned 0x0
	[0165.350] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.350] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.350] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.350] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.350] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.350] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.350] IWbemClassObject:Get (in: This=0x774ee8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a22e4*=0, plFlavor=0x28a22e8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a22e4*=8, plFlavor=0x28a22e8*=0) returned 0x0
	[0165.350] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.350] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.351] IWbemClassObject:Get (in: This=0x774ee8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a22e4*=8, plFlavor=0x28a22e8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a22e4*=8, plFlavor=0x28a22e8*=0) returned 0x0
	[0165.351] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.351] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.351] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.351] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.351] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.352] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x28a2440 | out: lpData=0x28a2440) returned 1
	[0165.364] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28a27ec, puLen=0x19f470) returned 1
	[0165.364] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a24f8, puLen=0x19f3f0) returned 1
	[0165.364] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a254c, puLen=0x19f3f0) returned 1
	[0165.364] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a25b0, puLen=0x19f3f0) returned 1
	[0165.364] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a2620, puLen=0x19f3f0) returned 1
	[0165.364] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a265c, puLen=0x19f3f0) returned 1
	[0165.364] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a26e0, puLen=0x19f3f0) returned 1
	[0165.364] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a2720, puLen=0x19f3f0) returned 1
	[0165.365] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a2790, puLen=0x19f3f0) returned 1
	[0165.365] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.365] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.365] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.365] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.365] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28a27ec, puLen=0x19f3e4) returned 1
	[0165.365] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.365] VerQueryValueW (in: pBlock=0x28a2440, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28a2468, puLen=0x19f3f4) returned 1
	[0165.365] CoTaskMemAlloc (cb=0x4) returned 0x783040
	[0165.365] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783040, puReturned=0x2892750 | out: apObjects=0x783040*=0x775080, puReturned=0x2892750*=0x1) returned 0x0
	[0165.376] IUnknown:QueryInterface (in: This=0x775080, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x775080) returned 0x0
	[0165.376] IUnknown:QueryInterface (in: This=0x775080, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.376] IUnknown:QueryInterface (in: This=0x775080, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.376] IUnknown:QueryInterface (in: This=0x775080, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.376] IUnknown:AddRef (This=0x775080) returned 0x3
	[0165.376] IUnknown:QueryInterface (in: This=0x775080, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.376] IUnknown:QueryInterface (in: This=0x775080, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.376] IUnknown:QueryInterface (in: This=0x775080, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x775084) returned 0x0
	[0165.376] IMarshal:GetUnmarshalClass (in: This=0x775084, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.377] IUnknown:Release (This=0x775084) returned 0x3
	[0165.377] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.377] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.377] IUnknown:QueryInterface (in: This=0x775080, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.377] IUnknown:Release (This=0x775080) returned 0x2
	[0165.377] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.377] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.377] IUnknown:QueryInterface (in: This=0x775080, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x775080) returned 0x0
	[0165.377] IUnknown:AddRef (This=0x775080) returned 0x4
	[0165.377] IUnknown:Release (This=0x775080) returned 0x3
	[0165.377] IUnknown:Release (This=0x775080) returned 0x2
	[0165.377] CoTaskMemFree (pv=0x783040) 
	[0165.377] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.377] IUnknown:AddRef (This=0x775080) returned 0x3
	[0165.377] IWbemClassObject:Get (in: This=0x775080, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.377] IWbemClassObject:Get (in: This=0x775080, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1000\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.378] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1000\"") returned 0x5e
	[0165.378] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1000\"") returned 0x5e
	[0165.378] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x620
	[0165.378] SetEvent (hEvent=0x2bc) returned 1
	[0165.378] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x620, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.385] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.385] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c680, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c680) returned 0x0
	[0165.386] WbemDefPath:IUnknown:AddRef (This=0x78c680) returned 0x3
	[0165.386] WbemDefPath:IUnknown:Release (This=0x78c680) returned 0x2
	[0165.386] WbemDefPath:IWbemPath:SetText (This=0x78c680, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1000\"") returned 0x0
	[0165.386] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.386] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.386] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.386] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.386] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.386] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.386] IWbemClassObject:Get (in: This=0x775080, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a409c*=0, plFlavor=0x28a40a0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a409c*=8, plFlavor=0x28a40a0*=0) returned 0x0
	[0165.386] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.386] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.386] IWbemClassObject:Get (in: This=0x775080, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a409c*=8, plFlavor=0x28a40a0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a409c*=8, plFlavor=0x28a40a0*=0) returned 0x0
	[0165.386] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.386] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.387] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.387] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.387] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.399] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x28a41f8 | out: lpData=0x28a41f8) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28a45a4, puLen=0x19f470) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a42b0, puLen=0x19f3f0) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a4304, puLen=0x19f3f0) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a4368, puLen=0x19f3f0) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a43d8, puLen=0x19f3f0) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a4414, puLen=0x19f3f0) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a4498, puLen=0x19f3f0) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a44d8, puLen=0x19f3f0) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a4548, puLen=0x19f3f0) returned 1
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.400] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.401] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28a45a4, puLen=0x19f3e4) returned 1
	[0165.401] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.401] VerQueryValueW (in: pBlock=0x28a41f8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28a4220, puLen=0x19f3f4) returned 1
	[0165.401] CoTaskMemAlloc (cb=0x4) returned 0x783080
	[0165.401] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783080, puReturned=0x2892750 | out: apObjects=0x783080*=0x775218, puReturned=0x2892750*=0x1) returned 0x0
	[0165.407] IUnknown:QueryInterface (in: This=0x775218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x775218) returned 0x0
	[0165.407] IUnknown:QueryInterface (in: This=0x775218, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.407] IUnknown:QueryInterface (in: This=0x775218, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.408] IUnknown:QueryInterface (in: This=0x775218, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.408] IUnknown:AddRef (This=0x775218) returned 0x3
	[0165.408] IUnknown:QueryInterface (in: This=0x775218, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.408] IUnknown:QueryInterface (in: This=0x775218, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.408] IUnknown:QueryInterface (in: This=0x775218, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x77521c) returned 0x0
	[0165.408] IMarshal:GetUnmarshalClass (in: This=0x77521c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.408] IUnknown:Release (This=0x77521c) returned 0x3
	[0165.408] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.409] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.409] IUnknown:QueryInterface (in: This=0x775218, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.409] IUnknown:Release (This=0x775218) returned 0x2
	[0165.409] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.409] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.409] IUnknown:QueryInterface (in: This=0x775218, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x775218) returned 0x0
	[0165.409] IUnknown:AddRef (This=0x775218) returned 0x4
	[0165.409] IUnknown:Release (This=0x775218) returned 0x3
	[0165.409] IUnknown:Release (This=0x775218) returned 0x2
	[0165.409] CoTaskMemFree (pv=0x783080) 
	[0165.409] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.409] IUnknown:AddRef (This=0x775218) returned 0x3
	[0165.409] IWbemClassObject:Get (in: This=0x775218, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.409] IWbemClassObject:Get (in: This=0x775218, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"324\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.409] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"324\"") returned 0x5c
	[0165.410] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"324\"") returned 0x5c
	[0165.410] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x624
	[0165.410] SetEvent (hEvent=0x2bc) returned 1
	[0165.410] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x624, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.415] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.415] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.415] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca70, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78ca70) returned 0x0
	[0165.416] WbemDefPath:IUnknown:AddRef (This=0x78ca70) returned 0x3
	[0165.416] WbemDefPath:IUnknown:Release (This=0x78ca70) returned 0x2
	[0165.416] WbemDefPath:IWbemPath:SetText (This=0x78ca70, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"324\"") returned 0x0
	[0165.416] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.416] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.416] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.416] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.416] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.416] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.416] IWbemClassObject:Get (in: This=0x775218, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a5e54*=0, plFlavor=0x28a5e58*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a5e54*=8, plFlavor=0x28a5e58*=0) returned 0x0
	[0165.417] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.417] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.417] IWbemClassObject:Get (in: This=0x775218, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a5e54*=8, plFlavor=0x28a5e58*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a5e54*=8, plFlavor=0x28a5e58*=0) returned 0x0
	[0165.417] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.417] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.417] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.417] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.424] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x28a5fb0 | out: lpData=0x28a5fb0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28a635c, puLen=0x19f470) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a6068, puLen=0x19f3f0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a60bc, puLen=0x19f3f0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a6120, puLen=0x19f3f0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a6190, puLen=0x19f3f0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a61cc, puLen=0x19f3f0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a6250, puLen=0x19f3f0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a6290, puLen=0x19f3f0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a6300, puLen=0x19f3f0) returned 1
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.425] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.426] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.426] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28a635c, puLen=0x19f3e4) returned 1
	[0165.426] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.426] VerQueryValueW (in: pBlock=0x28a5fb0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28a5fd8, puLen=0x19f3f4) returned 1
	[0165.426] CoTaskMemAlloc (cb=0x4) returned 0x783040
	[0165.426] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783040, puReturned=0x2892750 | out: apObjects=0x783040*=0x792658, puReturned=0x2892750*=0x1) returned 0x0
	[0165.452] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x792658) returned 0x0
	[0165.453] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.453] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.453] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.453] IUnknown:AddRef (This=0x792658) returned 0x3
	[0165.453] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.453] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.453] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79265c) returned 0x0
	[0165.453] IMarshal:GetUnmarshalClass (in: This=0x79265c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.453] IUnknown:Release (This=0x79265c) returned 0x3
	[0165.453] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.453] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.453] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.453] IUnknown:Release (This=0x792658) returned 0x2
	[0165.453] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.453] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.453] IUnknown:QueryInterface (in: This=0x792658, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x792658) returned 0x0
	[0165.453] IUnknown:AddRef (This=0x792658) returned 0x4
	[0165.454] IUnknown:Release (This=0x792658) returned 0x3
	[0165.454] IUnknown:Release (This=0x792658) returned 0x2
	[0165.454] CoTaskMemFree (pv=0x783040) 
	[0165.454] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.454] IUnknown:AddRef (This=0x792658) returned 0x3
	[0165.454] IWbemClassObject:Get (in: This=0x792658, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.454] IWbemClassObject:Get (in: This=0x792658, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1052\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.454] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1052\"") returned 0x5e
	[0165.454] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1052\"") returned 0x5e
	[0165.454] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x628
	[0165.454] SetEvent (hEvent=0x2bc) returned 1
	[0165.454] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x628, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.508] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.508] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.508] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd10, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cd10) returned 0x0
	[0165.509] WbemDefPath:IUnknown:AddRef (This=0x78cd10) returned 0x3
	[0165.509] WbemDefPath:IUnknown:Release (This=0x78cd10) returned 0x2
	[0165.509] WbemDefPath:IWbemPath:SetText (This=0x78cd10, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1052\"") returned 0x0
	[0165.509] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.509] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.509] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.509] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.509] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.509] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.509] IWbemClassObject:Get (in: This=0x792658, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a7c0c*=0, plFlavor=0x28a7c10*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a7c0c*=8, plFlavor=0x28a7c10*=0) returned 0x0
	[0165.510] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.510] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.510] IWbemClassObject:Get (in: This=0x792658, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a7c0c*=8, plFlavor=0x28a7c10*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28a7c0c*=8, plFlavor=0x28a7c10*=0) returned 0x0
	[0165.510] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.510] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.510] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.511] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.513] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x28a7d68 | out: lpData=0x28a7d68) returned 1
	[0165.514] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28a8114, puLen=0x19f470) returned 1
	[0165.514] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a7e20, puLen=0x19f3f0) returned 1
	[0165.514] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a7e74, puLen=0x19f3f0) returned 1
	[0165.514] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a7ed8, puLen=0x19f3f0) returned 1
	[0165.514] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a7f48, puLen=0x19f3f0) returned 1
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a7f84, puLen=0x19f3f0) returned 1
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a8008, puLen=0x19f3f0) returned 1
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a8048, puLen=0x19f3f0) returned 1
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28a80b8, puLen=0x19f3f0) returned 1
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28a8114, puLen=0x19f3e4) returned 1
	[0165.515] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.515] VerQueryValueW (in: pBlock=0x28a7d68, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28a7d90, puLen=0x19f3f4) returned 1
	[0165.515] CoTaskMemAlloc (cb=0x4) returned 0x783160
	[0165.515] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783160, puReturned=0x2892750 | out: apObjects=0x783160*=0x792190, puReturned=0x2892750*=0x1) returned 0x0
	[0165.526] IUnknown:QueryInterface (in: This=0x792190, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x792190) returned 0x0
	[0165.527] IUnknown:QueryInterface (in: This=0x792190, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.527] IUnknown:QueryInterface (in: This=0x792190, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.527] IUnknown:QueryInterface (in: This=0x792190, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.527] IUnknown:AddRef (This=0x792190) returned 0x3
	[0165.527] IUnknown:QueryInterface (in: This=0x792190, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.527] IUnknown:QueryInterface (in: This=0x792190, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.527] IUnknown:QueryInterface (in: This=0x792190, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x792194) returned 0x0
	[0165.527] IMarshal:GetUnmarshalClass (in: This=0x792194, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.527] IUnknown:Release (This=0x792194) returned 0x3
	[0165.527] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.528] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.528] IUnknown:QueryInterface (in: This=0x792190, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.528] IUnknown:Release (This=0x792190) returned 0x2
	[0165.528] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.528] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.528] IUnknown:QueryInterface (in: This=0x792190, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x792190) returned 0x0
	[0165.528] IUnknown:AddRef (This=0x792190) returned 0x4
	[0165.528] IUnknown:Release (This=0x792190) returned 0x3
	[0165.528] IUnknown:Release (This=0x792190) returned 0x2
	[0165.528] CoTaskMemFree (pv=0x783160) 
	[0165.528] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.528] IUnknown:AddRef (This=0x792190) returned 0x3
	[0165.528] IWbemClassObject:Get (in: This=0x792190, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.528] IWbemClassObject:Get (in: This=0x792190, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1156\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.528] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1156\"") returned 0x5e
	[0165.528] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1156\"") returned 0x5e
	[0165.529] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x62c
	[0165.529] SetEvent (hEvent=0x2bc) returned 1
	[0165.529] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x62c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.532] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.532] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c140, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c140) returned 0x0
	[0165.533] WbemDefPath:IUnknown:AddRef (This=0x78c140) returned 0x3
	[0165.533] WbemDefPath:IUnknown:Release (This=0x78c140) returned 0x2
	[0165.533] WbemDefPath:IWbemPath:SetText (This=0x78c140, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1156\"") returned 0x0
	[0165.533] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.533] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.533] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.533] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.533] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.533] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.533] IWbemClassObject:Get (in: This=0x792190, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a99c4*=0, plFlavor=0x28a99c8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\spoolsv.exe", varVal2=0x0), pType=0x28a99c4*=8, plFlavor=0x28a99c8*=0) returned 0x0
	[0165.533] SysStringByteLen (bstr="C:\\Windows\\System32\\spoolsv.exe") returned 0x3e
	[0165.533] SysStringByteLen (bstr="C:\\Windows\\System32\\spoolsv.exe") returned 0x3e
	[0165.533] IWbemClassObject:Get (in: This=0x792190, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a99c4*=8, plFlavor=0x28a99c8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\spoolsv.exe", varVal2=0x0), pType=0x28a99c4*=8, plFlavor=0x28a99c8*=0) returned 0x0
	[0165.534] SysStringByteLen (bstr="C:\\Windows\\System32\\spoolsv.exe") returned 0x3e
	[0165.534] SysStringByteLen (bstr="C:\\Windows\\System32\\spoolsv.exe") returned 0x3e
	[0165.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\spoolsv.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\spoolsv.exe", lpFilePart=0x0) returned 0x1f
	[0165.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.534] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\spoolsv.exe" (normalized: "c:\\windows\\system32\\spoolsv.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0165.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.535] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\spoolsv.exe", nBufferLength=0x105, lpBuffer=0x19ef58, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\spoolsv.exe", lpFilePart=0x0) returned 0x1f
	[0165.535] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\spoolsv.exe", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\spoolsv.exe", lpFilePart=0x0) returned 0x1f
	[0165.538] CoTaskMemAlloc (cb=0x4) returned 0x783030
	[0165.538] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783030, puReturned=0x2892750 | out: apObjects=0x783030*=0x792328, puReturned=0x2892750*=0x1) returned 0x0
	[0165.574] IUnknown:QueryInterface (in: This=0x792328, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x792328) returned 0x0
	[0165.574] IUnknown:QueryInterface (in: This=0x792328, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.574] IUnknown:QueryInterface (in: This=0x792328, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.574] IUnknown:QueryInterface (in: This=0x792328, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.575] IUnknown:AddRef (This=0x792328) returned 0x3
	[0165.575] IUnknown:QueryInterface (in: This=0x792328, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.575] IUnknown:QueryInterface (in: This=0x792328, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.575] IUnknown:QueryInterface (in: This=0x792328, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79232c) returned 0x0
	[0165.575] IMarshal:GetUnmarshalClass (in: This=0x79232c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.575] IUnknown:Release (This=0x79232c) returned 0x3
	[0165.575] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.575] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.575] IUnknown:QueryInterface (in: This=0x792328, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.579] IUnknown:Release (This=0x792328) returned 0x2
	[0165.579] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.579] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.579] IUnknown:QueryInterface (in: This=0x792328, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x792328) returned 0x0
	[0165.579] IUnknown:AddRef (This=0x792328) returned 0x4
	[0165.579] IUnknown:Release (This=0x792328) returned 0x3
	[0165.579] IUnknown:Release (This=0x792328) returned 0x2
	[0165.579] CoTaskMemFree (pv=0x783030) 
	[0165.579] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.579] IUnknown:AddRef (This=0x792328) returned 0x3
	[0165.579] IWbemClassObject:Get (in: This=0x792328, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.580] IWbemClassObject:Get (in: This=0x792328, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1432\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.580] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1432\"") returned 0x5e
	[0165.580] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1432\"") returned 0x5e
	[0165.580] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x630
	[0165.580] SetEvent (hEvent=0x2bc) returned 1
	[0165.582] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x630, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.625] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.625] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.625] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca00, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78ca00) returned 0x0
	[0165.625] WbemDefPath:IUnknown:AddRef (This=0x78ca00) returned 0x3
	[0165.625] WbemDefPath:IUnknown:Release (This=0x78ca00) returned 0x2
	[0165.625] WbemDefPath:IWbemPath:SetText (This=0x78ca00, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1432\"") returned 0x0
	[0165.626] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.626] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.626] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.626] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.626] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.626] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.626] IWbemClassObject:Get (in: This=0x792328, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28aa53c*=0, plFlavor=0x28aa540*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\sihost.exe", varVal2=0x0), pType=0x28aa53c*=8, plFlavor=0x28aa540*=0) returned 0x0
	[0165.626] SysStringByteLen (bstr="C:\\Windows\\system32\\sihost.exe") returned 0x3c
	[0165.626] SysStringByteLen (bstr="C:\\Windows\\system32\\sihost.exe") returned 0x3c
	[0165.626] IWbemClassObject:Get (in: This=0x792328, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28aa53c*=8, plFlavor=0x28aa540*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\sihost.exe", varVal2=0x0), pType=0x28aa53c*=8, plFlavor=0x28aa540*=0) returned 0x0
	[0165.626] SysStringByteLen (bstr="C:\\Windows\\system32\\sihost.exe") returned 0x3c
	[0165.626] SysStringByteLen (bstr="C:\\Windows\\system32\\sihost.exe") returned 0x3c
	[0165.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\sihost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\sihost.exe", lpFilePart=0x0) returned 0x1e
	[0165.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.627] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\sihost.exe" (normalized: "c:\\windows\\syswow64\\sihost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0165.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.627] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\sihost.exe", nBufferLength=0x105, lpBuffer=0x19ef58, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\sihost.exe", lpFilePart=0x0) returned 0x1e
	[0165.627] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\sihost.exe", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\sihost.exe", lpFilePart=0x0) returned 0x1e
	[0165.629] CoTaskMemAlloc (cb=0x4) returned 0x782fd0
	[0165.629] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fd0, puReturned=0x2892750 | out: apObjects=0x782fd0*=0x7924c0, puReturned=0x2892750*=0x1) returned 0x0
	[0165.650] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7924c0) returned 0x0
	[0165.650] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.650] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.651] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.651] IUnknown:AddRef (This=0x7924c0) returned 0x3
	[0165.651] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.651] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.651] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7924c4) returned 0x0
	[0165.651] IMarshal:GetUnmarshalClass (in: This=0x7924c4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.651] IUnknown:Release (This=0x7924c4) returned 0x3
	[0165.651] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.651] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.651] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.651] IUnknown:Release (This=0x7924c0) returned 0x2
	[0165.651] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.651] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.651] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7924c0) returned 0x0
	[0165.652] IUnknown:AddRef (This=0x7924c0) returned 0x4
	[0165.652] IUnknown:Release (This=0x7924c0) returned 0x3
	[0165.652] IUnknown:Release (This=0x7924c0) returned 0x2
	[0165.652] CoTaskMemFree (pv=0x782fd0) 
	[0165.652] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.652] IUnknown:AddRef (This=0x7924c0) returned 0x3
	[0165.652] IWbemClassObject:Get (in: This=0x7924c0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.652] IWbemClassObject:Get (in: This=0x7924c0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1560\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.652] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1560\"") returned 0x5e
	[0165.652] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1560\"") returned 0x5e
	[0165.652] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x634
	[0165.652] SetEvent (hEvent=0x2bc) returned 1
	[0165.653] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x634, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.670] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.670] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.670] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c450, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c450) returned 0x0
	[0165.670] WbemDefPath:IUnknown:AddRef (This=0x78c450) returned 0x3
	[0165.670] WbemDefPath:IUnknown:Release (This=0x78c450) returned 0x2
	[0165.670] WbemDefPath:IWbemPath:SetText (This=0x78c450, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1560\"") returned 0x0
	[0165.670] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.670] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.670] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.670] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.671] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.671] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.671] IWbemClassObject:Get (in: This=0x7924c0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28ab0b4*=0, plFlavor=0x28ab0b8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28ab0b4*=8, plFlavor=0x28ab0b8*=0) returned 0x0
	[0165.671] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.671] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.671] IWbemClassObject:Get (in: This=0x7924c0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28ab0b4*=8, plFlavor=0x28ab0b8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\svchost.exe", varVal2=0x0), pType=0x28ab0b4*=8, plFlavor=0x28ab0b8*=0) returned 0x0
	[0165.671] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.671] SysStringByteLen (bstr="C:\\Windows\\system32\\svchost.exe") returned 0x3e
	[0165.672] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0165.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.672] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0165.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.672] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0165.677] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x28ab210 | out: lpData=0x28ab210) returned 1
	[0165.678] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28ab5bc, puLen=0x19f470) returned 1
	[0165.678] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ab2c8, puLen=0x19f3f0) returned 1
	[0165.678] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ab31c, puLen=0x19f3f0) returned 1
	[0165.678] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ab380, puLen=0x19f3f0) returned 1
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ab3f0, puLen=0x19f3f0) returned 1
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ab42c, puLen=0x19f3f0) returned 1
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ab4b0, puLen=0x19f3f0) returned 1
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ab4f0, puLen=0x19f3f0) returned 1
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ab560, puLen=0x19f3f0) returned 1
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28ab5bc, puLen=0x19f3e4) returned 1
	[0165.679] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.679] VerQueryValueW (in: pBlock=0x28ab210, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28ab238, puLen=0x19f3f4) returned 1
	[0165.680] CoTaskMemAlloc (cb=0x4) returned 0x782fc0
	[0165.680] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fc0, puReturned=0x2892750 | out: apObjects=0x782fc0*=0x790810, puReturned=0x2892750*=0x1) returned 0x0
	[0165.695] IUnknown:QueryInterface (in: This=0x790810, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x790810) returned 0x0
	[0165.695] IUnknown:QueryInterface (in: This=0x790810, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.695] IUnknown:QueryInterface (in: This=0x790810, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.695] IUnknown:QueryInterface (in: This=0x790810, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.695] IUnknown:AddRef (This=0x790810) returned 0x3
	[0165.695] IUnknown:QueryInterface (in: This=0x790810, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.695] IUnknown:QueryInterface (in: This=0x790810, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.695] IUnknown:QueryInterface (in: This=0x790810, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x790814) returned 0x0
	[0165.696] IMarshal:GetUnmarshalClass (in: This=0x790814, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.696] IUnknown:Release (This=0x790814) returned 0x3
	[0165.696] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.696] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.696] IUnknown:QueryInterface (in: This=0x790810, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.696] IUnknown:Release (This=0x790810) returned 0x2
	[0165.696] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.696] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.696] IUnknown:QueryInterface (in: This=0x790810, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x790810) returned 0x0
	[0165.696] IUnknown:AddRef (This=0x790810) returned 0x4
	[0165.696] IUnknown:Release (This=0x790810) returned 0x3
	[0165.696] IUnknown:Release (This=0x790810) returned 0x2
	[0165.696] CoTaskMemFree (pv=0x782fc0) 
	[0165.696] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.696] IUnknown:AddRef (This=0x790810) returned 0x3
	[0165.697] IWbemClassObject:Get (in: This=0x790810, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.697] IWbemClassObject:Get (in: This=0x790810, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1660\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.697] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1660\"") returned 0x5e
	[0165.697] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1660\"") returned 0x5e
	[0165.697] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x638
	[0165.697] SetEvent (hEvent=0x2bc) returned 1
	[0165.698] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x638, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.707] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.707] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.707] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c760, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c760) returned 0x0
	[0165.707] WbemDefPath:IUnknown:AddRef (This=0x78c760) returned 0x3
	[0165.707] WbemDefPath:IUnknown:Release (This=0x78c760) returned 0x2
	[0165.707] WbemDefPath:IWbemPath:SetText (This=0x78c760, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1660\"") returned 0x0
	[0165.707] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.707] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.707] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.707] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.707] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.707] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.707] IWbemClassObject:Get (in: This=0x790810, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28ace6c*=0, plFlavor=0x28ace70*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", varVal2=0x0), pType=0x28ace6c*=8, plFlavor=0x28ace70*=0) returned 0x0
	[0165.707] SysStringByteLen (bstr="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe") returned 0xbc
	[0165.707] SysStringByteLen (bstr="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe") returned 0xbc
	[0165.708] IWbemClassObject:Get (in: This=0x790810, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28ace6c*=8, plFlavor=0x28ace70*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", varVal2=0x0), pType=0x28ace6c*=8, plFlavor=0x28ace70*=0) returned 0x0
	[0165.708] SysStringByteLen (bstr="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe") returned 0xbc
	[0165.708] SysStringByteLen (bstr="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe") returned 0xbc
	[0165.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", lpFilePart=0x0) returned 0x5e
	[0165.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\skypehost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd25da6a, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xbd25da6a, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0xbd283ce8, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xac00)) returned 1
	[0165.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.708] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x644
	[0165.713] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", dwHandle=0x0, dwLen=0x644, lpData=0x28ad148 | out: lpData=0x28ad148) returned 1
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28ad464, puLen=0x19f470) returned 1
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.714] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28ad464, puLen=0x19f3e4) returned 1
	[0165.715] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28ad170, puLen=0x19f3f4) returned 1
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ad200, puLen=0x19f3f0) returned 1
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ad254, puLen=0x19f3f0) returned 1
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ad294, puLen=0x19f3f0) returned 1
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ad2cc, puLen=0x19f3f0) returned 1
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ad304, puLen=0x19f3f0) returned 1
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ad388, puLen=0x19f3f0) returned 1
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ad3c4, puLen=0x19f3f0) returned 1
	[0165.715] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ad40c, puLen=0x19f3f0) returned 1
	[0165.716] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.716] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.716] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.716] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.716] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28ad464, puLen=0x19f3e4) returned 1
	[0165.716] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.716] VerQueryValueW (in: pBlock=0x28ad148, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28ad170, puLen=0x19f3f4) returned 1
	[0165.716] CoTaskMemAlloc (cb=0x4) returned 0x783000
	[0165.716] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783000, puReturned=0x2892750 | out: apObjects=0x783000*=0x791008, puReturned=0x2892750*=0x1) returned 0x0
	[0165.722] IUnknown:QueryInterface (in: This=0x791008, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x791008) returned 0x0
	[0165.722] IUnknown:QueryInterface (in: This=0x791008, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.722] IUnknown:QueryInterface (in: This=0x791008, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.723] IUnknown:QueryInterface (in: This=0x791008, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.723] IUnknown:AddRef (This=0x791008) returned 0x3
	[0165.723] IUnknown:QueryInterface (in: This=0x791008, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.723] IUnknown:QueryInterface (in: This=0x791008, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.723] IUnknown:QueryInterface (in: This=0x791008, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79100c) returned 0x0
	[0165.723] IMarshal:GetUnmarshalClass (in: This=0x79100c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.723] IUnknown:Release (This=0x79100c) returned 0x3
	[0165.723] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.723] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.723] IUnknown:QueryInterface (in: This=0x791008, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.724] IUnknown:Release (This=0x791008) returned 0x2
	[0165.724] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.724] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.724] IUnknown:QueryInterface (in: This=0x791008, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x791008) returned 0x0
	[0165.724] IUnknown:AddRef (This=0x791008) returned 0x4
	[0165.724] IUnknown:Release (This=0x791008) returned 0x3
	[0165.724] IUnknown:Release (This=0x791008) returned 0x2
	[0165.724] CoTaskMemFree (pv=0x783000) 
	[0165.724] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.724] IUnknown:AddRef (This=0x791008) returned 0x3
	[0165.724] IWbemClassObject:Get (in: This=0x791008, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.724] IWbemClassObject:Get (in: This=0x791008, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1740\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.724] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1740\"") returned 0x5e
	[0165.724] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1740\"") returned 0x5e
	[0165.725] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x63c
	[0165.725] SetEvent (hEvent=0x2bc) returned 1
	[0165.725] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x63c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.737] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.737] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.737] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cae0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cae0) returned 0x0
	[0165.737] WbemDefPath:IUnknown:AddRef (This=0x78cae0) returned 0x3
	[0165.737] WbemDefPath:IUnknown:Release (This=0x78cae0) returned 0x2
	[0165.737] WbemDefPath:IWbemPath:SetText (This=0x78cae0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1740\"") returned 0x0
	[0165.737] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.737] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.737] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.737] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.737] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.737] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.737] IWbemClassObject:Get (in: This=0x791008, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28af6bc*=0, plFlavor=0x28af6c0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", varVal2=0x0), pType=0x28af6bc*=8, plFlavor=0x28af6c0*=0) returned 0x0
	[0165.737] SysStringByteLen (bstr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe") returned 0x9c
	[0165.737] SysStringByteLen (bstr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe") returned 0x9c
	[0165.738] IWbemClassObject:Get (in: This=0x791008, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28af6bc*=8, plFlavor=0x28af6c0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", varVal2=0x0), pType=0x28af6bc*=8, plFlavor=0x28af6c0*=0) returned 0x0
	[0165.738] SysStringByteLen (bstr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe") returned 0x9c
	[0165.738] SysStringByteLen (bstr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe") returned 0x9c
	[0165.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", lpFilePart=0x0) returned 0x4e
	[0165.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19ef7454, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x19ef7454, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1ed1e600, ftLastWriteTime.dwHighDateTime=0x1d0d7b1, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58)) returned 1
	[0165.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.745] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x8dc
	[0165.747] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", dwHandle=0x0, dwLen=0x8dc, lpData=0x28af938 | out: lpData=0x28af938) returned 1
	[0165.748] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28afda0, puLen=0x19f470) returned 1
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28af9f0, puLen=0x19f3f0) returned 1
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28afa44, puLen=0x19f3f0) returned 1
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28afaa0, puLen=0x19f3f0) returned 1
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28afae0, puLen=0x19f3f0) returned 1
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28afc80, puLen=0x19f3f0) returned 1
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28afccc, puLen=0x19f3f0) returned 1
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28afd14, puLen=0x19f3f0) returned 1
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28afda0, puLen=0x19f3e4) returned 1
	[0165.749] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.749] VerQueryValueW (in: pBlock=0x28af938, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28af960, puLen=0x19f3f4) returned 1
	[0165.749] CoTaskMemAlloc (cb=0x4) returned 0x783160
	[0165.750] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783160, puReturned=0x2892750 | out: apObjects=0x783160*=0x791668, puReturned=0x2892750*=0x1) returned 0x0
	[0165.771] IUnknown:QueryInterface (in: This=0x791668, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x791668) returned 0x0
	[0165.772] IUnknown:QueryInterface (in: This=0x791668, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.772] IUnknown:QueryInterface (in: This=0x791668, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.772] IUnknown:QueryInterface (in: This=0x791668, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.772] IUnknown:AddRef (This=0x791668) returned 0x3
	[0165.772] IUnknown:QueryInterface (in: This=0x791668, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.772] IUnknown:QueryInterface (in: This=0x791668, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.772] IUnknown:QueryInterface (in: This=0x791668, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79166c) returned 0x0
	[0165.773] IMarshal:GetUnmarshalClass (in: This=0x79166c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.773] IUnknown:Release (This=0x79166c) returned 0x3
	[0165.773] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.773] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.773] IUnknown:QueryInterface (in: This=0x791668, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.773] IUnknown:Release (This=0x791668) returned 0x2
	[0165.773] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.773] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.773] IUnknown:QueryInterface (in: This=0x791668, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x791668) returned 0x0
	[0165.773] IUnknown:AddRef (This=0x791668) returned 0x4
	[0165.773] IUnknown:Release (This=0x791668) returned 0x3
	[0165.773] IUnknown:Release (This=0x791668) returned 0x2
	[0165.773] CoTaskMemFree (pv=0x783160) 
	[0165.773] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.773] IUnknown:AddRef (This=0x791668) returned 0x3
	[0165.774] IWbemClassObject:Get (in: This=0x791668, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.774] IWbemClassObject:Get (in: This=0x791668, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1184\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.774] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1184\"") returned 0x5e
	[0165.774] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1184\"") returned 0x5e
	[0165.774] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x640
	[0165.774] SetEvent (hEvent=0x2bc) returned 1
	[0165.775] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x640, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.791] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.791] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c920, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c920) returned 0x0
	[0165.791] WbemDefPath:IUnknown:AddRef (This=0x78c920) returned 0x3
	[0165.791] WbemDefPath:IUnknown:Release (This=0x78c920) returned 0x2
	[0165.791] WbemDefPath:IWbemPath:SetText (This=0x78c920, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1184\"") returned 0x0
	[0165.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.791] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.791] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.791] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.791] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.791] IWbemClassObject:Get (in: This=0x791668, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b1668*=0, plFlavor=0x28b166c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\Explorer.EXE", varVal2=0x0), pType=0x28b1668*=8, plFlavor=0x28b166c*=0) returned 0x0
	[0165.791] SysStringByteLen (bstr="C:\\Windows\\Explorer.EXE") returned 0x2e
	[0165.791] SysStringByteLen (bstr="C:\\Windows\\Explorer.EXE") returned 0x2e
	[0165.792] IWbemClassObject:Get (in: This=0x791668, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b1668*=8, plFlavor=0x28b166c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\Explorer.EXE", varVal2=0x0), pType=0x28b1668*=8, plFlavor=0x28b166c*=0) returned 0x0
	[0165.792] SysStringByteLen (bstr="C:\\Windows\\Explorer.EXE") returned 0x2e
	[0165.792] SysStringByteLen (bstr="C:\\Windows\\Explorer.EXE") returned 0x2e
	[0165.792] GetFullPathNameW (in: lpFileName="C:\\Windows\\Explorer.EXE", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Explorer.EXE", lpFilePart=0x0) returned 0x17
	[0165.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.792] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Explorer.EXE" (normalized: "c:\\windows\\explorer.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220ad5e0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x220ad5e0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x220ad5e0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44b550)) returned 1
	[0165.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.799] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Explorer.EXE", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x724
	[0165.802] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Explorer.EXE", dwHandle=0x0, dwLen=0x724, lpData=0x28b1794 | out: lpData=0x28b1794) returned 1
	[0165.807] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28b1b20, puLen=0x19f470) returned 1
	[0165.807] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b184c, puLen=0x19f3f0) returned 1
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b18a0, puLen=0x19f3f0) returned 1
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b18e4, puLen=0x19f3f0) returned 1
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b1954, puLen=0x19f3f0) returned 1
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b198c, puLen=0x19f3f0) returned 1
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b1a10, puLen=0x19f3f0) returned 1
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b1a54, puLen=0x19f3f0) returned 1
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b1ac4, puLen=0x19f3f0) returned 1
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28b1b20, puLen=0x19f3e4) returned 1
	[0165.808] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0165.808] VerQueryValueW (in: pBlock=0x28b1794, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28b17bc, puLen=0x19f3f4) returned 1
	[0165.809] CoTaskMemAlloc (cb=0x4) returned 0x782fe0
	[0165.809] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fe0, puReturned=0x2892750 | out: apObjects=0x782fe0*=0x791b30, puReturned=0x2892750*=0x1) returned 0x0
	[0165.812] IUnknown:QueryInterface (in: This=0x791b30, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x791b30) returned 0x0
	[0165.812] IUnknown:QueryInterface (in: This=0x791b30, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0165.812] IUnknown:QueryInterface (in: This=0x791b30, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0165.812] IUnknown:QueryInterface (in: This=0x791b30, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0165.813] IUnknown:AddRef (This=0x791b30) returned 0x3
	[0165.813] IUnknown:QueryInterface (in: This=0x791b30, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0165.813] IUnknown:QueryInterface (in: This=0x791b30, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0165.813] IUnknown:QueryInterface (in: This=0x791b30, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x791b34) returned 0x0
	[0165.813] IMarshal:GetUnmarshalClass (in: This=0x791b34, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0165.813] IUnknown:Release (This=0x791b34) returned 0x3
	[0165.813] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0165.813] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0165.814] IUnknown:QueryInterface (in: This=0x791b30, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0165.814] IUnknown:Release (This=0x791b30) returned 0x2
	[0165.814] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0165.814] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0165.814] IUnknown:QueryInterface (in: This=0x791b30, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x791b30) returned 0x0
	[0165.814] IUnknown:AddRef (This=0x791b30) returned 0x4
	[0165.814] IUnknown:Release (This=0x791b30) returned 0x3
	[0165.814] IUnknown:Release (This=0x791b30) returned 0x2
	[0165.814] CoTaskMemFree (pv=0x782fe0) 
	[0165.814] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0165.814] IUnknown:AddRef (This=0x791b30) returned 0x3
	[0165.814] IWbemClassObject:Get (in: This=0x791b30, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0165.814] IWbemClassObject:Get (in: This=0x791b30, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0165.814] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x5e
	[0165.814] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x5e
	[0165.815] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x644
	[0165.815] SetEvent (hEvent=0x2bc) returned 1
	[0165.815] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x644, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0165.818] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0165.818] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0165.818] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cca0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cca0) returned 0x0
	[0165.818] WbemDefPath:IUnknown:AddRef (This=0x78cca0) returned 0x3
	[0165.818] WbemDefPath:IUnknown:Release (This=0x78cca0) returned 0x2
	[0165.818] WbemDefPath:IWbemPath:SetText (This=0x78cca0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x0
	[0165.819] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0165.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0165.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.819] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0165.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0165.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0165.819] IWbemClassObject:Get (in: This=0x791b30, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b3390*=0, plFlavor=0x28b3394*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\taskhostw.exe", varVal2=0x0), pType=0x28b3390*=8, plFlavor=0x28b3394*=0) returned 0x0
	[0165.819] SysStringByteLen (bstr="C:\\Windows\\system32\\taskhostw.exe") returned 0x42
	[0165.819] SysStringByteLen (bstr="C:\\Windows\\system32\\taskhostw.exe") returned 0x42
	[0165.819] IWbemClassObject:Get (in: This=0x791b30, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b3390*=8, plFlavor=0x28b3394*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\taskhostw.exe", varVal2=0x0), pType=0x28b3390*=8, plFlavor=0x28b3394*=0) returned 0x0
	[0165.819] SysStringByteLen (bstr="C:\\Windows\\system32\\taskhostw.exe") returned 0x42
	[0165.819] SysStringByteLen (bstr="C:\\Windows\\system32\\taskhostw.exe") returned 0x42
	[0165.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\taskhostw.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\taskhostw.exe", lpFilePart=0x0) returned 0x21
	[0165.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0165.820] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\taskhostw.exe" (normalized: "c:\\windows\\syswow64\\taskhostw.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0165.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0165.820] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\taskhostw.exe", nBufferLength=0x105, lpBuffer=0x19ef58, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\taskhostw.exe", lpFilePart=0x0) returned 0x21
	[0165.820] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\taskhostw.exe", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\taskhostw.exe", lpFilePart=0x0) returned 0x21
	[0165.822] CoTaskMemAlloc (cb=0x4) returned 0x783160
	[0165.822] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783160, puReturned=0x2892750 | out: apObjects=0x783160*=0x791ff8, puReturned=0x2892750*=0x1) returned 0x0
	[0166.018] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x791ff8) returned 0x0
	[0166.019] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.019] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.019] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.019] IUnknown:AddRef (This=0x791ff8) returned 0x3
	[0166.020] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.020] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.020] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x791ffc) returned 0x0
	[0166.020] IMarshal:GetUnmarshalClass (in: This=0x791ffc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.020] IUnknown:Release (This=0x791ffc) returned 0x3
	[0166.020] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.020] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.020] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.020] IUnknown:Release (This=0x791ff8) returned 0x2
	[0166.020] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.020] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.020] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x791ff8) returned 0x0
	[0166.021] IUnknown:AddRef (This=0x791ff8) returned 0x4
	[0166.021] IUnknown:Release (This=0x791ff8) returned 0x3
	[0166.021] IUnknown:Release (This=0x791ff8) returned 0x2
	[0166.021] CoTaskMemFree (pv=0x783160) 
	[0166.021] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.021] IUnknown:AddRef (This=0x791ff8) returned 0x3
	[0166.021] IWbemClassObject:Get (in: This=0x791ff8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.021] IWbemClassObject:Get (in: This=0x791ff8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2168\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.022] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2168\"") returned 0x5e
	[0166.022] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2168\"") returned 0x5e
	[0166.022] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x648
	[0166.022] SetEvent (hEvent=0x2bc) returned 1
	[0166.022] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x648, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.089] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.089] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.089] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c300, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c300) returned 0x0
	[0166.089] WbemDefPath:IUnknown:AddRef (This=0x78c300) returned 0x3
	[0166.089] WbemDefPath:IUnknown:Release (This=0x78c300) returned 0x2
	[0166.089] WbemDefPath:IWbemPath:SetText (This=0x78c300, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2168\"") returned 0x0
	[0166.089] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.089] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.090] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.090] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.090] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.090] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.090] IWbemClassObject:Get (in: This=0x791ff8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b3f1c*=0, plFlavor=0x28b3f20*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\RuntimeBroker.exe", varVal2=0x0), pType=0x28b3f1c*=8, plFlavor=0x28b3f20*=0) returned 0x0
	[0166.090] SysStringByteLen (bstr="C:\\Windows\\System32\\RuntimeBroker.exe") returned 0x4a
	[0166.090] SysStringByteLen (bstr="C:\\Windows\\System32\\RuntimeBroker.exe") returned 0x4a
	[0166.090] IWbemClassObject:Get (in: This=0x791ff8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b3f1c*=8, plFlavor=0x28b3f20*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\RuntimeBroker.exe", varVal2=0x0), pType=0x28b3f1c*=8, plFlavor=0x28b3f20*=0) returned 0x0
	[0166.090] SysStringByteLen (bstr="C:\\Windows\\System32\\RuntimeBroker.exe") returned 0x4a
	[0166.090] SysStringByteLen (bstr="C:\\Windows\\System32\\RuntimeBroker.exe") returned 0x4a
	[0166.090] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\RuntimeBroker.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\RuntimeBroker.exe", lpFilePart=0x0) returned 0x25
	[0166.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.091] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\RuntimeBroker.exe" (normalized: "c:\\windows\\syswow64\\runtimebroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0166.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.092] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\RuntimeBroker.exe", nBufferLength=0x105, lpBuffer=0x19ef58, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\RuntimeBroker.exe", lpFilePart=0x0) returned 0x25
	[0166.092] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\RuntimeBroker.exe", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\RuntimeBroker.exe", lpFilePart=0x0) returned 0x25
	[0166.093] CoTaskMemAlloc (cb=0x4) returned 0x782fd0
	[0166.093] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fd0, puReturned=0x2892750 | out: apObjects=0x782fd0*=0x7909a8, puReturned=0x2892750*=0x1) returned 0x0
	[0166.107] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7909a8) returned 0x0
	[0166.107] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.107] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.107] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.108] IUnknown:AddRef (This=0x7909a8) returned 0x3
	[0166.108] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.108] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.108] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7909ac) returned 0x0
	[0166.108] IMarshal:GetUnmarshalClass (in: This=0x7909ac, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.108] IUnknown:Release (This=0x7909ac) returned 0x3
	[0166.108] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.108] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.108] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.108] IUnknown:Release (This=0x7909a8) returned 0x2
	[0166.108] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.108] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.108] IUnknown:QueryInterface (in: This=0x7909a8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7909a8) returned 0x0
	[0166.108] IUnknown:AddRef (This=0x7909a8) returned 0x4
	[0166.108] IUnknown:Release (This=0x7909a8) returned 0x3
	[0166.108] IUnknown:Release (This=0x7909a8) returned 0x2
	[0166.109] CoTaskMemFree (pv=0x782fd0) 
	[0166.109] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.109] IUnknown:AddRef (This=0x7909a8) returned 0x3
	[0166.109] IWbemClassObject:Get (in: This=0x7909a8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.109] IWbemClassObject:Get (in: This=0x7909a8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2560\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.109] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2560\"") returned 0x5e
	[0166.109] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2560\"") returned 0x5e
	[0166.109] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x64c
	[0166.109] SetEvent (hEvent=0x2bc) returned 1
	[0166.109] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x64c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.113] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.113] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.113] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd80, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cd80) returned 0x0
	[0166.113] WbemDefPath:IUnknown:AddRef (This=0x78cd80) returned 0x3
	[0166.113] WbemDefPath:IUnknown:Release (This=0x78cd80) returned 0x2
	[0166.113] WbemDefPath:IWbemPath:SetText (This=0x78cd80, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2560\"") returned 0x0
	[0166.113] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.113] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.113] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.113] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.114] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.114] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.114] IWbemClassObject:Get (in: This=0x7909a8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b4ad0*=0, plFlavor=0x28b4ad4*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe", varVal2=0x0), pType=0x28b4ad0*=8, plFlavor=0x28b4ad4*=0) returned 0x0
	[0166.114] SysStringByteLen (bstr="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe") returned 0x9e
	[0166.114] SysStringByteLen (bstr="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe") returned 0x9e
	[0166.114] IWbemClassObject:Get (in: This=0x7909a8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b4ad0*=8, plFlavor=0x28b4ad4*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe", varVal2=0x0), pType=0x28b4ad0*=8, plFlavor=0x28b4ad4*=0) returned 0x0
	[0166.114] SysStringByteLen (bstr="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe") returned 0x9e
	[0166.114] SysStringByteLen (bstr="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe") returned 0x9e
	[0166.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe", lpFilePart=0x0) returned 0x4f
	[0166.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.114] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\shellexperiencehost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a9abc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xb1a9abc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xb1cfd12, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1ffb58)) returned 1
	[0166.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.115] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x794
	[0166.117] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe", dwHandle=0x0, dwLen=0x794, lpData=0x28b4d4c | out: lpData=0x28b4d4c) returned 1
	[0166.118] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28b5110, puLen=0x19f470) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b4e04, puLen=0x19f3f0) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b4e58, puLen=0x19f3f0) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b4eb4, puLen=0x19f3f0) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b4f24, puLen=0x19f3f0) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b4f70, puLen=0x19f3f0) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b4ff4, puLen=0x19f3f0) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b5044, puLen=0x19f3f0) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b50b4, puLen=0x19f3f0) returned 1
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28b5110, puLen=0x19f3e4) returned 1
	[0166.119] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.119] VerQueryValueW (in: pBlock=0x28b4d4c, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28b4d74, puLen=0x19f3f4) returned 1
	[0166.120] CoTaskMemAlloc (cb=0x4) returned 0x783030
	[0166.120] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783030, puReturned=0x2892750 | out: apObjects=0x783030*=0x791800, puReturned=0x2892750*=0x1) returned 0x0
	[0166.139] IUnknown:QueryInterface (in: This=0x791800, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x791800) returned 0x0
	[0166.139] IUnknown:QueryInterface (in: This=0x791800, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.139] IUnknown:QueryInterface (in: This=0x791800, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.139] IUnknown:QueryInterface (in: This=0x791800, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.139] IUnknown:AddRef (This=0x791800) returned 0x3
	[0166.139] IUnknown:QueryInterface (in: This=0x791800, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.139] IUnknown:QueryInterface (in: This=0x791800, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.140] IUnknown:QueryInterface (in: This=0x791800, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x791804) returned 0x0
	[0166.140] IMarshal:GetUnmarshalClass (in: This=0x791804, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.140] IUnknown:Release (This=0x791804) returned 0x3
	[0166.140] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.140] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.140] IUnknown:QueryInterface (in: This=0x791800, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.140] IUnknown:Release (This=0x791800) returned 0x2
	[0166.140] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.140] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.140] IUnknown:QueryInterface (in: This=0x791800, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x791800) returned 0x0
	[0166.141] IUnknown:AddRef (This=0x791800) returned 0x4
	[0166.141] IUnknown:Release (This=0x791800) returned 0x3
	[0166.141] IUnknown:Release (This=0x791800) returned 0x2
	[0166.141] CoTaskMemFree (pv=0x783030) 
	[0166.141] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.141] IUnknown:AddRef (This=0x791800) returned 0x3
	[0166.141] IWbemClassObject:Get (in: This=0x791800, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.141] IWbemClassObject:Get (in: This=0x791800, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2596\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.141] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2596\"") returned 0x5e
	[0166.141] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2596\"") returned 0x5e
	[0166.141] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x650
	[0166.142] SetEvent (hEvent=0x2bc) returned 1
	[0166.142] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x650, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.146] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.146] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.146] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c7d0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c7d0) returned 0x0
	[0166.147] WbemDefPath:IUnknown:AddRef (This=0x78c7d0) returned 0x3
	[0166.147] WbemDefPath:IUnknown:Release (This=0x78c7d0) returned 0x2
	[0166.147] WbemDefPath:IWbemPath:SetText (This=0x78c7d0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2596\"") returned 0x0
	[0166.147] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.147] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.147] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.147] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.147] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.147] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.147] IWbemClassObject:Get (in: This=0x791800, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b69f0*=0, plFlavor=0x28b69f4*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", varVal2=0x0), pType=0x28b69f0*=8, plFlavor=0x28b69f4*=0) returned 0x0
	[0166.148] SysStringByteLen (bstr="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe") returned 0xbc
	[0166.148] SysStringByteLen (bstr="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe") returned 0xbc
	[0166.148] IWbemClassObject:Get (in: This=0x791800, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b69f0*=8, plFlavor=0x28b69f4*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", varVal2=0x0), pType=0x28b69f0*=8, plFlavor=0x28b69f4*=0) returned 0x0
	[0166.148] SysStringByteLen (bstr="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe") returned 0xbc
	[0166.148] SysStringByteLen (bstr="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe") returned 0xbc
	[0166.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", lpFilePart=0x0) returned 0x5e
	[0166.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\skypehost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd25da6a, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xbd25da6a, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0xbd283ce8, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xac00)) returned 1
	[0166.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.149] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x644
	[0166.150] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\SkypeHost.exe", dwHandle=0x0, dwLen=0x644, lpData=0x28b6ccc | out: lpData=0x28b6ccc) returned 1
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28b6fe8, puLen=0x19f470) returned 1
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28b6fe8, puLen=0x19f3e4) returned 1
	[0166.151] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.151] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28b6cf4, puLen=0x19f3f4) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b6d84, puLen=0x19f3f0) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b6dd8, puLen=0x19f3f0) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b6e18, puLen=0x19f3f0) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b6e50, puLen=0x19f3f0) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b6e88, puLen=0x19f3f0) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b6f0c, puLen=0x19f3f0) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b6f48, puLen=0x19f3f0) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b6f90, puLen=0x19f3f0) returned 1
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\\\StringFileInfo\\\\040904E4\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28b6fe8, puLen=0x19f3e4) returned 1
	[0166.152] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.152] VerQueryValueW (in: pBlock=0x28b6ccc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28b6cf4, puLen=0x19f3f4) returned 1
	[0166.152] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0166.152] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x790b40, puReturned=0x2892750*=0x1) returned 0x0
	[0166.198] IUnknown:QueryInterface (in: This=0x790b40, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x790b40) returned 0x0
	[0166.198] IUnknown:QueryInterface (in: This=0x790b40, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.198] IUnknown:QueryInterface (in: This=0x790b40, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.198] IUnknown:QueryInterface (in: This=0x790b40, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.198] IUnknown:AddRef (This=0x790b40) returned 0x3
	[0166.199] IUnknown:QueryInterface (in: This=0x790b40, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.199] IUnknown:QueryInterface (in: This=0x790b40, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.199] IUnknown:QueryInterface (in: This=0x790b40, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x790b44) returned 0x0
	[0166.199] IMarshal:GetUnmarshalClass (in: This=0x790b44, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.199] IUnknown:Release (This=0x790b44) returned 0x3
	[0166.199] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.199] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.199] IUnknown:QueryInterface (in: This=0x790b40, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.199] IUnknown:Release (This=0x790b40) returned 0x2
	[0166.200] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.200] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.200] IUnknown:QueryInterface (in: This=0x790b40, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x790b40) returned 0x0
	[0166.200] IUnknown:AddRef (This=0x790b40) returned 0x4
	[0166.200] IUnknown:Release (This=0x790b40) returned 0x3
	[0166.200] IUnknown:Release (This=0x790b40) returned 0x2
	[0166.200] CoTaskMemFree (pv=0x783120) 
	[0166.200] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.200] IUnknown:AddRef (This=0x790b40) returned 0x3
	[0166.201] IWbemClassObject:Get (in: This=0x790b40, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.201] IWbemClassObject:Get (in: This=0x790b40, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2728\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.201] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2728\"") returned 0x5e
	[0166.201] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2728\"") returned 0x5e
	[0166.201] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x654
	[0166.201] SetEvent (hEvent=0x2bc) returned 1
	[0166.201] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x654, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.227] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.227] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x78bff0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78bff0) returned 0x0
	[0166.227] WbemDefPath:IUnknown:AddRef (This=0x78bff0) returned 0x3
	[0166.227] WbemDefPath:IUnknown:Release (This=0x78bff0) returned 0x2
	[0166.227] WbemDefPath:IWbemPath:SetText (This=0x78bff0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2728\"") returned 0x0
	[0166.228] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.228] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.228] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.228] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.228] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.228] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.228] IWbemClassObject:Get (in: This=0x790b40, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b9240*=0, plFlavor=0x28b9244*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe", varVal2=0x0), pType=0x28b9240*=8, plFlavor=0x28b9244*=0) returned 0x0
	[0166.228] SysStringByteLen (bstr="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe") returned 0x94
	[0166.228] SysStringByteLen (bstr="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe") returned 0x94
	[0166.228] IWbemClassObject:Get (in: This=0x790b40, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28b9240*=8, plFlavor=0x28b9244*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe", varVal2=0x0), pType=0x28b9240*=8, plFlavor=0x28b9244*=0) returned 0x0
	[0166.228] SysStringByteLen (bstr="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe") returned 0x94
	[0166.228] SysStringByteLen (bstr="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe") returned 0x94
	[0166.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe", lpFilePart=0x0) returned 0x4a
	[0166.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.229] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\searchui.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38cdc461, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x6062625f, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x608887fa, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x8efd58)) returned 1
	[0166.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.231] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x74c
	[0166.233] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe", dwHandle=0x0, dwLen=0x74c, lpData=0x28b94a4 | out: lpData=0x28b94a4) returned 1
	[0166.234] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28b9844, puLen=0x19f470) returned 1
	[0166.234] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b955c, puLen=0x19f3f0) returned 1
	[0166.234] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b95b0, puLen=0x19f3f0) returned 1
	[0166.234] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b9610, puLen=0x19f3f0) returned 1
	[0166.234] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b9680, puLen=0x19f3f0) returned 1
	[0166.234] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b96b8, puLen=0x19f3f0) returned 1
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b973c, puLen=0x19f3f0) returned 1
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b9778, puLen=0x19f3f0) returned 1
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28b97e8, puLen=0x19f3f0) returned 1
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28b9844, puLen=0x19f3e4) returned 1
	[0166.235] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.235] VerQueryValueW (in: pBlock=0x28b94a4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28b94cc, puLen=0x19f3f4) returned 1
	[0166.235] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0166.235] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x790cd8, puReturned=0x2892750*=0x1) returned 0x0
	[0166.239] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x790cd8) returned 0x0
	[0166.240] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.240] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.240] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.240] IUnknown:AddRef (This=0x790cd8) returned 0x3
	[0166.240] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.240] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.240] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x790cdc) returned 0x0
	[0166.241] IMarshal:GetUnmarshalClass (in: This=0x790cdc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.241] IUnknown:Release (This=0x790cdc) returned 0x3
	[0166.241] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.241] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.241] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.241] IUnknown:Release (This=0x790cd8) returned 0x2
	[0166.241] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.241] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.241] IUnknown:QueryInterface (in: This=0x790cd8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x790cd8) returned 0x0
	[0166.241] IUnknown:AddRef (This=0x790cd8) returned 0x4
	[0166.241] IUnknown:Release (This=0x790cd8) returned 0x3
	[0166.241] IUnknown:Release (This=0x790cd8) returned 0x2
	[0166.241] CoTaskMemFree (pv=0x783120) 
	[0166.241] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.241] IUnknown:AddRef (This=0x790cd8) returned 0x3
	[0166.241] IWbemClassObject:Get (in: This=0x790cd8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.242] IWbemClassObject:Get (in: This=0x790cd8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"756\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.242] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"756\"") returned 0x5c
	[0166.242] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"756\"") returned 0x5c
	[0166.242] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x658
	[0166.242] SetEvent (hEvent=0x2bc) returned 1
	[0166.242] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x658, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.247] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.247] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.247] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cb50, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cb50) returned 0x0
	[0166.247] WbemDefPath:IUnknown:AddRef (This=0x78cb50) returned 0x3
	[0166.247] WbemDefPath:IUnknown:Release (This=0x78cb50) returned 0x2
	[0166.247] WbemDefPath:IWbemPath:SetText (This=0x78cb50, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"756\"") returned 0x0
	[0166.247] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.247] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.248] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.248] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.248] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.248] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.248] IWbemClassObject:Get (in: This=0x790cd8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bb0dc*=0, plFlavor=0x28bb0e0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\wbem\\wmiprvse.exe", varVal2=0x0), pType=0x28bb0dc*=8, plFlavor=0x28bb0e0*=0) returned 0x0
	[0166.248] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\wmiprvse.exe") returned 0x4a
	[0166.248] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\wmiprvse.exe") returned 0x4a
	[0166.248] IWbemClassObject:Get (in: This=0x790cd8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bb0dc*=8, plFlavor=0x28bb0e0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\wbem\\wmiprvse.exe", varVal2=0x0), pType=0x28bb0dc*=8, plFlavor=0x28bb0e0*=0) returned 0x0
	[0166.248] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\wmiprvse.exe") returned 0x4a
	[0166.248] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\wmiprvse.exe") returned 0x4a
	[0166.248] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\wbem\\wmiprvse.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\wbem\\wmiprvse.exe", lpFilePart=0x0) returned 0x25
	[0166.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.249] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\wbem\\wmiprvse.exe" (normalized: "c:\\windows\\syswow64\\wbem\\wmiprvse.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282e0245, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x282e0245, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x282e0245, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x66000)) returned 1
	[0166.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.255] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\wbem\\wmiprvse.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x724
	[0166.377] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\wbem\\wmiprvse.exe", dwHandle=0x0, dwLen=0x724, lpData=0x28bb25c | out: lpData=0x28bb25c) returned 1
	[0166.378] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28bb5e8, puLen=0x19f470) returned 1
	[0166.378] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bb314, puLen=0x19f3f0) returned 1
	[0166.378] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bb368, puLen=0x19f3f0) returned 1
	[0166.378] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bb3ac, puLen=0x19f3f0) returned 1
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bb41c, puLen=0x19f3f0) returned 1
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bb45c, puLen=0x19f3f0) returned 1
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bb4e0, puLen=0x19f3f0) returned 1
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bb51c, puLen=0x19f3f0) returned 1
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bb58c, puLen=0x19f3f0) returned 1
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28bb5e8, puLen=0x19f3e4) returned 1
	[0166.379] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.379] VerQueryValueW (in: pBlock=0x28bb25c, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28bb284, puLen=0x19f3f4) returned 1
	[0166.379] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0166.380] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x790e70, puReturned=0x2892750*=0x1) returned 0x0
	[0166.381] IUnknown:QueryInterface (in: This=0x790e70, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x790e70) returned 0x0
	[0166.381] IUnknown:QueryInterface (in: This=0x790e70, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.381] IUnknown:QueryInterface (in: This=0x790e70, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.381] IUnknown:QueryInterface (in: This=0x790e70, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.382] IUnknown:AddRef (This=0x790e70) returned 0x3
	[0166.382] IUnknown:QueryInterface (in: This=0x790e70, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.382] IUnknown:QueryInterface (in: This=0x790e70, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.382] IUnknown:QueryInterface (in: This=0x790e70, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x790e74) returned 0x0
	[0166.382] IMarshal:GetUnmarshalClass (in: This=0x790e74, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.382] IUnknown:Release (This=0x790e74) returned 0x3
	[0166.382] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.382] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.382] IUnknown:QueryInterface (in: This=0x790e70, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.382] IUnknown:Release (This=0x790e70) returned 0x2
	[0166.382] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.383] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.383] IUnknown:QueryInterface (in: This=0x790e70, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x790e70) returned 0x0
	[0166.383] IUnknown:AddRef (This=0x790e70) returned 0x4
	[0166.383] IUnknown:Release (This=0x790e70) returned 0x3
	[0166.383] IUnknown:Release (This=0x790e70) returned 0x2
	[0166.383] CoTaskMemFree (pv=0x783120) 
	[0166.383] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.383] IUnknown:AddRef (This=0x790e70) returned 0x3
	[0166.383] IWbemClassObject:Get (in: This=0x790e70, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.383] IWbemClassObject:Get (in: This=0x790e70, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3128\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.383] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3128\"") returned 0x5e
	[0166.383] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3128\"") returned 0x5e
	[0166.383] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x65c
	[0166.384] SetEvent (hEvent=0x2bc) returned 1
	[0166.384] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x65c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.389] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.389] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c8b0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c8b0) returned 0x0
	[0166.389] WbemDefPath:IUnknown:AddRef (This=0x78c8b0) returned 0x3
	[0166.389] WbemDefPath:IUnknown:Release (This=0x78c8b0) returned 0x2
	[0166.389] WbemDefPath:IWbemPath:SetText (This=0x78c8b0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3128\"") returned 0x0
	[0166.389] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.389] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.389] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.389] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.389] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.389] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.390] IWbemClassObject:Get (in: This=0x790e70, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bce58*=0, plFlavor=0x28bce5c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\svchost.exe", varVal2=0x0), pType=0x28bce58*=8, plFlavor=0x28bce5c*=0) returned 0x0
	[0166.390] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe") returned 0x3e
	[0166.390] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe") returned 0x3e
	[0166.390] IWbemClassObject:Get (in: This=0x790e70, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bce58*=8, plFlavor=0x28bce5c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\System32\\svchost.exe", varVal2=0x0), pType=0x28bce58*=8, plFlavor=0x28bce5c*=0) returned 0x0
	[0166.390] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe") returned 0x3e
	[0166.390] SysStringByteLen (bstr="C:\\Windows\\System32\\svchost.exe") returned 0x3e
	[0166.390] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\svchost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\svchost.exe", lpFilePart=0x0) returned 0x1f
	[0166.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.390] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\syswow64\\svchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9188)) returned 1
	[0166.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.391] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\System32\\svchost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x764
	[0166.392] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\System32\\svchost.exe", dwHandle=0x0, dwLen=0x764, lpData=0x28bcfb4 | out: lpData=0x28bcfb4) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28bd360, puLen=0x19f470) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bd06c, puLen=0x19f3f0) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bd0c0, puLen=0x19f3f0) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bd124, puLen=0x19f3f0) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bd194, puLen=0x19f3f0) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bd1d0, puLen=0x19f3f0) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bd254, puLen=0x19f3f0) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bd294, puLen=0x19f3f0) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28bd304, puLen=0x19f3f0) returned 1
	[0166.393] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.394] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.394] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.394] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.394] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28bd360, puLen=0x19f3e4) returned 1
	[0166.394] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.394] VerQueryValueW (in: pBlock=0x28bcfb4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28bcfdc, puLen=0x19f3f4) returned 1
	[0166.394] CoTaskMemAlloc (cb=0x4) returned 0x783000
	[0166.394] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783000, puReturned=0x2892750 | out: apObjects=0x783000*=0x7911a0, puReturned=0x2892750*=0x1) returned 0x0
	[0166.397] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7911a0) returned 0x0
	[0166.397] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.397] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.397] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.397] IUnknown:AddRef (This=0x7911a0) returned 0x3
	[0166.397] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.398] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.398] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7911a4) returned 0x0
	[0166.398] IMarshal:GetUnmarshalClass (in: This=0x7911a4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.398] IUnknown:Release (This=0x7911a4) returned 0x3
	[0166.398] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.398] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.398] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.398] IUnknown:Release (This=0x7911a0) returned 0x2
	[0166.398] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.398] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.399] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7911a0) returned 0x0
	[0166.399] IUnknown:AddRef (This=0x7911a0) returned 0x4
	[0166.399] IUnknown:Release (This=0x7911a0) returned 0x3
	[0166.399] IUnknown:Release (This=0x7911a0) returned 0x2
	[0166.399] CoTaskMemFree (pv=0x783000) 
	[0166.399] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.399] IUnknown:AddRef (This=0x7911a0) returned 0x3
	[0166.399] IWbemClassObject:Get (in: This=0x7911a0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.399] IWbemClassObject:Get (in: This=0x7911a0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3656\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.399] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3656\"") returned 0x5e
	[0166.399] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3656\"") returned 0x5e
	[0166.399] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x660
	[0166.399] SetEvent (hEvent=0x2bc) returned 1
	[0166.400] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x660, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.403] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.403] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c840, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c840) returned 0x0
	[0166.403] WbemDefPath:IUnknown:AddRef (This=0x78c840) returned 0x3
	[0166.403] WbemDefPath:IUnknown:Release (This=0x78c840) returned 0x2
	[0166.403] WbemDefPath:IWbemPath:SetText (This=0x78c840, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3656\"") returned 0x0
	[0166.403] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.403] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.403] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.403] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.403] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.403] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.403] IWbemClassObject:Get (in: This=0x7911a0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bec10*=0, plFlavor=0x28bec14*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bec10*=8, plFlavor=0x28bec14*=32) returned 0x0
	[0166.404] IWbemClassObject:Get (in: This=0x7911a0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bec10*=8, plFlavor=0x28bec14*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bec10*=8, plFlavor=0x28bec14*=32) returned 0x0
	[0166.404] CoTaskMemAlloc (cb=0x4) returned 0x783160
	[0166.404] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783160, puReturned=0x2892750 | out: apObjects=0x783160*=0x791338, puReturned=0x2892750*=0x1) returned 0x0
	[0166.405] IUnknown:QueryInterface (in: This=0x791338, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x791338) returned 0x0
	[0166.405] IUnknown:QueryInterface (in: This=0x791338, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.405] IUnknown:QueryInterface (in: This=0x791338, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.405] IUnknown:QueryInterface (in: This=0x791338, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.406] IUnknown:AddRef (This=0x791338) returned 0x3
	[0166.406] IUnknown:QueryInterface (in: This=0x791338, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.406] IUnknown:QueryInterface (in: This=0x791338, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.406] IUnknown:QueryInterface (in: This=0x791338, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79133c) returned 0x0
	[0166.406] IMarshal:GetUnmarshalClass (in: This=0x79133c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.406] IUnknown:Release (This=0x79133c) returned 0x3
	[0166.406] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.406] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.406] IUnknown:QueryInterface (in: This=0x791338, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.406] IUnknown:Release (This=0x791338) returned 0x2
	[0166.406] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.406] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.407] IUnknown:QueryInterface (in: This=0x791338, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x791338) returned 0x0
	[0166.407] IUnknown:AddRef (This=0x791338) returned 0x4
	[0166.407] IUnknown:Release (This=0x791338) returned 0x3
	[0166.407] IUnknown:Release (This=0x791338) returned 0x2
	[0166.407] CoTaskMemFree (pv=0x783160) 
	[0166.407] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.407] IUnknown:AddRef (This=0x791338) returned 0x3
	[0166.407] IWbemClassObject:Get (in: This=0x791338, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.407] IWbemClassObject:Get (in: This=0x791338, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3684\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.407] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3684\"") returned 0x5e
	[0166.407] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3684\"") returned 0x5e
	[0166.407] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x664
	[0166.407] SetEvent (hEvent=0x2bc) returned 1
	[0166.408] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x664, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.411] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.411] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.411] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c060, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c060) returned 0x0
	[0166.411] WbemDefPath:IUnknown:AddRef (This=0x78c060) returned 0x3
	[0166.411] WbemDefPath:IUnknown:Release (This=0x78c060) returned 0x2
	[0166.411] WbemDefPath:IWbemPath:SetText (This=0x78c060, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3684\"") returned 0x0
	[0166.411] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.411] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.411] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.411] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.411] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.411] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.412] IWbemClassObject:Get (in: This=0x791338, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bf444*=0, plFlavor=0x28bf448*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE", varVal2=0x0), pType=0x28bf444*=8, plFlavor=0x28bf448*=0) returned 0x0
	[0166.412] SysStringByteLen (bstr="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE") returned 0x50
	[0166.412] SysStringByteLen (bstr="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE") returned 0x50
	[0166.412] IWbemClassObject:Get (in: This=0x791338, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28bf444*=8, plFlavor=0x28bf448*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE", varVal2=0x0), pType=0x28bf444*=8, plFlavor=0x28bf448*=0) returned 0x0
	[0166.412] SysStringByteLen (bstr="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE") returned 0x50
	[0166.412] SysStringByteLen (bstr="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE") returned 0x50
	[0166.412] GetFullPathNameW (in: lpFileName="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE", lpFilePart=0x0) returned 0x28
	[0166.466] GetFullPathNameW (in: lpFileName="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE", nBufferLength=0x105, lpBuffer=0x19ef58, lpFilePart=0x0 | out: lpBuffer="\\\\?\\C:\\Windows\\system32\\wbem\\WMIADAP.EXE", lpFilePart=0x0) returned 0x28
	[0166.515] CoTaskMemAlloc (cb=0x4) returned 0x783000
	[0166.515] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783000, puReturned=0x2892750 | out: apObjects=0x783000*=0x7914d0, puReturned=0x2892750*=0x1) returned 0x0
	[0166.516] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7914d0) returned 0x0
	[0166.517] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.517] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.517] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.517] IUnknown:AddRef (This=0x7914d0) returned 0x3
	[0166.517] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.517] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.517] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7914d4) returned 0x0
	[0166.517] IMarshal:GetUnmarshalClass (in: This=0x7914d4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.517] IUnknown:Release (This=0x7914d4) returned 0x3
	[0166.518] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.518] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.518] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.518] IUnknown:Release (This=0x7914d0) returned 0x2
	[0166.518] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.518] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.518] IUnknown:QueryInterface (in: This=0x7914d0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7914d0) returned 0x0
	[0166.518] IUnknown:AddRef (This=0x7914d0) returned 0x4
	[0166.518] IUnknown:Release (This=0x7914d0) returned 0x3
	[0166.518] IUnknown:Release (This=0x7914d0) returned 0x2
	[0166.518] CoTaskMemFree (pv=0x783000) 
	[0166.518] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.518] IUnknown:AddRef (This=0x7914d0) returned 0x3
	[0166.519] IWbemClassObject:Get (in: This=0x7914d0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.519] IWbemClassObject:Get (in: This=0x7914d0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2776\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.519] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2776\"") returned 0x5e
	[0166.519] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2776\"") returned 0x5e
	[0166.519] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x668
	[0166.519] SetEvent (hEvent=0x2bc) returned 1
	[0166.519] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x668, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.523] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.523] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.523] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c1b0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c1b0) returned 0x0
	[0166.523] WbemDefPath:IUnknown:AddRef (This=0x78c1b0) returned 0x3
	[0166.523] WbemDefPath:IUnknown:Release (This=0x78c1b0) returned 0x2
	[0166.523] WbemDefPath:IWbemPath:SetText (This=0x78c1b0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2776\"") returned 0x0
	[0166.523] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.523] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.523] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.523] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.523] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.523] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.523] IWbemClassObject:Get (in: This=0x7914d0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28c2d78*=0, plFlavor=0x28c2d7c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\wbem\\wmiprvse.exe", varVal2=0x0), pType=0x28c2d78*=8, plFlavor=0x28c2d7c*=0) returned 0x0
	[0166.523] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\wmiprvse.exe") returned 0x4a
	[0166.523] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\wmiprvse.exe") returned 0x4a
	[0166.524] IWbemClassObject:Get (in: This=0x7914d0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28c2d78*=8, plFlavor=0x28c2d7c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\wbem\\wmiprvse.exe", varVal2=0x0), pType=0x28c2d78*=8, plFlavor=0x28c2d7c*=0) returned 0x0
	[0166.524] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\wmiprvse.exe") returned 0x4a
	[0166.524] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\wmiprvse.exe") returned 0x4a
	[0166.524] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\wbem\\wmiprvse.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\wbem\\wmiprvse.exe", lpFilePart=0x0) returned 0x25
	[0166.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\wbem\\wmiprvse.exe" (normalized: "c:\\windows\\syswow64\\wbem\\wmiprvse.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282e0245, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x282e0245, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x282e0245, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x66000)) returned 1
	[0166.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.524] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\wbem\\wmiprvse.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x724
	[0166.525] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\wbem\\wmiprvse.exe", dwHandle=0x0, dwLen=0x724, lpData=0x28c2ef8 | out: lpData=0x28c2ef8) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28c3284, puLen=0x19f470) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c2fb0, puLen=0x19f3f0) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c3004, puLen=0x19f3f0) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c3048, puLen=0x19f3f0) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c30b8, puLen=0x19f3f0) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c30f8, puLen=0x19f3f0) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c317c, puLen=0x19f3f0) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c31b8, puLen=0x19f3f0) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c3228, puLen=0x19f3f0) returned 1
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.532] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28c3284, puLen=0x19f3e4) returned 1
	[0166.533] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.533] VerQueryValueW (in: pBlock=0x28c2ef8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28c2f20, puLen=0x19f3f4) returned 1
	[0166.533] CoTaskMemAlloc (cb=0x4) returned 0x783070
	[0166.533] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783070, puReturned=0x2892750 | out: apObjects=0x783070*=0x791998, puReturned=0x2892750*=0x1) returned 0x0
	[0166.534] IUnknown:QueryInterface (in: This=0x791998, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x791998) returned 0x0
	[0166.535] IUnknown:QueryInterface (in: This=0x791998, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.535] IUnknown:QueryInterface (in: This=0x791998, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.535] IUnknown:QueryInterface (in: This=0x791998, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.535] IUnknown:AddRef (This=0x791998) returned 0x3
	[0166.535] IUnknown:QueryInterface (in: This=0x791998, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.535] IUnknown:QueryInterface (in: This=0x791998, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.535] IUnknown:QueryInterface (in: This=0x791998, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79199c) returned 0x0
	[0166.536] IMarshal:GetUnmarshalClass (in: This=0x79199c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.536] IUnknown:Release (This=0x79199c) returned 0x3
	[0166.536] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.536] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.536] IUnknown:QueryInterface (in: This=0x791998, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.536] IUnknown:Release (This=0x791998) returned 0x2
	[0166.536] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.536] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.536] IUnknown:QueryInterface (in: This=0x791998, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x791998) returned 0x0
	[0166.536] IUnknown:AddRef (This=0x791998) returned 0x4
	[0166.536] IUnknown:Release (This=0x791998) returned 0x3
	[0166.536] IUnknown:Release (This=0x791998) returned 0x2
	[0166.536] CoTaskMemFree (pv=0x783070) 
	[0166.537] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.537] IUnknown:AddRef (This=0x791998) returned 0x3
	[0166.537] IWbemClassObject:Get (in: This=0x791998, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.537] IWbemClassObject:Get (in: This=0x791998, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2116\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.537] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2116\"") returned 0x5e
	[0166.537] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2116\"") returned 0x5e
	[0166.537] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x66c
	[0166.537] SetEvent (hEvent=0x2bc) returned 1
	[0166.538] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x66c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.573] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.573] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.573] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cbc0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cbc0) returned 0x0
	[0166.573] WbemDefPath:IUnknown:AddRef (This=0x78cbc0) returned 0x3
	[0166.573] WbemDefPath:IUnknown:Release (This=0x78cbc0) returned 0x2
	[0166.573] WbemDefPath:IWbemPath:SetText (This=0x78cbc0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2116\"") returned 0x0
	[0166.573] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.573] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.574] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.574] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.574] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.574] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.574] IWbemClassObject:Get (in: This=0x791998, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28c4af4*=0, plFlavor=0x28c4af8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\iexplore.exe", varVal2=0x0), pType=0x28c4af4*=8, plFlavor=0x28c4af8*=0) returned 0x0
	[0166.574] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\iexplore.exe") returned 0x5e
	[0166.574] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\iexplore.exe") returned 0x5e
	[0166.574] IWbemClassObject:Get (in: This=0x791998, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28c4af4*=8, plFlavor=0x28c4af8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\iexplore.exe", varVal2=0x0), pType=0x28c4af4*=8, plFlavor=0x28c4af8*=0) returned 0x0
	[0166.574] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\iexplore.exe") returned 0x5e
	[0166.574] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\iexplore.exe") returned 0x5e
	[0166.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpFilePart=0x0) returned 0x2f
	[0166.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33517c70, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33517c70, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33517c70, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc74c0)) returned 1
	[0166.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.575] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xba4
	[0166.794] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\iexplore.exe", dwHandle=0x0, dwLen=0xba4, lpData=0x28c4cb0 | out: lpData=0x28c4cb0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28c527c, puLen=0x19f470) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c4d68, puLen=0x19f3f0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c4dbc, puLen=0x19f3f0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c4e00, puLen=0x19f3f0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c4e70, puLen=0x19f3f0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c4ea8, puLen=0x19f3f0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c4f2c, puLen=0x19f3f0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c4f70, puLen=0x19f3f0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c4fb8, puLen=0x19f3f0) returned 1
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28c527c, puLen=0x19f3e4) returned 1
	[0166.798] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.798] VerQueryValueW (in: pBlock=0x28c4cb0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28c4cd8, puLen=0x19f3f4) returned 1
	[0166.798] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0166.798] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x791cc8, puReturned=0x2892750*=0x1) returned 0x0
	[0166.804] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x791cc8) returned 0x0
	[0166.804] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.804] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.804] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.804] IUnknown:AddRef (This=0x791cc8) returned 0x3
	[0166.804] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.804] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.804] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x791ccc) returned 0x0
	[0166.805] IMarshal:GetUnmarshalClass (in: This=0x791ccc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.805] IUnknown:Release (This=0x791ccc) returned 0x3
	[0166.805] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.805] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.805] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.805] IUnknown:Release (This=0x791cc8) returned 0x2
	[0166.805] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.805] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.805] IUnknown:QueryInterface (in: This=0x791cc8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x791cc8) returned 0x0
	[0166.805] IUnknown:AddRef (This=0x791cc8) returned 0x4
	[0166.805] IUnknown:Release (This=0x791cc8) returned 0x3
	[0166.805] IUnknown:Release (This=0x791cc8) returned 0x2
	[0166.805] CoTaskMemFree (pv=0x783120) 
	[0166.805] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.805] IUnknown:AddRef (This=0x791cc8) returned 0x3
	[0166.805] IWbemClassObject:Get (in: This=0x791cc8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.805] IWbemClassObject:Get (in: This=0x791cc8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3724\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.806] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3724\"") returned 0x5e
	[0166.806] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3724\"") returned 0x5e
	[0166.806] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x670
	[0166.806] SetEvent (hEvent=0x2bc) returned 1
	[0166.806] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x670, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.811] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.811] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.811] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c220, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c220) returned 0x0
	[0166.811] WbemDefPath:IUnknown:AddRef (This=0x78c220) returned 0x3
	[0166.811] WbemDefPath:IUnknown:Release (This=0x78c220) returned 0x2
	[0166.811] WbemDefPath:IWbemPath:SetText (This=0x78c220, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3724\"") returned 0x0
	[0166.811] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.811] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.811] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.811] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.811] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.811] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.811] IWbemClassObject:Get (in: This=0x791cc8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28c6d04*=0, plFlavor=0x28c6d08*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Defender\\return unit effort.exe", varVal2=0x0), pType=0x28c6d04*=8, plFlavor=0x28c6d08*=0) returned 0x0
	[0166.811] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\return unit effort.exe") returned 0x70
	[0166.811] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\return unit effort.exe") returned 0x70
	[0166.812] IWbemClassObject:Get (in: This=0x791cc8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28c6d04*=8, plFlavor=0x28c6d08*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Defender\\return unit effort.exe", varVal2=0x0), pType=0x28c6d04*=8, plFlavor=0x28c6d08*=0) returned 0x0
	[0166.812] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\return unit effort.exe") returned 0x70
	[0166.812] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\return unit effort.exe") returned 0x70
	[0166.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\return unit effort.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\return unit effort.exe", lpFilePart=0x0) returned 0x38
	[0166.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\return unit effort.exe" (normalized: "c:\\program files\\windows defender\\return unit effort.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce07f0, ftCreationTime.dwHighDateTime=0x1d7fce5, ftLastAccessTime.dwLowDateTime=0xfcaecab0, ftLastAccessTime.dwHighDateTime=0x1d82219, ftLastWriteTime.dwLowDateTime=0xfcaecab0, ftLastWriteTime.dwHighDateTime=0x1d82219, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.814] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Defender\\return unit effort.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.818] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Defender\\return unit effort.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28c6efc | out: lpData=0x28c6efc) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28c7444, puLen=0x19f470) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c6fb4, puLen=0x19f3f0) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c7060, puLen=0x19f3f0) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c7104, puLen=0x19f3f0) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c7144, puLen=0x19f3f0) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c71ec, puLen=0x19f3f0) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c7298, puLen=0x19f3f0) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c733c, puLen=0x19f3f0) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c73e4, puLen=0x19f3f0) returned 1
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28c7444, puLen=0x19f3e4) returned 1
	[0166.819] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.819] VerQueryValueW (in: pBlock=0x28c6efc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28c6f24, puLen=0x19f3f4) returned 1
	[0166.820] CoTaskMemAlloc (cb=0x4) returned 0x783080
	[0166.820] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783080, puReturned=0x2892750 | out: apObjects=0x783080*=0x79b0b8, puReturned=0x2892750*=0x1) returned 0x0
	[0166.823] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79b0b8) returned 0x0
	[0166.824] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.824] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.824] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.825] IUnknown:AddRef (This=0x79b0b8) returned 0x3
	[0166.825] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.825] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.825] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79b0bc) returned 0x0
	[0166.825] IMarshal:GetUnmarshalClass (in: This=0x79b0bc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.825] IUnknown:Release (This=0x79b0bc) returned 0x3
	[0166.825] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.825] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.825] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.825] IUnknown:Release (This=0x79b0b8) returned 0x2
	[0166.825] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.825] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.825] IUnknown:QueryInterface (in: This=0x79b0b8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79b0b8) returned 0x0
	[0166.825] IUnknown:AddRef (This=0x79b0b8) returned 0x4
	[0166.825] IUnknown:Release (This=0x79b0b8) returned 0x3
	[0166.825] IUnknown:Release (This=0x79b0b8) returned 0x2
	[0166.825] CoTaskMemFree (pv=0x783080) 
	[0166.825] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.825] IUnknown:AddRef (This=0x79b0b8) returned 0x3
	[0166.825] IWbemClassObject:Get (in: This=0x79b0b8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.826] IWbemClassObject:Get (in: This=0x79b0b8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3728\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.826] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3728\"") returned 0x5e
	[0166.826] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3728\"") returned 0x5e
	[0166.826] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x674
	[0166.826] SetEvent (hEvent=0x2bc) returned 1
	[0166.826] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x674, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.831] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.831] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.831] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c4c0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c4c0) returned 0x0
	[0166.831] WbemDefPath:IUnknown:AddRef (This=0x78c4c0) returned 0x3
	[0166.831] WbemDefPath:IUnknown:Release (This=0x78c4c0) returned 0x2
	[0166.831] WbemDefPath:IWbemPath:SetText (This=0x78c4c0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3728\"") returned 0x0
	[0166.831] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.831] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.831] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.831] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.831] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.831] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.831] IWbemClassObject:Get (in: This=0x79b0b8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28c8e28*=0, plFlavor=0x28c8e2c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe", varVal2=0x0), pType=0x28c8e28*=8, plFlavor=0x28c8e2c*=0) returned 0x0
	[0166.831] SysStringByteLen (bstr="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe") returned 0x6e
	[0166.831] SysStringByteLen (bstr="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe") returned 0x6e
	[0166.832] IWbemClassObject:Get (in: This=0x79b0b8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28c8e28*=8, plFlavor=0x28c8e2c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe", varVal2=0x0), pType=0x28c8e28*=8, plFlavor=0x28c8e2c*=0) returned 0x0
	[0166.832] SysStringByteLen (bstr="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe") returned 0x6e
	[0166.832] SysStringByteLen (bstr="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe") returned 0x6e
	[0166.832] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe", lpFilePart=0x0) returned 0x37
	[0166.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe" (normalized: "c:\\program files\\windows journal\\peopleemployeegive.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8369ce90, ftCreationTime.dwHighDateTime=0x1d80705, ftLastAccessTime.dwLowDateTime=0xbb201580, ftLastAccessTime.dwHighDateTime=0x1d81d79, ftLastWriteTime.dwLowDateTime=0xbb201580, ftLastWriteTime.dwHighDateTime=0x1d81d79, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.832] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.833] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Journal\\peopleemployeegive.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28c9014 | out: lpData=0x28c9014) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28c955c, puLen=0x19f470) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c90cc, puLen=0x19f3f0) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c9178, puLen=0x19f3f0) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c921c, puLen=0x19f3f0) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c925c, puLen=0x19f3f0) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c9304, puLen=0x19f3f0) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c93b0, puLen=0x19f3f0) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c9454, puLen=0x19f3f0) returned 1
	[0166.835] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28c94fc, puLen=0x19f3f0) returned 1
	[0166.836] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.836] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.836] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.836] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.836] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28c955c, puLen=0x19f3e4) returned 1
	[0166.836] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.836] VerQueryValueW (in: pBlock=0x28c9014, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28c903c, puLen=0x19f3f4) returned 1
	[0166.836] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0166.836] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x79bd78, puReturned=0x2892750*=0x1) returned 0x0
	[0166.840] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79bd78) returned 0x0
	[0166.840] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.840] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.840] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.840] IUnknown:AddRef (This=0x79bd78) returned 0x3
	[0166.840] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.840] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.840] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79bd7c) returned 0x0
	[0166.841] IMarshal:GetUnmarshalClass (in: This=0x79bd7c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.841] IUnknown:Release (This=0x79bd7c) returned 0x3
	[0166.841] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.841] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.841] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.841] IUnknown:Release (This=0x79bd78) returned 0x2
	[0166.841] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.841] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.841] IUnknown:QueryInterface (in: This=0x79bd78, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79bd78) returned 0x0
	[0166.841] IUnknown:AddRef (This=0x79bd78) returned 0x4
	[0166.841] IUnknown:Release (This=0x79bd78) returned 0x3
	[0166.841] IUnknown:Release (This=0x79bd78) returned 0x2
	[0166.841] CoTaskMemFree (pv=0x783170) 
	[0166.841] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.841] IUnknown:AddRef (This=0x79bd78) returned 0x3
	[0166.841] IWbemClassObject:Get (in: This=0x79bd78, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.841] IWbemClassObject:Get (in: This=0x79bd78, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3892\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.842] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3892\"") returned 0x5e
	[0166.842] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3892\"") returned 0x5e
	[0166.842] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x678
	[0166.842] SetEvent (hEvent=0x2bc) returned 1
	[0166.842] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x678, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.847] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.847] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.847] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c530, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c530) returned 0x0
	[0166.847] WbemDefPath:IUnknown:AddRef (This=0x78c530) returned 0x3
	[0166.847] WbemDefPath:IUnknown:Release (This=0x78c530) returned 0x2
	[0166.847] WbemDefPath:IWbemPath:SetText (This=0x78c530, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3892\"") returned 0x0
	[0166.847] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.847] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.847] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.847] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.847] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.847] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.847] IWbemClassObject:Get (in: This=0x79bd78, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28caf38*=0, plFlavor=0x28caf3c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows NT\\for-nature-want.exe", varVal2=0x0), pType=0x28caf38*=8, plFlavor=0x28caf3c*=0) returned 0x0
	[0166.847] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\for-nature-want.exe") returned 0x5e
	[0166.847] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\for-nature-want.exe") returned 0x5e
	[0166.847] IWbemClassObject:Get (in: This=0x79bd78, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28caf38*=8, plFlavor=0x28caf3c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows NT\\for-nature-want.exe", varVal2=0x0), pType=0x28caf38*=8, plFlavor=0x28caf3c*=0) returned 0x0
	[0166.847] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\for-nature-want.exe") returned 0x5e
	[0166.847] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\for-nature-want.exe") returned 0x5e
	[0166.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\for-nature-want.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\for-nature-want.exe", lpFilePart=0x0) returned 0x2f
	[0166.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\for-nature-want.exe" (normalized: "c:\\program files\\windows nt\\for-nature-want.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee07e5b0, ftCreationTime.dwHighDateTime=0x1d81115, ftLastAccessTime.dwLowDateTime=0xef0bc630, ftLastAccessTime.dwHighDateTime=0x1d814fc, ftLastWriteTime.dwLowDateTime=0xef0bc630, ftLastWriteTime.dwHighDateTime=0x1d814fc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.848] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows NT\\for-nature-want.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.849] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows NT\\for-nature-want.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28cb0f4 | out: lpData=0x28cb0f4) returned 1
	[0166.850] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28cb63c, puLen=0x19f470) returned 1
	[0166.850] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cb1ac, puLen=0x19f3f0) returned 1
	[0166.850] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cb258, puLen=0x19f3f0) returned 1
	[0166.850] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cb2fc, puLen=0x19f3f0) returned 1
	[0166.850] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cb33c, puLen=0x19f3f0) returned 1
	[0166.850] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cb3e4, puLen=0x19f3f0) returned 1
	[0166.852] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cb490, puLen=0x19f3f0) returned 1
	[0166.852] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cb534, puLen=0x19f3f0) returned 1
	[0166.852] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cb5dc, puLen=0x19f3f0) returned 1
	[0166.852] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.852] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.852] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.852] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.852] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28cb63c, puLen=0x19f3e4) returned 1
	[0166.852] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.853] VerQueryValueW (in: pBlock=0x28cb0f4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28cb11c, puLen=0x19f3f4) returned 1
	[0166.853] CoTaskMemAlloc (cb=0x4) returned 0x783160
	[0166.853] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783160, puReturned=0x2892750 | out: apObjects=0x783160*=0x79bf10, puReturned=0x2892750*=0x1) returned 0x0
	[0166.856] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79bf10) returned 0x0
	[0166.856] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.856] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.856] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.856] IUnknown:AddRef (This=0x79bf10) returned 0x3
	[0166.857] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.857] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.857] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79bf14) returned 0x0
	[0166.857] IMarshal:GetUnmarshalClass (in: This=0x79bf14, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.857] IUnknown:Release (This=0x79bf14) returned 0x3
	[0166.857] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.857] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.857] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.857] IUnknown:Release (This=0x79bf10) returned 0x2
	[0166.857] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.857] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.857] IUnknown:QueryInterface (in: This=0x79bf10, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79bf10) returned 0x0
	[0166.857] IUnknown:AddRef (This=0x79bf10) returned 0x4
	[0166.857] IUnknown:Release (This=0x79bf10) returned 0x3
	[0166.857] IUnknown:Release (This=0x79bf10) returned 0x2
	[0166.857] CoTaskMemFree (pv=0x783160) 
	[0166.857] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.857] IUnknown:AddRef (This=0x79bf10) returned 0x3
	[0166.857] IWbemClassObject:Get (in: This=0x79bf10, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.858] IWbemClassObject:Get (in: This=0x79bf10, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.858] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x5c
	[0166.858] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x5c
	[0166.858] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x67c
	[0166.858] SetEvent (hEvent=0x2bc) returned 1
	[0166.858] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x67c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.862] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.862] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.862] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c5a0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c5a0) returned 0x0
	[0166.862] WbemDefPath:IUnknown:AddRef (This=0x78c5a0) returned 0x3
	[0166.862] WbemDefPath:IUnknown:Release (This=0x78c5a0) returned 0x2
	[0166.862] WbemDefPath:IWbemPath:SetText (This=0x78c5a0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"176\"") returned 0x0
	[0166.862] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.862] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.862] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.863] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.863] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.863] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.863] IWbemClassObject:Get (in: This=0x79bf10, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28cd03c*=0, plFlavor=0x28cd040*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Media Player\\issue-person.exe", varVal2=0x0), pType=0x28cd03c*=8, plFlavor=0x28cd040*=0) returned 0x0
	[0166.863] SysStringByteLen (bstr="C:\\Program Files\\Windows Media Player\\issue-person.exe") returned 0x6c
	[0166.863] SysStringByteLen (bstr="C:\\Program Files\\Windows Media Player\\issue-person.exe") returned 0x6c
	[0166.863] IWbemClassObject:Get (in: This=0x79bf10, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28cd03c*=8, plFlavor=0x28cd040*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Media Player\\issue-person.exe", varVal2=0x0), pType=0x28cd03c*=8, plFlavor=0x28cd040*=0) returned 0x0
	[0166.863] SysStringByteLen (bstr="C:\\Program Files\\Windows Media Player\\issue-person.exe") returned 0x6c
	[0166.863] SysStringByteLen (bstr="C:\\Program Files\\Windows Media Player\\issue-person.exe") returned 0x6c
	[0166.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\issue-person.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\issue-person.exe", lpFilePart=0x0) returned 0x36
	[0166.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\issue-person.exe" (normalized: "c:\\program files\\windows media player\\issue-person.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5b270, ftCreationTime.dwHighDateTime=0x1d7acf0, ftLastAccessTime.dwLowDateTime=0x11ed7e80, ftLastAccessTime.dwHighDateTime=0x1d800b4, ftLastWriteTime.dwLowDateTime=0x11ed7e80, ftLastWriteTime.dwHighDateTime=0x1d800b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.864] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Media Player\\issue-person.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.865] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Media Player\\issue-person.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28cd228 | out: lpData=0x28cd228) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28cd770, puLen=0x19f470) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cd2e0, puLen=0x19f3f0) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cd38c, puLen=0x19f3f0) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cd430, puLen=0x19f3f0) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cd470, puLen=0x19f3f0) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cd518, puLen=0x19f3f0) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cd5c4, puLen=0x19f3f0) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cd668, puLen=0x19f3f0) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cd710, puLen=0x19f3f0) returned 1
	[0166.868] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.869] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.869] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.869] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.869] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28cd770, puLen=0x19f3e4) returned 1
	[0166.869] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.869] VerQueryValueW (in: pBlock=0x28cd228, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28cd250, puLen=0x19f3f4) returned 1
	[0166.869] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0166.869] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x79c0a8, puReturned=0x2892750*=0x1) returned 0x0
	[0166.871] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79c0a8) returned 0x0
	[0166.871] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.871] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.871] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.872] IUnknown:AddRef (This=0x79c0a8) returned 0x3
	[0166.872] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.872] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.872] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79c0ac) returned 0x0
	[0166.872] IMarshal:GetUnmarshalClass (in: This=0x79c0ac, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.872] IUnknown:Release (This=0x79c0ac) returned 0x3
	[0166.872] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.872] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.872] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.872] IUnknown:Release (This=0x79c0a8) returned 0x2
	[0166.872] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.872] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.872] IUnknown:QueryInterface (in: This=0x79c0a8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79c0a8) returned 0x0
	[0166.872] IUnknown:AddRef (This=0x79c0a8) returned 0x4
	[0166.872] IUnknown:Release (This=0x79c0a8) returned 0x3
	[0166.872] IUnknown:Release (This=0x79c0a8) returned 0x2
	[0166.872] CoTaskMemFree (pv=0x783170) 
	[0166.873] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.873] IUnknown:AddRef (This=0x79c0a8) returned 0x3
	[0166.873] IWbemClassObject:Get (in: This=0x79c0a8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.873] IWbemClassObject:Get (in: This=0x79c0a8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1504\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.873] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1504\"") returned 0x5e
	[0166.873] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1504\"") returned 0x5e
	[0166.873] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x680
	[0166.873] SetEvent (hEvent=0x2bc) returned 1
	[0166.873] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x680, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.877] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.877] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.877] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c610, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78c610) returned 0x0
	[0166.877] WbemDefPath:IUnknown:AddRef (This=0x78c610) returned 0x3
	[0166.877] WbemDefPath:IUnknown:Release (This=0x78c610) returned 0x2
	[0166.878] WbemDefPath:IWbemPath:SetText (This=0x78c610, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1504\"") returned 0x0
	[0166.878] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.878] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.878] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.878] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.878] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.878] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.878] IWbemClassObject:Get (in: This=0x79c0a8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28cf14c*=0, plFlavor=0x28cf150*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Photo Viewer\\somebody.exe", varVal2=0x0), pType=0x28cf14c*=8, plFlavor=0x28cf150*=0) returned 0x0
	[0166.878] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\somebody.exe") returned 0x64
	[0166.878] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\somebody.exe") returned 0x64
	[0166.878] IWbemClassObject:Get (in: This=0x79c0a8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28cf14c*=8, plFlavor=0x28cf150*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Photo Viewer\\somebody.exe", varVal2=0x0), pType=0x28cf14c*=8, plFlavor=0x28cf150*=0) returned 0x0
	[0166.878] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\somebody.exe") returned 0x64
	[0166.878] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\somebody.exe") returned 0x64
	[0166.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\somebody.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\somebody.exe", lpFilePart=0x0) returned 0x32
	[0166.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.879] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\somebody.exe" (normalized: "c:\\program files\\windows photo viewer\\somebody.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc971220, ftCreationTime.dwHighDateTime=0x1d80851, ftLastAccessTime.dwLowDateTime=0xd1615900, ftLastAccessTime.dwHighDateTime=0x1d809b8, ftLastWriteTime.dwLowDateTime=0xd1615900, ftLastWriteTime.dwHighDateTime=0x1d809b8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.879] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Photo Viewer\\somebody.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.880] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Photo Viewer\\somebody.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28cf320 | out: lpData=0x28cf320) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28cf868, puLen=0x19f470) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cf3d8, puLen=0x19f3f0) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cf484, puLen=0x19f3f0) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cf528, puLen=0x19f3f0) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cf568, puLen=0x19f3f0) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cf610, puLen=0x19f3f0) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cf6bc, puLen=0x19f3f0) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cf760, puLen=0x19f3f0) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28cf808, puLen=0x19f3f0) returned 1
	[0166.882] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.883] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.883] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.883] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.883] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28cf868, puLen=0x19f3e4) returned 1
	[0166.883] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.883] VerQueryValueW (in: pBlock=0x28cf320, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28cf348, puLen=0x19f3f4) returned 1
	[0166.883] CoTaskMemAlloc (cb=0x4) returned 0x783060
	[0166.883] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783060, puReturned=0x2892750 | out: apObjects=0x783060*=0x79c8a0, puReturned=0x2892750*=0x1) returned 0x0
	[0166.887] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79c8a0) returned 0x0
	[0166.888] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.888] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.888] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.888] IUnknown:AddRef (This=0x79c8a0) returned 0x3
	[0166.888] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.888] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.888] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79c8a4) returned 0x0
	[0166.888] IMarshal:GetUnmarshalClass (in: This=0x79c8a4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.888] IUnknown:Release (This=0x79c8a4) returned 0x3
	[0166.888] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.888] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.888] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.888] IUnknown:Release (This=0x79c8a0) returned 0x2
	[0166.888] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.888] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.888] IUnknown:QueryInterface (in: This=0x79c8a0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79c8a0) returned 0x0
	[0166.888] IUnknown:AddRef (This=0x79c8a0) returned 0x4
	[0166.888] IUnknown:Release (This=0x79c8a0) returned 0x3
	[0166.889] IUnknown:Release (This=0x79c8a0) returned 0x2
	[0166.889] CoTaskMemFree (pv=0x783060) 
	[0166.889] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.889] IUnknown:AddRef (This=0x79c8a0) returned 0x3
	[0166.889] IWbemClassObject:Get (in: This=0x79c8a0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.889] IWbemClassObject:Get (in: This=0x79c8a0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3908\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.889] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3908\"") returned 0x5e
	[0166.889] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3908\"") returned 0x5e
	[0166.889] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x684
	[0166.889] SetEvent (hEvent=0x2bc) returned 1
	[0166.889] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x684, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.893] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.893] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.893] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cf40, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cf40) returned 0x0
	[0166.893] WbemDefPath:IUnknown:AddRef (This=0x78cf40) returned 0x3
	[0166.893] WbemDefPath:IUnknown:Release (This=0x78cf40) returned 0x2
	[0166.893] WbemDefPath:IWbemPath:SetText (This=0x78cf40, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3908\"") returned 0x0
	[0166.893] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.893] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.893] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.893] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.893] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.893] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.893] IWbemClassObject:Get (in: This=0x79c8a0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d123c*=0, plFlavor=0x28d1240*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\there.exe", varVal2=0x0), pType=0x28d123c*=8, plFlavor=0x28d1240*=0) returned 0x0
	[0166.893] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\there.exe") returned 0x64
	[0166.893] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\there.exe") returned 0x64
	[0166.893] IWbemClassObject:Get (in: This=0x79c8a0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d123c*=8, plFlavor=0x28d1240*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\there.exe", varVal2=0x0), pType=0x28d123c*=8, plFlavor=0x28d1240*=0) returned 0x0
	[0166.893] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\there.exe") returned 0x64
	[0166.893] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\there.exe") returned 0x64
	[0166.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\there.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\there.exe", lpFilePart=0x0) returned 0x32
	[0166.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\there.exe" (normalized: "c:\\program files (x86)\\internet explorer\\there.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a257520, ftCreationTime.dwHighDateTime=0x1d817ea, ftLastAccessTime.dwLowDateTime=0xfc2f70d0, ftLastAccessTime.dwHighDateTime=0x1d824f3, ftLastWriteTime.dwLowDateTime=0xfc2f70d0, ftLastWriteTime.dwHighDateTime=0x1d824f3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.894] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\there.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.895] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\there.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28d1410 | out: lpData=0x28d1410) returned 1
	[0166.895] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28d1958, puLen=0x19f470) returned 1
	[0166.895] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d14c8, puLen=0x19f3f0) returned 1
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d1574, puLen=0x19f3f0) returned 1
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d1618, puLen=0x19f3f0) returned 1
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d1658, puLen=0x19f3f0) returned 1
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d1700, puLen=0x19f3f0) returned 1
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d17ac, puLen=0x19f3f0) returned 1
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d1850, puLen=0x19f3f0) returned 1
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d18f8, puLen=0x19f3f0) returned 1
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.896] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.897] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.897] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28d1958, puLen=0x19f3e4) returned 1
	[0166.897] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.897] VerQueryValueW (in: pBlock=0x28d1410, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28d1438, puLen=0x19f3f4) returned 1
	[0166.897] CoTaskMemAlloc (cb=0x4) returned 0x783020
	[0166.897] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783020, puReturned=0x2892750 | out: apObjects=0x783020*=0x79c570, puReturned=0x2892750*=0x1) returned 0x0
	[0166.904] IUnknown:QueryInterface (in: This=0x79c570, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79c570) returned 0x0
	[0166.904] IUnknown:QueryInterface (in: This=0x79c570, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.904] IUnknown:QueryInterface (in: This=0x79c570, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.905] IUnknown:QueryInterface (in: This=0x79c570, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.905] IUnknown:AddRef (This=0x79c570) returned 0x3
	[0166.905] IUnknown:QueryInterface (in: This=0x79c570, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.905] IUnknown:QueryInterface (in: This=0x79c570, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.905] IUnknown:QueryInterface (in: This=0x79c570, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79c574) returned 0x0
	[0166.905] IMarshal:GetUnmarshalClass (in: This=0x79c574, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.905] IUnknown:Release (This=0x79c574) returned 0x3
	[0166.905] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.905] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.905] IUnknown:QueryInterface (in: This=0x79c570, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.905] IUnknown:Release (This=0x79c570) returned 0x2
	[0166.905] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.905] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.905] IUnknown:QueryInterface (in: This=0x79c570, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79c570) returned 0x0
	[0166.905] IUnknown:AddRef (This=0x79c570) returned 0x4
	[0166.905] IUnknown:Release (This=0x79c570) returned 0x3
	[0166.905] IUnknown:Release (This=0x79c570) returned 0x2
	[0166.906] CoTaskMemFree (pv=0x783020) 
	[0166.906] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.906] IUnknown:AddRef (This=0x79c570) returned 0x3
	[0166.906] IWbemClassObject:Get (in: This=0x79c570, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.906] IWbemClassObject:Get (in: This=0x79c570, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3996\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.906] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3996\"") returned 0x5e
	[0166.906] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3996\"") returned 0x5e
	[0166.906] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x688
	[0166.906] SetEvent (hEvent=0x2bc) returned 1
	[0166.906] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x688, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.909] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.910] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.910] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ced0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78ced0) returned 0x0
	[0166.910] WbemDefPath:IUnknown:AddRef (This=0x78ced0) returned 0x3
	[0166.910] WbemDefPath:IUnknown:Release (This=0x78ced0) returned 0x2
	[0166.910] WbemDefPath:IWbemPath:SetText (This=0x78ced0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3996\"") returned 0x0
	[0166.910] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.910] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.910] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.910] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.910] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.910] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.910] IWbemClassObject:Get (in: This=0x79c570, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d32d8*=0, plFlavor=0x28d32dc*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Defender\\between-green-boy.exe", varVal2=0x0), pType=0x28d32d8*=8, plFlavor=0x28d32dc*=0) returned 0x0
	[0166.910] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\between-green-boy.exe") returned 0x6e
	[0166.910] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\between-green-boy.exe") returned 0x6e
	[0166.911] IWbemClassObject:Get (in: This=0x79c570, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d32d8*=8, plFlavor=0x28d32dc*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Defender\\between-green-boy.exe", varVal2=0x0), pType=0x28d32d8*=8, plFlavor=0x28d32dc*=0) returned 0x0
	[0166.911] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\between-green-boy.exe") returned 0x6e
	[0166.911] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\between-green-boy.exe") returned 0x6e
	[0166.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\between-green-boy.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\between-green-boy.exe", lpFilePart=0x0) returned 0x37
	[0166.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\between-green-boy.exe" (normalized: "c:\\program files\\windows defender\\between-green-boy.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcd02fd0, ftCreationTime.dwHighDateTime=0x1d7cedf, ftLastAccessTime.dwLowDateTime=0xfbcd2bf0, ftLastAccessTime.dwHighDateTime=0x1d827b9, ftLastWriteTime.dwLowDateTime=0xfbcd2bf0, ftLastWriteTime.dwHighDateTime=0x1d827b9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.912] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Defender\\between-green-boy.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.913] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Defender\\between-green-boy.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28d34c4 | out: lpData=0x28d34c4) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28d3a0c, puLen=0x19f470) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d357c, puLen=0x19f3f0) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d3628, puLen=0x19f3f0) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d36cc, puLen=0x19f3f0) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d370c, puLen=0x19f3f0) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d37b4, puLen=0x19f3f0) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d3860, puLen=0x19f3f0) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d3904, puLen=0x19f3f0) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d39ac, puLen=0x19f3f0) returned 1
	[0166.914] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.915] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.915] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.915] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.915] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28d3a0c, puLen=0x19f3e4) returned 1
	[0166.915] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.915] VerQueryValueW (in: pBlock=0x28d34c4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28d34ec, puLen=0x19f3f4) returned 1
	[0166.915] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0166.915] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x79ad88, puReturned=0x2892750*=0x1) returned 0x0
	[0166.920] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79ad88) returned 0x0
	[0166.921] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.921] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.921] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.921] IUnknown:AddRef (This=0x79ad88) returned 0x3
	[0166.921] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.921] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.921] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79ad8c) returned 0x0
	[0166.922] IMarshal:GetUnmarshalClass (in: This=0x79ad8c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.922] IUnknown:Release (This=0x79ad8c) returned 0x3
	[0166.922] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.922] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.922] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.922] IUnknown:Release (This=0x79ad88) returned 0x2
	[0166.922] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.922] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.922] IUnknown:QueryInterface (in: This=0x79ad88, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79ad88) returned 0x0
	[0166.922] IUnknown:AddRef (This=0x79ad88) returned 0x4
	[0166.922] IUnknown:Release (This=0x79ad88) returned 0x3
	[0166.922] IUnknown:Release (This=0x79ad88) returned 0x2
	[0166.922] CoTaskMemFree (pv=0x783170) 
	[0166.922] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.922] IUnknown:AddRef (This=0x79ad88) returned 0x3
	[0166.922] IWbemClassObject:Get (in: This=0x79ad88, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.923] IWbemClassObject:Get (in: This=0x79ad88, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3964\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.923] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3964\"") returned 0x5e
	[0166.923] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3964\"") returned 0x5e
	[0166.923] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x68c
	[0166.923] SetEvent (hEvent=0x2bc) returned 1
	[0166.923] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x68c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.926] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.926] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.926] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ce60, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78ce60) returned 0x0
	[0166.926] WbemDefPath:IUnknown:AddRef (This=0x78ce60) returned 0x3
	[0166.926] WbemDefPath:IUnknown:Release (This=0x78ce60) returned 0x2
	[0166.926] WbemDefPath:IWbemPath:SetText (This=0x78ce60, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3964\"") returned 0x0
	[0166.926] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.926] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.926] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.926] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.926] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.926] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.926] IWbemClassObject:Get (in: This=0x79ad88, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d541c*=0, plFlavor=0x28d5420*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe", varVal2=0x0), pType=0x28d541c*=8, plFlavor=0x28d5420*=0) returned 0x0
	[0166.927] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe") returned 0x76
	[0166.927] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe") returned 0x76
	[0166.927] IWbemClassObject:Get (in: This=0x79ad88, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d541c*=8, plFlavor=0x28d5420*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe", varVal2=0x0), pType=0x28d541c*=8, plFlavor=0x28d5420*=0) returned 0x0
	[0166.927] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe") returned 0x76
	[0166.927] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe") returned 0x76
	[0166.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe", lpFilePart=0x0) returned 0x3b
	[0166.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.927] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe" (normalized: "c:\\program files (x86)\\windows portable devices\\surface.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af27620, ftCreationTime.dwHighDateTime=0x1d7cfa4, ftLastAccessTime.dwLowDateTime=0xdce934c0, ftLastAccessTime.dwHighDateTime=0x1d80a97, ftLastWriteTime.dwLowDateTime=0xdce934c0, ftLastWriteTime.dwHighDateTime=0x1d80a97, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.927] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.928] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Portable Devices\\surface.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28d5620 | out: lpData=0x28d5620) returned 1
	[0166.929] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28d5b68, puLen=0x19f470) returned 1
	[0166.929] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d56d8, puLen=0x19f3f0) returned 1
	[0166.929] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d5784, puLen=0x19f3f0) returned 1
	[0166.929] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d5828, puLen=0x19f3f0) returned 1
	[0166.929] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d5868, puLen=0x19f3f0) returned 1
	[0166.929] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d5910, puLen=0x19f3f0) returned 1
	[0166.929] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d59bc, puLen=0x19f3f0) returned 1
	[0166.930] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d5a60, puLen=0x19f3f0) returned 1
	[0166.930] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d5b08, puLen=0x19f3f0) returned 1
	[0166.930] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.930] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.930] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.930] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.930] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28d5b68, puLen=0x19f3e4) returned 1
	[0166.930] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.930] VerQueryValueW (in: pBlock=0x28d5620, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28d5648, puLen=0x19f3f4) returned 1
	[0166.939] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0166.939] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x79aa58, puReturned=0x2892750*=0x1) returned 0x0
	[0166.941] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79aa58) returned 0x0
	[0166.942] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.942] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.942] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.942] IUnknown:AddRef (This=0x79aa58) returned 0x3
	[0166.942] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.942] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.942] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79aa5c) returned 0x0
	[0166.942] IMarshal:GetUnmarshalClass (in: This=0x79aa5c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.942] IUnknown:Release (This=0x79aa5c) returned 0x3
	[0166.942] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.942] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.942] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.942] IUnknown:Release (This=0x79aa58) returned 0x2
	[0166.943] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.943] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.943] IUnknown:QueryInterface (in: This=0x79aa58, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79aa58) returned 0x0
	[0166.943] IUnknown:AddRef (This=0x79aa58) returned 0x4
	[0166.943] IUnknown:Release (This=0x79aa58) returned 0x3
	[0166.943] IUnknown:Release (This=0x79aa58) returned 0x2
	[0166.943] CoTaskMemFree (pv=0x783120) 
	[0166.943] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.943] IUnknown:AddRef (This=0x79aa58) returned 0x3
	[0166.943] IWbemClassObject:Get (in: This=0x79aa58, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.943] IWbemClassObject:Get (in: This=0x79aa58, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1264\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.943] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1264\"") returned 0x5e
	[0166.943] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1264\"") returned 0x5e
	[0166.943] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x690
	[0166.944] SetEvent (hEvent=0x2bc) returned 1
	[0166.944] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x690, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.947] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.947] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.947] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cdf0, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x78cdf0) returned 0x0
	[0166.947] WbemDefPath:IUnknown:AddRef (This=0x78cdf0) returned 0x3
	[0166.947] WbemDefPath:IUnknown:Release (This=0x78cdf0) returned 0x2
	[0166.947] WbemDefPath:IWbemPath:SetText (This=0x78cdf0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1264\"") returned 0x0
	[0166.947] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.947] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.948] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.948] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.948] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.948] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.948] IWbemClassObject:Get (in: This=0x79aa58, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d7518*=0, plFlavor=0x28d751c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\WindowsPowerShell\\landtoo.exe", varVal2=0x0), pType=0x28d7518*=8, plFlavor=0x28d751c*=0) returned 0x0
	[0166.948] SysStringByteLen (bstr="C:\\Program Files\\WindowsPowerShell\\landtoo.exe") returned 0x5c
	[0166.948] SysStringByteLen (bstr="C:\\Program Files\\WindowsPowerShell\\landtoo.exe") returned 0x5c
	[0166.948] IWbemClassObject:Get (in: This=0x79aa58, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d7518*=8, plFlavor=0x28d751c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\WindowsPowerShell\\landtoo.exe", varVal2=0x0), pType=0x28d7518*=8, plFlavor=0x28d751c*=0) returned 0x0
	[0166.948] SysStringByteLen (bstr="C:\\Program Files\\WindowsPowerShell\\landtoo.exe") returned 0x5c
	[0166.948] SysStringByteLen (bstr="C:\\Program Files\\WindowsPowerShell\\landtoo.exe") returned 0x5c
	[0166.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\landtoo.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\landtoo.exe", lpFilePart=0x0) returned 0x2e
	[0166.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\landtoo.exe" (normalized: "c:\\program files\\windowspowershell\\landtoo.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6380ba40, ftCreationTime.dwHighDateTime=0x1d8001a, ftLastAccessTime.dwLowDateTime=0xaeb98960, ftLastAccessTime.dwHighDateTime=0x1d82478, ftLastWriteTime.dwLowDateTime=0xaeb98960, ftLastWriteTime.dwHighDateTime=0x1d82478, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.949] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\WindowsPowerShell\\landtoo.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.950] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\WindowsPowerShell\\landtoo.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28d76d4 | out: lpData=0x28d76d4) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28d7c1c, puLen=0x19f470) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d778c, puLen=0x19f3f0) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d7838, puLen=0x19f3f0) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d78dc, puLen=0x19f3f0) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d791c, puLen=0x19f3f0) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d79c4, puLen=0x19f3f0) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d7a70, puLen=0x19f3f0) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d7b14, puLen=0x19f3f0) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d7bbc, puLen=0x19f3f0) returned 1
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.951] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.952] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.952] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28d7c1c, puLen=0x19f3e4) returned 1
	[0166.952] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.952] VerQueryValueW (in: pBlock=0x28d76d4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28d76fc, puLen=0x19f3f4) returned 1
	[0166.952] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0166.952] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x79b718, puReturned=0x2892750*=0x1) returned 0x0
	[0166.955] IUnknown:QueryInterface (in: This=0x79b718, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79b718) returned 0x0
	[0166.955] IUnknown:QueryInterface (in: This=0x79b718, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.955] IUnknown:QueryInterface (in: This=0x79b718, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.955] IUnknown:QueryInterface (in: This=0x79b718, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.956] IUnknown:AddRef (This=0x79b718) returned 0x3
	[0166.956] IUnknown:QueryInterface (in: This=0x79b718, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.956] IUnknown:QueryInterface (in: This=0x79b718, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.956] IUnknown:QueryInterface (in: This=0x79b718, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79b71c) returned 0x0
	[0166.959] IMarshal:GetUnmarshalClass (in: This=0x79b71c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.959] IUnknown:Release (This=0x79b71c) returned 0x3
	[0166.959] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.959] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.959] IUnknown:QueryInterface (in: This=0x79b718, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.960] IUnknown:Release (This=0x79b718) returned 0x2
	[0166.960] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.960] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.960] IUnknown:QueryInterface (in: This=0x79b718, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79b718) returned 0x0
	[0166.960] IUnknown:AddRef (This=0x79b718) returned 0x4
	[0166.960] IUnknown:Release (This=0x79b718) returned 0x3
	[0166.960] IUnknown:Release (This=0x79b718) returned 0x2
	[0166.960] CoTaskMemFree (pv=0x783170) 
	[0166.960] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.960] IUnknown:AddRef (This=0x79b718) returned 0x3
	[0166.960] IWbemClassObject:Get (in: This=0x79b718, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.961] IWbemClassObject:Get (in: This=0x79b718, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.961] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"") returned 0x5e
	[0166.961] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"") returned 0x5e
	[0166.961] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x694
	[0166.961] SetEvent (hEvent=0x2bc) returned 1
	[0166.962] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x694, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.969] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.969] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.969] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2828, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2828) returned 0x0
	[0166.969] WbemDefPath:IUnknown:AddRef (This=0x7a2828) returned 0x3
	[0166.969] WbemDefPath:IUnknown:Release (This=0x7a2828) returned 0x2
	[0166.969] WbemDefPath:IWbemPath:SetText (This=0x7a2828, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3548\"") returned 0x0
	[0166.970] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.970] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.970] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.970] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.970] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.970] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.970] IWbemClassObject:Get (in: This=0x79b718, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d95ec*=0, plFlavor=0x28d95f0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\as cut.exe", varVal2=0x0), pType=0x28d95ec*=8, plFlavor=0x28d95f0*=0) returned 0x0
	[0166.970] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\as cut.exe") returned 0x5a
	[0166.970] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\as cut.exe") returned 0x5a
	[0166.970] IWbemClassObject:Get (in: This=0x79b718, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28d95ec*=8, plFlavor=0x28d95f0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\as cut.exe", varVal2=0x0), pType=0x28d95ec*=8, plFlavor=0x28d95f0*=0) returned 0x0
	[0166.970] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\as cut.exe") returned 0x5a
	[0166.970] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\as cut.exe") returned 0x5a
	[0166.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\as cut.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\as cut.exe", lpFilePart=0x0) returned 0x2d
	[0166.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\as cut.exe" (normalized: "c:\\program files\\internet explorer\\as cut.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f137be0, ftCreationTime.dwHighDateTime=0x1d7e569, ftLastAccessTime.dwLowDateTime=0x4e24ba0, ftLastAccessTime.dwHighDateTime=0x1d7f333, ftLastWriteTime.dwLowDateTime=0x4e24ba0, ftLastWriteTime.dwHighDateTime=0x1d7f333, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.971] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\as cut.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.972] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\as cut.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28d979c | out: lpData=0x28d979c) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28d9ce4, puLen=0x19f470) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d9854, puLen=0x19f3f0) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d9900, puLen=0x19f3f0) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d99a4, puLen=0x19f3f0) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d99e4, puLen=0x19f3f0) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d9a8c, puLen=0x19f3f0) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d9b38, puLen=0x19f3f0) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d9bdc, puLen=0x19f3f0) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28d9c84, puLen=0x19f3f0) returned 1
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28d9ce4, puLen=0x19f3e4) returned 1
	[0166.973] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.973] VerQueryValueW (in: pBlock=0x28d979c, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28d97c4, puLen=0x19f3f4) returned 1
	[0166.973] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0166.974] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x79c708, puReturned=0x2892750*=0x1) returned 0x0
	[0166.976] IUnknown:QueryInterface (in: This=0x79c708, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79c708) returned 0x0
	[0166.977] IUnknown:QueryInterface (in: This=0x79c708, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.977] IUnknown:QueryInterface (in: This=0x79c708, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.977] IUnknown:QueryInterface (in: This=0x79c708, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.977] IUnknown:AddRef (This=0x79c708) returned 0x3
	[0166.977] IUnknown:QueryInterface (in: This=0x79c708, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.977] IUnknown:QueryInterface (in: This=0x79c708, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.979] IUnknown:QueryInterface (in: This=0x79c708, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79c70c) returned 0x0
	[0166.979] IMarshal:GetUnmarshalClass (in: This=0x79c70c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.979] IUnknown:Release (This=0x79c70c) returned 0x3
	[0166.979] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.979] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.979] IUnknown:QueryInterface (in: This=0x79c708, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.979] IUnknown:Release (This=0x79c708) returned 0x2
	[0166.979] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.979] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.980] IUnknown:QueryInterface (in: This=0x79c708, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79c708) returned 0x0
	[0166.980] IUnknown:AddRef (This=0x79c708) returned 0x4
	[0166.980] IUnknown:Release (This=0x79c708) returned 0x3
	[0166.980] IUnknown:Release (This=0x79c708) returned 0x2
	[0166.980] CoTaskMemFree (pv=0x783170) 
	[0166.980] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.980] IUnknown:AddRef (This=0x79c708) returned 0x3
	[0166.980] IWbemClassObject:Get (in: This=0x79c708, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.980] IWbemClassObject:Get (in: This=0x79c708, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1364\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.980] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1364\"") returned 0x5e
	[0166.980] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1364\"") returned 0x5e
	[0166.980] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x698
	[0166.980] SetEvent (hEvent=0x2bc) returned 1
	[0166.980] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x698, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.983] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.983] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.983] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2908, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2908) returned 0x0
	[0166.983] WbemDefPath:IUnknown:AddRef (This=0x7a2908) returned 0x3
	[0166.983] WbemDefPath:IUnknown:Release (This=0x7a2908) returned 0x2
	[0166.983] WbemDefPath:IWbemPath:SetText (This=0x7a2908, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1364\"") returned 0x0
	[0166.984] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.985] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.985] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.985] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.985] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.985] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.985] IWbemClassObject:Get (in: This=0x79c708, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28db678*=0, plFlavor=0x28db67c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe", varVal2=0x0), pType=0x28db678*=8, plFlavor=0x28db67c*=0) returned 0x0
	[0166.985] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe") returned 0x7a
	[0166.985] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe") returned 0x7a
	[0166.986] IWbemClassObject:Get (in: This=0x79c708, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28db678*=8, plFlavor=0x28db67c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe", varVal2=0x0), pType=0x28db678*=8, plFlavor=0x28db67c*=0) returned 0x0
	[0166.986] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe") returned 0x7a
	[0166.986] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe") returned 0x7a
	[0166.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe", lpFilePart=0x0) returned 0x3d
	[0166.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe" (normalized: "c:\\program files (x86)\\internet explorer\\without_official.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc530, ftCreationTime.dwHighDateTime=0x1d7c2a1, ftLastAccessTime.dwLowDateTime=0xb085ee60, ftLastAccessTime.dwHighDateTime=0x1d7c464, ftLastWriteTime.dwLowDateTime=0xb085ee60, ftLastWriteTime.dwHighDateTime=0x1d7c464, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0166.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0166.986] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0166.987] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\without_official.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28db888 | out: lpData=0x28db888) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28dbdd0, puLen=0x19f470) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28db940, puLen=0x19f3f0) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28db9ec, puLen=0x19f3f0) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dba90, puLen=0x19f3f0) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dbad0, puLen=0x19f3f0) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dbb78, puLen=0x19f3f0) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dbc24, puLen=0x19f3f0) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dbcc8, puLen=0x19f3f0) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dbd70, puLen=0x19f3f0) returned 1
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.988] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0166.989] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28dbdd0, puLen=0x19f3e4) returned 1
	[0166.989] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0166.989] VerQueryValueW (in: pBlock=0x28db888, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28db8b0, puLen=0x19f3f4) returned 1
	[0166.989] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0166.989] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x79c3d8, puReturned=0x2892750*=0x1) returned 0x0
	[0166.993] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79c3d8) returned 0x0
	[0166.993] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0166.993] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0166.993] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0166.993] IUnknown:AddRef (This=0x79c3d8) returned 0x3
	[0166.993] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0166.993] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0166.993] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79c3dc) returned 0x0
	[0166.994] IMarshal:GetUnmarshalClass (in: This=0x79c3dc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0166.994] IUnknown:Release (This=0x79c3dc) returned 0x3
	[0166.994] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0166.994] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0166.994] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0166.994] IUnknown:Release (This=0x79c3d8) returned 0x2
	[0166.994] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0166.994] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0166.994] IUnknown:QueryInterface (in: This=0x79c3d8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79c3d8) returned 0x0
	[0166.994] IUnknown:AddRef (This=0x79c3d8) returned 0x4
	[0166.994] IUnknown:Release (This=0x79c3d8) returned 0x3
	[0166.994] IUnknown:Release (This=0x79c3d8) returned 0x2
	[0166.994] CoTaskMemFree (pv=0x783170) 
	[0166.994] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0166.994] IUnknown:AddRef (This=0x79c3d8) returned 0x3
	[0166.994] IWbemClassObject:Get (in: This=0x79c3d8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0166.994] IWbemClassObject:Get (in: This=0x79c3d8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"712\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0166.994] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"712\"") returned 0x5c
	[0166.994] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"712\"") returned 0x5c
	[0166.995] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x69c
	[0166.995] SetEvent (hEvent=0x2bc) returned 1
	[0166.995] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x69c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0166.998] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0166.998] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0166.998] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1c58, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1c58) returned 0x0
	[0166.998] WbemDefPath:IUnknown:AddRef (This=0x7a1c58) returned 0x3
	[0166.998] WbemDefPath:IUnknown:Release (This=0x7a1c58) returned 0x2
	[0166.998] WbemDefPath:IWbemPath:SetText (This=0x7a1c58, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"712\"") returned 0x0
	[0166.998] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0166.998] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0166.998] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.998] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0166.999] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0166.999] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0166.999] IWbemClassObject:Get (in: This=0x79c3d8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28dd794*=0, plFlavor=0x28dd798*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe", varVal2=0x0), pType=0x28dd794*=8, plFlavor=0x28dd798*=0) returned 0x0
	[0166.999] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe") returned 0x78
	[0166.999] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe") returned 0x78
	[0166.999] IWbemClassObject:Get (in: This=0x79c3d8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28dd794*=8, plFlavor=0x28dd798*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe", varVal2=0x0), pType=0x28dd794*=8, plFlavor=0x28dd798*=0) returned 0x0
	[0166.999] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe") returned 0x78
	[0166.999] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe") returned 0x78
	[0166.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe", lpFilePart=0x0) returned 0x3c
	[0166.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0166.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe" (normalized: "c:\\program files (x86)\\windows media player\\though_chair.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6816850, ftCreationTime.dwHighDateTime=0x1d7d0fa, ftLastAccessTime.dwLowDateTime=0xd8e160e0, ftLastAccessTime.dwHighDateTime=0x1d80430, ftLastWriteTime.dwLowDateTime=0xd8e160e0, ftLastWriteTime.dwHighDateTime=0x1d80430, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.000] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.001] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Media Player\\though_chair.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28dd9a4 | out: lpData=0x28dd9a4) returned 1
	[0167.002] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28ddeec, puLen=0x19f470) returned 1
	[0167.002] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dda5c, puLen=0x19f3f0) returned 1
	[0167.002] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ddb08, puLen=0x19f3f0) returned 1
	[0167.002] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ddbac, puLen=0x19f3f0) returned 1
	[0167.002] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ddbec, puLen=0x19f3f0) returned 1
	[0167.002] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ddc94, puLen=0x19f3f0) returned 1
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ddd40, puLen=0x19f3f0) returned 1
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ddde4, puLen=0x19f3f0) returned 1
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dde8c, puLen=0x19f3f0) returned 1
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28ddeec, puLen=0x19f3e4) returned 1
	[0167.003] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.003] VerQueryValueW (in: pBlock=0x28dd9a4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28dd9cc, puLen=0x19f3f4) returned 1
	[0167.003] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0167.003] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x79abf0, puReturned=0x2892750*=0x1) returned 0x0
	[0167.007] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79abf0) returned 0x0
	[0167.008] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.008] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.008] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.008] IUnknown:AddRef (This=0x79abf0) returned 0x3
	[0167.008] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.008] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.008] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79abf4) returned 0x0
	[0167.008] IMarshal:GetUnmarshalClass (in: This=0x79abf4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.008] IUnknown:Release (This=0x79abf4) returned 0x3
	[0167.008] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.008] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.008] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.009] IUnknown:Release (This=0x79abf0) returned 0x2
	[0167.009] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.009] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.009] IUnknown:QueryInterface (in: This=0x79abf0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79abf0) returned 0x0
	[0167.009] IUnknown:AddRef (This=0x79abf0) returned 0x4
	[0167.009] IUnknown:Release (This=0x79abf0) returned 0x3
	[0167.009] IUnknown:Release (This=0x79abf0) returned 0x2
	[0167.009] CoTaskMemFree (pv=0x783120) 
	[0167.009] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.009] IUnknown:AddRef (This=0x79abf0) returned 0x3
	[0167.009] IWbemClassObject:Get (in: This=0x79abf0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.009] IWbemClassObject:Get (in: This=0x79abf0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1656\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.009] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1656\"") returned 0x5e
	[0167.009] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1656\"") returned 0x5e
	[0167.010] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6a0
	[0167.010] SetEvent (hEvent=0x2bc) returned 1
	[0167.010] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6a0, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.012] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.012] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.012] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2588, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2588) returned 0x0
	[0167.012] WbemDefPath:IUnknown:AddRef (This=0x7a2588) returned 0x3
	[0167.013] WbemDefPath:IUnknown:Release (This=0x7a2588) returned 0x2
	[0167.013] WbemDefPath:IWbemPath:SetText (This=0x7a2588, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1656\"") returned 0x0
	[0167.013] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.013] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.013] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.013] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.013] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.013] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.013] IWbemClassObject:Get (in: This=0x79abf0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28df8b8*=0, plFlavor=0x28df8bc*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe", varVal2=0x0), pType=0x28df8b8*=8, plFlavor=0x28df8bc*=0) returned 0x0
	[0167.013] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe") returned 0x78
	[0167.013] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe") returned 0x78
	[0167.013] IWbemClassObject:Get (in: This=0x79abf0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28df8b8*=8, plFlavor=0x28df8bc*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe", varVal2=0x0), pType=0x28df8b8*=8, plFlavor=0x28df8bc*=0) returned 0x0
	[0167.013] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe") returned 0x78
	[0167.013] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe") returned 0x78
	[0167.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe", lpFilePart=0x0) returned 0x3c
	[0167.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe" (normalized: "c:\\program files (x86)\\windows portable devices\\near she.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ace9c00, ftCreationTime.dwHighDateTime=0x1d7e824, ftLastAccessTime.dwLowDateTime=0x1cee1900, ftLastAccessTime.dwHighDateTime=0x1d7fe4a, ftLastWriteTime.dwLowDateTime=0x1cee1900, ftLastWriteTime.dwHighDateTime=0x1d7fe4a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.014] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.015] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Portable Devices\\near she.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28dfac8 | out: lpData=0x28dfac8) returned 1
	[0167.015] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28e0010, puLen=0x19f470) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dfb80, puLen=0x19f3f0) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dfc2c, puLen=0x19f3f0) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dfcd0, puLen=0x19f3f0) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dfd10, puLen=0x19f3f0) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dfdb8, puLen=0x19f3f0) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dfe64, puLen=0x19f3f0) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dff08, puLen=0x19f3f0) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28dffb0, puLen=0x19f3f0) returned 1
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28e0010, puLen=0x19f3e4) returned 1
	[0167.016] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.016] VerQueryValueW (in: pBlock=0x28dfac8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28dfaf0, puLen=0x19f3f4) returned 1
	[0167.016] CoTaskMemAlloc (cb=0x4) returned 0x783010
	[0167.016] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783010, puReturned=0x2892750 | out: apObjects=0x783010*=0x79af20, puReturned=0x2892750*=0x1) returned 0x0
	[0167.021] IUnknown:QueryInterface (in: This=0x79af20, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79af20) returned 0x0
	[0167.021] IUnknown:QueryInterface (in: This=0x79af20, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.021] IUnknown:QueryInterface (in: This=0x79af20, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.021] IUnknown:QueryInterface (in: This=0x79af20, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.022] IUnknown:AddRef (This=0x79af20) returned 0x3
	[0167.022] IUnknown:QueryInterface (in: This=0x79af20, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.022] IUnknown:QueryInterface (in: This=0x79af20, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.022] IUnknown:QueryInterface (in: This=0x79af20, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79af24) returned 0x0
	[0167.022] IMarshal:GetUnmarshalClass (in: This=0x79af24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.022] IUnknown:Release (This=0x79af24) returned 0x3
	[0167.022] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.022] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.022] IUnknown:QueryInterface (in: This=0x79af20, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.022] IUnknown:Release (This=0x79af20) returned 0x2
	[0167.022] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.022] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.022] IUnknown:QueryInterface (in: This=0x79af20, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79af20) returned 0x0
	[0167.022] IUnknown:AddRef (This=0x79af20) returned 0x4
	[0167.022] IUnknown:Release (This=0x79af20) returned 0x3
	[0167.022] IUnknown:Release (This=0x79af20) returned 0x2
	[0167.022] CoTaskMemFree (pv=0x783010) 
	[0167.022] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.023] IUnknown:AddRef (This=0x79af20) returned 0x3
	[0167.023] IWbemClassObject:Get (in: This=0x79af20, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.023] IWbemClassObject:Get (in: This=0x79af20, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1648\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.023] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1648\"") returned 0x5e
	[0167.023] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1648\"") returned 0x5e
	[0167.023] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6a4
	[0167.023] SetEvent (hEvent=0x2bc) returned 1
	[0167.023] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6a4, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.026] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.026] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.026] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a27b8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a27b8) returned 0x0
	[0167.026] WbemDefPath:IUnknown:AddRef (This=0x7a27b8) returned 0x3
	[0167.026] WbemDefPath:IUnknown:Release (This=0x7a27b8) returned 0x2
	[0167.026] WbemDefPath:IWbemPath:SetText (This=0x7a27b8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1648\"") returned 0x0
	[0167.026] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.026] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.026] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.026] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.026] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.026] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.026] IWbemClassObject:Get (in: This=0x79af20, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e19b4*=0, plFlavor=0x28e19b8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\grow.exe", varVal2=0x0), pType=0x28e19b4*=8, plFlavor=0x28e19b8*=0) returned 0x0
	[0167.026] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\grow.exe") returned 0x56
	[0167.026] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\grow.exe") returned 0x56
	[0167.026] IWbemClassObject:Get (in: This=0x79af20, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e19b4*=8, plFlavor=0x28e19b8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\grow.exe", varVal2=0x0), pType=0x28e19b4*=8, plFlavor=0x28e19b8*=0) returned 0x0
	[0167.029] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\grow.exe") returned 0x56
	[0167.029] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\grow.exe") returned 0x56
	[0167.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\grow.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\grow.exe", lpFilePart=0x0) returned 0x2b
	[0167.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\grow.exe" (normalized: "c:\\program files\\internet explorer\\grow.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb234c880, ftCreationTime.dwHighDateTime=0x1d7fcdb, ftLastAccessTime.dwLowDateTime=0xaa0089f0, ftLastAccessTime.dwHighDateTime=0x1d81208, ftLastWriteTime.dwLowDateTime=0xaa0089f0, ftLastWriteTime.dwHighDateTime=0x1d81208, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.030] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\grow.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.032] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\grow.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28e1b58 | out: lpData=0x28e1b58) returned 1
	[0167.032] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28e20a0, puLen=0x19f470) returned 1
	[0167.032] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e1c10, puLen=0x19f3f0) returned 1
	[0167.032] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e1cbc, puLen=0x19f3f0) returned 1
	[0167.032] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e1d60, puLen=0x19f3f0) returned 1
	[0167.032] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e1da0, puLen=0x19f3f0) returned 1
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e1e48, puLen=0x19f3f0) returned 1
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e1ef4, puLen=0x19f3f0) returned 1
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e1f98, puLen=0x19f3f0) returned 1
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e2040, puLen=0x19f3f0) returned 1
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28e20a0, puLen=0x19f3e4) returned 1
	[0167.033] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.033] VerQueryValueW (in: pBlock=0x28e1b58, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28e1b80, puLen=0x19f3f4) returned 1
	[0167.033] CoTaskMemAlloc (cb=0x4) returned 0x783060
	[0167.034] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783060, puReturned=0x2892750 | out: apObjects=0x783060*=0x79c240, puReturned=0x2892750*=0x1) returned 0x0
	[0167.037] IUnknown:QueryInterface (in: This=0x79c240, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79c240) returned 0x0
	[0167.037] IUnknown:QueryInterface (in: This=0x79c240, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.037] IUnknown:QueryInterface (in: This=0x79c240, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.037] IUnknown:QueryInterface (in: This=0x79c240, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.038] IUnknown:AddRef (This=0x79c240) returned 0x3
	[0167.038] IUnknown:QueryInterface (in: This=0x79c240, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.038] IUnknown:QueryInterface (in: This=0x79c240, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.038] IUnknown:QueryInterface (in: This=0x79c240, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79c244) returned 0x0
	[0167.038] IMarshal:GetUnmarshalClass (in: This=0x79c244, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.038] IUnknown:Release (This=0x79c244) returned 0x3
	[0167.038] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.038] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.038] IUnknown:QueryInterface (in: This=0x79c240, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.038] IUnknown:Release (This=0x79c240) returned 0x2
	[0167.038] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.038] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.038] IUnknown:QueryInterface (in: This=0x79c240, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79c240) returned 0x0
	[0167.038] IUnknown:AddRef (This=0x79c240) returned 0x4
	[0167.038] IUnknown:Release (This=0x79c240) returned 0x3
	[0167.038] IUnknown:Release (This=0x79c240) returned 0x2
	[0167.038] CoTaskMemFree (pv=0x783060) 
	[0167.038] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.039] IUnknown:AddRef (This=0x79c240) returned 0x3
	[0167.039] IWbemClassObject:Get (in: This=0x79c240, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.039] IWbemClassObject:Get (in: This=0x79c240, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3632\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.039] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3632\"") returned 0x5e
	[0167.039] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3632\"") returned 0x5e
	[0167.039] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6a8
	[0167.039] SetEvent (hEvent=0x2bc) returned 1
	[0167.039] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6a8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.046] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.046] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.046] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a22e8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a22e8) returned 0x0
	[0167.046] WbemDefPath:IUnknown:AddRef (This=0x7a22e8) returned 0x3
	[0167.046] WbemDefPath:IUnknown:Release (This=0x7a22e8) returned 0x2
	[0167.046] WbemDefPath:IWbemPath:SetText (This=0x7a22e8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3632\"") returned 0x0
	[0167.046] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.046] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.047] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.047] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.047] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.047] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.047] IWbemClassObject:Get (in: This=0x79c240, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e3a40*=0, plFlavor=0x28e3a44*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe", varVal2=0x0), pType=0x28e3a40*=8, plFlavor=0x28e3a44*=0) returned 0x0
	[0167.047] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe") returned 0x68
	[0167.047] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe") returned 0x68
	[0167.047] IWbemClassObject:Get (in: This=0x79c240, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e3a40*=8, plFlavor=0x28e3a44*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe", varVal2=0x0), pType=0x28e3a40*=8, plFlavor=0x28e3a44*=0) returned 0x0
	[0167.047] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe") returned 0x68
	[0167.047] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe") returned 0x68
	[0167.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe", lpFilePart=0x0) returned 0x34
	[0167.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe" (normalized: "c:\\program files (x86)\\windows nt\\newspapertheir.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x370ec9c0, ftCreationTime.dwHighDateTime=0x1d7e03a, ftLastAccessTime.dwLowDateTime=0xb76889f0, ftLastAccessTime.dwHighDateTime=0x1d80f0e, ftLastWriteTime.dwLowDateTime=0xb76889f0, ftLastWriteTime.dwHighDateTime=0x1d80f0e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.048] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.052] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows NT\\newspapertheir.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28e3c20 | out: lpData=0x28e3c20) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28e4168, puLen=0x19f470) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e3cd8, puLen=0x19f3f0) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e3d84, puLen=0x19f3f0) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e3e28, puLen=0x19f3f0) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e3e68, puLen=0x19f3f0) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e3f10, puLen=0x19f3f0) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e3fbc, puLen=0x19f3f0) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e4060, puLen=0x19f3f0) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e4108, puLen=0x19f3f0) returned 1
	[0167.053] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.054] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.054] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.054] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.054] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28e4168, puLen=0x19f3e4) returned 1
	[0167.054] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.054] VerQueryValueW (in: pBlock=0x28e3c20, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28e3c48, puLen=0x19f3f4) returned 1
	[0167.054] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0167.054] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x79b250, puReturned=0x2892750*=0x1) returned 0x0
	[0167.057] IUnknown:QueryInterface (in: This=0x79b250, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79b250) returned 0x0
	[0167.057] IUnknown:QueryInterface (in: This=0x79b250, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.057] IUnknown:QueryInterface (in: This=0x79b250, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.057] IUnknown:QueryInterface (in: This=0x79b250, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.057] IUnknown:AddRef (This=0x79b250) returned 0x3
	[0167.057] IUnknown:QueryInterface (in: This=0x79b250, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.057] IUnknown:QueryInterface (in: This=0x79b250, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.057] IUnknown:QueryInterface (in: This=0x79b250, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79b254) returned 0x0
	[0167.058] IMarshal:GetUnmarshalClass (in: This=0x79b254, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.058] IUnknown:Release (This=0x79b254) returned 0x3
	[0167.058] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.058] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.058] IUnknown:QueryInterface (in: This=0x79b250, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.058] IUnknown:Release (This=0x79b250) returned 0x2
	[0167.058] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.058] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.058] IUnknown:QueryInterface (in: This=0x79b250, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79b250) returned 0x0
	[0167.058] IUnknown:AddRef (This=0x79b250) returned 0x4
	[0167.058] IUnknown:Release (This=0x79b250) returned 0x3
	[0167.058] IUnknown:Release (This=0x79b250) returned 0x2
	[0167.058] CoTaskMemFree (pv=0x783120) 
	[0167.058] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.058] IUnknown:AddRef (This=0x79b250) returned 0x3
	[0167.058] IWbemClassObject:Get (in: This=0x79b250, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.058] IWbemClassObject:Get (in: This=0x79b250, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3692\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.059] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3692\"") returned 0x5e
	[0167.059] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3692\"") returned 0x5e
	[0167.059] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6ac
	[0167.059] SetEvent (hEvent=0x2bc) returned 1
	[0167.059] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6ac, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.064] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.064] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2208, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2208) returned 0x0
	[0167.064] WbemDefPath:IUnknown:AddRef (This=0x7a2208) returned 0x3
	[0167.064] WbemDefPath:IUnknown:Release (This=0x7a2208) returned 0x2
	[0167.064] WbemDefPath:IWbemPath:SetText (This=0x7a2208, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3692\"") returned 0x0
	[0167.065] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.065] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.065] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.065] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.065] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.065] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.065] IWbemClassObject:Get (in: This=0x79b250, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e5b44*=0, plFlavor=0x28e5b48*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Portable Devices\\keep_education.exe", varVal2=0x0), pType=0x28e5b44*=8, plFlavor=0x28e5b48*=0) returned 0x0
	[0167.065] SysStringByteLen (bstr="C:\\Program Files\\Windows Portable Devices\\keep_education.exe") returned 0x78
	[0167.065] SysStringByteLen (bstr="C:\\Program Files\\Windows Portable Devices\\keep_education.exe") returned 0x78
	[0167.065] IWbemClassObject:Get (in: This=0x79b250, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e5b44*=8, plFlavor=0x28e5b48*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Portable Devices\\keep_education.exe", varVal2=0x0), pType=0x28e5b44*=8, plFlavor=0x28e5b48*=0) returned 0x0
	[0167.065] SysStringByteLen (bstr="C:\\Program Files\\Windows Portable Devices\\keep_education.exe") returned 0x78
	[0167.065] SysStringByteLen (bstr="C:\\Program Files\\Windows Portable Devices\\keep_education.exe") returned 0x78
	[0167.065] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\keep_education.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Portable Devices\\keep_education.exe", lpFilePart=0x0) returned 0x3c
	[0167.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\keep_education.exe" (normalized: "c:\\program files\\windows portable devices\\keep_education.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3786160, ftCreationTime.dwHighDateTime=0x1d82090, ftLastAccessTime.dwLowDateTime=0x6ecdbae0, ftLastAccessTime.dwHighDateTime=0x1d822ae, ftLastWriteTime.dwLowDateTime=0x6ecdbae0, ftLastWriteTime.dwHighDateTime=0x1d822ae, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.066] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Portable Devices\\keep_education.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.067] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Portable Devices\\keep_education.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28e5d54 | out: lpData=0x28e5d54) returned 1
	[0167.067] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28e629c, puLen=0x19f470) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e5e0c, puLen=0x19f3f0) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e5eb8, puLen=0x19f3f0) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e5f5c, puLen=0x19f3f0) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e5f9c, puLen=0x19f3f0) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e6044, puLen=0x19f3f0) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e60f0, puLen=0x19f3f0) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e6194, puLen=0x19f3f0) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e623c, puLen=0x19f3f0) returned 1
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28e629c, puLen=0x19f3e4) returned 1
	[0167.069] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.069] VerQueryValueW (in: pBlock=0x28e5d54, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28e5d7c, puLen=0x19f3f4) returned 1
	[0167.070] CoTaskMemAlloc (cb=0x4) returned 0x782fd0
	[0167.070] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fd0, puReturned=0x2892750 | out: apObjects=0x782fd0*=0x79b3e8, puReturned=0x2892750*=0x1) returned 0x0
	[0167.098] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79b3e8) returned 0x0
	[0167.098] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.098] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.098] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.098] IUnknown:AddRef (This=0x79b3e8) returned 0x3
	[0167.098] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.098] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.098] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79b3ec) returned 0x0
	[0167.098] IMarshal:GetUnmarshalClass (in: This=0x79b3ec, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.099] IUnknown:Release (This=0x79b3ec) returned 0x3
	[0167.099] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.099] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.099] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.099] IUnknown:Release (This=0x79b3e8) returned 0x2
	[0167.099] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.099] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.099] IUnknown:QueryInterface (in: This=0x79b3e8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79b3e8) returned 0x0
	[0167.099] IUnknown:AddRef (This=0x79b3e8) returned 0x4
	[0167.099] IUnknown:Release (This=0x79b3e8) returned 0x3
	[0167.099] IUnknown:Release (This=0x79b3e8) returned 0x2
	[0167.099] CoTaskMemFree (pv=0x782fd0) 
	[0167.099] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.099] IUnknown:AddRef (This=0x79b3e8) returned 0x3
	[0167.099] IWbemClassObject:Get (in: This=0x79b3e8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.100] IWbemClassObject:Get (in: This=0x79b3e8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3976\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.100] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3976\"") returned 0x5e
	[0167.100] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3976\"") returned 0x5e
	[0167.100] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6b0
	[0167.100] SetEvent (hEvent=0x2bc) returned 1
	[0167.100] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6b0, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.108] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.108] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2978, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2978) returned 0x0
	[0167.108] WbemDefPath:IUnknown:AddRef (This=0x7a2978) returned 0x3
	[0167.108] WbemDefPath:IUnknown:Release (This=0x7a2978) returned 0x2
	[0167.108] WbemDefPath:IWbemPath:SetText (This=0x7a2978, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3976\"") returned 0x0
	[0167.108] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.108] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.108] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.108] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.108] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.108] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.109] IWbemClassObject:Get (in: This=0x79b3e8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e7c90*=0, plFlavor=0x28e7c94*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe", varVal2=0x0), pType=0x28e7c90*=8, plFlavor=0x28e7c94*=0) returned 0x0
	[0167.109] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe") returned 0x8e
	[0167.109] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe") returned 0x8e
	[0167.109] IWbemClassObject:Get (in: This=0x79b3e8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e7c90*=8, plFlavor=0x28e7c94*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe", varVal2=0x0), pType=0x28e7c90*=8, plFlavor=0x28e7c94*=0) returned 0x0
	[0167.109] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe") returned 0x8e
	[0167.109] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe") returned 0x8e
	[0167.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe", lpFilePart=0x0) returned 0x47
	[0167.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe" (normalized: "c:\\program files (x86)\\windows portable devices\\save-total-official.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa807bf70, ftCreationTime.dwHighDateTime=0x1d7b019, ftLastAccessTime.dwLowDateTime=0xdac44180, ftLastAccessTime.dwHighDateTime=0x1d7f3a4, ftLastWriteTime.dwLowDateTime=0xdac44180, ftLastWriteTime.dwHighDateTime=0x1d7f3a4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.110] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.111] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Portable Devices\\save-total-official.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28e7edc | out: lpData=0x28e7edc) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28e8424, puLen=0x19f470) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e7f94, puLen=0x19f3f0) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e8040, puLen=0x19f3f0) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e80e4, puLen=0x19f3f0) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e8124, puLen=0x19f3f0) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e81cc, puLen=0x19f3f0) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e8278, puLen=0x19f3f0) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e831c, puLen=0x19f3f0) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28e83c4, puLen=0x19f3f0) returned 1
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.115] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.116] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.116] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28e8424, puLen=0x19f3e4) returned 1
	[0167.116] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.116] VerQueryValueW (in: pBlock=0x28e7edc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28e7f04, puLen=0x19f3f4) returned 1
	[0167.116] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.116] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x79bbe0, puReturned=0x2892750*=0x1) returned 0x0
	[0167.122] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79bbe0) returned 0x0
	[0167.122] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.123] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.123] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.123] IUnknown:AddRef (This=0x79bbe0) returned 0x3
	[0167.123] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.123] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.123] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79bbe4) returned 0x0
	[0167.123] IMarshal:GetUnmarshalClass (in: This=0x79bbe4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.123] IUnknown:Release (This=0x79bbe4) returned 0x3
	[0167.123] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.123] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.123] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.123] IUnknown:Release (This=0x79bbe0) returned 0x2
	[0167.123] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.123] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.123] IUnknown:QueryInterface (in: This=0x79bbe0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79bbe0) returned 0x0
	[0167.124] IUnknown:AddRef (This=0x79bbe0) returned 0x4
	[0167.124] IUnknown:Release (This=0x79bbe0) returned 0x3
	[0167.124] IUnknown:Release (This=0x79bbe0) returned 0x2
	[0167.124] CoTaskMemFree (pv=0x783170) 
	[0167.124] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.124] IUnknown:AddRef (This=0x79bbe0) returned 0x3
	[0167.124] IWbemClassObject:Get (in: This=0x79bbe0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.124] IWbemClassObject:Get (in: This=0x79bbe0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4044\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.124] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4044\"") returned 0x5e
	[0167.124] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4044\"") returned 0x5e
	[0167.124] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6b4
	[0167.124] SetEvent (hEvent=0x2bc) returned 1
	[0167.125] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6b4, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.130] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.130] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.130] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2438, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2438) returned 0x0
	[0167.130] WbemDefPath:IUnknown:AddRef (This=0x7a2438) returned 0x3
	[0167.130] WbemDefPath:IUnknown:Release (This=0x7a2438) returned 0x2
	[0167.130] WbemDefPath:IWbemPath:SetText (This=0x7a2438, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4044\"") returned 0x0
	[0167.131] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.131] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.131] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.131] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.131] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.132] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.132] IWbemClassObject:Get (in: This=0x79bbe0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e9dfc*=0, plFlavor=0x28e9e00*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe", varVal2=0x0), pType=0x28e9dfc*=8, plFlavor=0x28e9e00*=0) returned 0x0
	[0167.132] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe") returned 0x64
	[0167.132] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe") returned 0x64
	[0167.132] IWbemClassObject:Get (in: This=0x79bbe0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28e9dfc*=8, plFlavor=0x28e9e00*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe", varVal2=0x0), pType=0x28e9dfc*=8, plFlavor=0x28e9e00*=0) returned 0x0
	[0167.132] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe") returned 0x64
	[0167.132] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe") returned 0x64
	[0167.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe", lpFilePart=0x0) returned 0x32
	[0167.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe" (normalized: "c:\\program files (x86)\\internet explorer\\3dftp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107b45c0, ftCreationTime.dwHighDateTime=0x1d7cf70, ftLastAccessTime.dwLowDateTime=0x179ba3c0, ftLastAccessTime.dwHighDateTime=0x1d827a6, ftLastWriteTime.dwLowDateTime=0x179ba3c0, ftLastWriteTime.dwHighDateTime=0x1d827a6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.137] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.138] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\3dftp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28e9fd0 | out: lpData=0x28e9fd0) returned 1
	[0167.138] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28ea518, puLen=0x19f470) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ea088, puLen=0x19f3f0) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ea134, puLen=0x19f3f0) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ea1d8, puLen=0x19f3f0) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ea218, puLen=0x19f3f0) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ea2c0, puLen=0x19f3f0) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ea36c, puLen=0x19f3f0) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ea410, puLen=0x19f3f0) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ea4b8, puLen=0x19f3f0) returned 1
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28ea518, puLen=0x19f3e4) returned 1
	[0167.139] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.139] VerQueryValueW (in: pBlock=0x28e9fd0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28e9ff8, puLen=0x19f3f4) returned 1
	[0167.139] CoTaskMemAlloc (cb=0x4) returned 0x7830b0
	[0167.139] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7830b0, puReturned=0x2892750 | out: apObjects=0x7830b0*=0x79b580, puReturned=0x2892750*=0x1) returned 0x0
	[0167.190] IUnknown:QueryInterface (in: This=0x79b580, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79b580) returned 0x0
	[0167.191] IUnknown:QueryInterface (in: This=0x79b580, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.191] IUnknown:QueryInterface (in: This=0x79b580, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.191] IUnknown:QueryInterface (in: This=0x79b580, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.191] IUnknown:AddRef (This=0x79b580) returned 0x3
	[0167.191] IUnknown:QueryInterface (in: This=0x79b580, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.191] IUnknown:QueryInterface (in: This=0x79b580, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.191] IUnknown:QueryInterface (in: This=0x79b580, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79b584) returned 0x0
	[0167.191] IMarshal:GetUnmarshalClass (in: This=0x79b584, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.191] IUnknown:Release (This=0x79b584) returned 0x3
	[0167.191] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.192] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.192] IUnknown:QueryInterface (in: This=0x79b580, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.192] IUnknown:Release (This=0x79b580) returned 0x2
	[0167.192] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.192] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.192] IUnknown:QueryInterface (in: This=0x79b580, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79b580) returned 0x0
	[0167.192] IUnknown:AddRef (This=0x79b580) returned 0x4
	[0167.192] IUnknown:Release (This=0x79b580) returned 0x3
	[0167.192] IUnknown:Release (This=0x79b580) returned 0x2
	[0167.192] CoTaskMemFree (pv=0x7830b0) 
	[0167.192] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.192] IUnknown:AddRef (This=0x79b580) returned 0x3
	[0167.192] IWbemClassObject:Get (in: This=0x79b580, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.192] IWbemClassObject:Get (in: This=0x79b580, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4048\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.193] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4048\"") returned 0x5e
	[0167.193] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4048\"") returned 0x5e
	[0167.193] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6b8
	[0167.193] SetEvent (hEvent=0x2bc) returned 1
	[0167.193] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6b8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.224] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.224] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.224] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2898, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2898) returned 0x0
	[0167.224] WbemDefPath:IUnknown:AddRef (This=0x7a2898) returned 0x3
	[0167.224] WbemDefPath:IUnknown:Release (This=0x7a2898) returned 0x2
	[0167.224] WbemDefPath:IWbemPath:SetText (This=0x7a2898, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4048\"") returned 0x0
	[0167.225] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.225] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.225] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.225] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.225] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.225] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.225] IWbemClassObject:Get (in: This=0x79b580, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28ebee0*=0, plFlavor=0x28ebee4*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe", varVal2=0x0), pType=0x28ebee0*=8, plFlavor=0x28ebee4*=0) returned 0x0
	[0167.225] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe") returned 0x7c
	[0167.225] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe") returned 0x7c
	[0167.225] IWbemClassObject:Get (in: This=0x79b580, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28ebee0*=8, plFlavor=0x28ebee4*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe", varVal2=0x0), pType=0x28ebee0*=8, plFlavor=0x28ebee4*=0) returned 0x0
	[0167.225] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe") returned 0x7c
	[0167.225] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe") returned 0x7c
	[0167.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe", lpFilePart=0x0) returned 0x3e
	[0167.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\absolutetelnet.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3fb0040, ftCreationTime.dwHighDateTime=0x1d7b38e, ftLastAccessTime.dwLowDateTime=0x201dd290, ftLastAccessTime.dwHighDateTime=0x1d7e0a5, ftLastWriteTime.dwLowDateTime=0x201dd290, ftLastWriteTime.dwHighDateTime=0x1d7e0a5, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.226] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.227] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Photo Viewer\\absolutetelnet.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28ec0fc | out: lpData=0x28ec0fc) returned 1
	[0167.227] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28ec644, puLen=0x19f470) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ec1b4, puLen=0x19f3f0) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ec260, puLen=0x19f3f0) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ec304, puLen=0x19f3f0) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ec344, puLen=0x19f3f0) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ec3ec, puLen=0x19f3f0) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ec498, puLen=0x19f3f0) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ec53c, puLen=0x19f3f0) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ec5e4, puLen=0x19f3f0) returned 1
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28ec644, puLen=0x19f3e4) returned 1
	[0167.228] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.228] VerQueryValueW (in: pBlock=0x28ec0fc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28ec124, puLen=0x19f3f4) returned 1
	[0167.228] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0167.228] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x79b8b0, puReturned=0x2892750*=0x1) returned 0x0
	[0167.232] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79b8b0) returned 0x0
	[0167.233] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.233] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.233] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.233] IUnknown:AddRef (This=0x79b8b0) returned 0x3
	[0167.233] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.233] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.233] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79b8b4) returned 0x0
	[0167.234] IMarshal:GetUnmarshalClass (in: This=0x79b8b4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.234] IUnknown:Release (This=0x79b8b4) returned 0x3
	[0167.234] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.234] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.234] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.234] IUnknown:Release (This=0x79b8b0) returned 0x2
	[0167.234] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.234] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.234] IUnknown:QueryInterface (in: This=0x79b8b0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79b8b0) returned 0x0
	[0167.234] IUnknown:AddRef (This=0x79b8b0) returned 0x4
	[0167.234] IUnknown:Release (This=0x79b8b0) returned 0x3
	[0167.234] IUnknown:Release (This=0x79b8b0) returned 0x2
	[0167.234] CoTaskMemFree (pv=0x783120) 
	[0167.234] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.234] IUnknown:AddRef (This=0x79b8b0) returned 0x3
	[0167.234] IWbemClassObject:Get (in: This=0x79b8b0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.234] IWbemClassObject:Get (in: This=0x79b8b0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3972\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.234] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3972\"") returned 0x5e
	[0167.234] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3972\"") returned 0x5e
	[0167.235] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6bc
	[0167.235] SetEvent (hEvent=0x2bc) returned 1
	[0167.235] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6bc, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.237] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.237] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.237] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2278, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2278) returned 0x0
	[0167.237] WbemDefPath:IUnknown:AddRef (This=0x7a2278) returned 0x3
	[0167.238] WbemDefPath:IUnknown:Release (This=0x7a2278) returned 0x2
	[0167.238] WbemDefPath:IWbemPath:SetText (This=0x7a2278, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3972\"") returned 0x0
	[0167.238] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.238] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.238] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.238] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.238] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.238] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.238] IWbemClassObject:Get (in: This=0x79b8b0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28ee008*=0, plFlavor=0x28ee00c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe", varVal2=0x0), pType=0x28ee008*=8, plFlavor=0x28ee00c*=0) returned 0x0
	[0167.238] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe") returned 0x6a
	[0167.238] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe") returned 0x6a
	[0167.238] IWbemClassObject:Get (in: This=0x79b8b0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28ee008*=8, plFlavor=0x28ee00c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe", varVal2=0x0), pType=0x28ee008*=8, plFlavor=0x28ee00c*=0) returned 0x0
	[0167.238] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe") returned 0x6a
	[0167.238] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe") returned 0x6a
	[0167.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe", lpFilePart=0x0) returned 0x35
	[0167.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\alftp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cad8e0, ftCreationTime.dwHighDateTime=0x1d7cd25, ftLastAccessTime.dwLowDateTime=0x3f53ff30, ftLastAccessTime.dwHighDateTime=0x1d81e86, ftLastWriteTime.dwLowDateTime=0x3f53ff30, ftLastWriteTime.dwHighDateTime=0x1d81e86, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.239] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.240] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Photo Viewer\\alftp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28ee1e8 | out: lpData=0x28ee1e8) returned 1
	[0167.240] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28ee730, puLen=0x19f470) returned 1
	[0167.240] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ee2a0, puLen=0x19f3f0) returned 1
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ee34c, puLen=0x19f3f0) returned 1
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ee3f0, puLen=0x19f3f0) returned 1
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ee430, puLen=0x19f3f0) returned 1
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ee4d8, puLen=0x19f3f0) returned 1
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ee584, puLen=0x19f3f0) returned 1
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ee628, puLen=0x19f3f0) returned 1
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28ee6d0, puLen=0x19f3f0) returned 1
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28ee730, puLen=0x19f3e4) returned 1
	[0167.241] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.241] VerQueryValueW (in: pBlock=0x28ee1e8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28ee210, puLen=0x19f3f4) returned 1
	[0167.241] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0167.241] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x79ba48, puReturned=0x2892750*=0x1) returned 0x0
	[0167.246] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x79ba48) returned 0x0
	[0167.246] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.246] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.246] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.246] IUnknown:AddRef (This=0x79ba48) returned 0x3
	[0167.246] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.246] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.246] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x79ba4c) returned 0x0
	[0167.246] IMarshal:GetUnmarshalClass (in: This=0x79ba4c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.247] IUnknown:Release (This=0x79ba4c) returned 0x3
	[0167.247] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.247] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.247] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.247] IUnknown:Release (This=0x79ba48) returned 0x2
	[0167.247] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.247] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.247] IUnknown:QueryInterface (in: This=0x79ba48, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x79ba48) returned 0x0
	[0167.247] IUnknown:AddRef (This=0x79ba48) returned 0x4
	[0167.247] IUnknown:Release (This=0x79ba48) returned 0x3
	[0167.247] IUnknown:Release (This=0x79ba48) returned 0x2
	[0167.247] CoTaskMemFree (pv=0x783120) 
	[0167.247] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.247] IUnknown:AddRef (This=0x79ba48) returned 0x3
	[0167.247] IWbemClassObject:Get (in: This=0x79ba48, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.247] IWbemClassObject:Get (in: This=0x79ba48, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2148\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.247] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2148\"") returned 0x5e
	[0167.247] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2148\"") returned 0x5e
	[0167.248] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6c0
	[0167.248] SetEvent (hEvent=0x2bc) returned 1
	[0167.248] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6c0, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.250] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.250] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.250] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1ef8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1ef8) returned 0x0
	[0167.250] WbemDefPath:IUnknown:AddRef (This=0x7a1ef8) returned 0x3
	[0167.250] WbemDefPath:IUnknown:Release (This=0x7a1ef8) returned 0x2
	[0167.250] WbemDefPath:IWbemPath:SetText (This=0x7a1ef8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2148\"") returned 0x0
	[0167.250] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.250] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.250] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.251] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.251] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.251] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.251] IWbemClassObject:Get (in: This=0x79ba48, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f00d8*=0, plFlavor=0x28f00dc*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe", varVal2=0x0), pType=0x28f00d8*=8, plFlavor=0x28f00dc*=0) returned 0x0
	[0167.251] SysStringByteLen (bstr="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe") returned 0x64
	[0167.251] SysStringByteLen (bstr="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe") returned 0x64
	[0167.251] IWbemClassObject:Get (in: This=0x79ba48, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f00d8*=8, plFlavor=0x28f00dc*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe", varVal2=0x0), pType=0x28f00d8*=8, plFlavor=0x28f00dc*=0) returned 0x0
	[0167.251] SysStringByteLen (bstr="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe") returned 0x64
	[0167.251] SysStringByteLen (bstr="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe") returned 0x64
	[0167.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe", lpFilePart=0x0) returned 0x32
	[0167.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe" (normalized: "c:\\program files (x86)\\windowspowershell\\barca.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9188ec60, ftCreationTime.dwHighDateTime=0x1d7d562, ftLastAccessTime.dwLowDateTime=0x4287fcc0, ftLastAccessTime.dwHighDateTime=0x1d7f1b2, ftLastWriteTime.dwLowDateTime=0x4287fcc0, ftLastWriteTime.dwHighDateTime=0x1d7f1b2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.252] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.253] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\WindowsPowerShell\\barca.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28f02ac | out: lpData=0x28f02ac) returned 1
	[0167.253] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28f07f4, puLen=0x19f470) returned 1
	[0167.253] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f0364, puLen=0x19f3f0) returned 1
	[0167.253] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f0410, puLen=0x19f3f0) returned 1
	[0167.253] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f04b4, puLen=0x19f3f0) returned 1
	[0167.253] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f04f4, puLen=0x19f3f0) returned 1
	[0167.253] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f059c, puLen=0x19f3f0) returned 1
	[0167.266] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f0648, puLen=0x19f3f0) returned 1
	[0167.266] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f06ec, puLen=0x19f3f0) returned 1
	[0167.266] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f0794, puLen=0x19f3f0) returned 1
	[0167.266] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.266] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.266] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.266] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.266] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28f07f4, puLen=0x19f3e4) returned 1
	[0167.266] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.267] VerQueryValueW (in: pBlock=0x28f02ac, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28f02d4, puLen=0x19f3f4) returned 1
	[0167.267] CoTaskMemAlloc (cb=0x4) returned 0x783000
	[0167.269] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783000, puReturned=0x2892750 | out: apObjects=0x783000*=0x7aa9f8, puReturned=0x2892750*=0x1) returned 0x0
	[0167.277] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aa9f8) returned 0x0
	[0167.278] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.278] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.278] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.278] IUnknown:AddRef (This=0x7aa9f8) returned 0x3
	[0167.278] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.278] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.278] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aa9fc) returned 0x0
	[0167.278] IMarshal:GetUnmarshalClass (in: This=0x7aa9fc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.278] IUnknown:Release (This=0x7aa9fc) returned 0x3
	[0167.279] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.279] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.279] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.279] IUnknown:Release (This=0x7aa9f8) returned 0x2
	[0167.279] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.279] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.279] IUnknown:QueryInterface (in: This=0x7aa9f8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aa9f8) returned 0x0
	[0167.279] IUnknown:AddRef (This=0x7aa9f8) returned 0x4
	[0167.279] IUnknown:Release (This=0x7aa9f8) returned 0x3
	[0167.279] IUnknown:Release (This=0x7aa9f8) returned 0x2
	[0167.279] CoTaskMemFree (pv=0x783000) 
	[0167.279] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.279] IUnknown:AddRef (This=0x7aa9f8) returned 0x3
	[0167.279] IWbemClassObject:Get (in: This=0x7aa9f8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.279] IWbemClassObject:Get (in: This=0x7aa9f8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2068\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.279] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2068\"") returned 0x5e
	[0167.279] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2068\"") returned 0x5e
	[0167.280] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6c4
	[0167.280] SetEvent (hEvent=0x2bc) returned 1
	[0167.280] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6c4, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.283] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.283] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.283] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e88, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1e88) returned 0x0
	[0167.283] WbemDefPath:IUnknown:AddRef (This=0x7a1e88) returned 0x3
	[0167.283] WbemDefPath:IUnknown:Release (This=0x7a1e88) returned 0x2
	[0167.283] WbemDefPath:IWbemPath:SetText (This=0x7a1e88, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2068\"") returned 0x0
	[0167.283] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.283] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.283] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.284] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.284] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.284] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.284] IWbemClassObject:Get (in: This=0x7aa9f8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f2188*=0, plFlavor=0x28f218c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Defender\\bitkinex.exe", varVal2=0x0), pType=0x28f2188*=8, plFlavor=0x28f218c*=0) returned 0x0
	[0167.284] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\bitkinex.exe") returned 0x5c
	[0167.284] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\bitkinex.exe") returned 0x5c
	[0167.285] IWbemClassObject:Get (in: This=0x7aa9f8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f2188*=8, plFlavor=0x28f218c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Defender\\bitkinex.exe", varVal2=0x0), pType=0x28f2188*=8, plFlavor=0x28f218c*=0) returned 0x0
	[0167.285] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\bitkinex.exe") returned 0x5c
	[0167.285] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\bitkinex.exe") returned 0x5c
	[0167.285] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\bitkinex.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\bitkinex.exe", lpFilePart=0x0) returned 0x2e
	[0167.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\bitkinex.exe" (normalized: "c:\\program files\\windows defender\\bitkinex.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2727a400, ftCreationTime.dwHighDateTime=0x1d7ce6f, ftLastAccessTime.dwLowDateTime=0x6568ff50, ftLastAccessTime.dwHighDateTime=0x1d82416, ftLastWriteTime.dwLowDateTime=0x6568ff50, ftLastWriteTime.dwHighDateTime=0x1d82416, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.285] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Defender\\bitkinex.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.302] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Defender\\bitkinex.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28f2344 | out: lpData=0x28f2344) returned 1
	[0167.303] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28f288c, puLen=0x19f470) returned 1
	[0167.303] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f23fc, puLen=0x19f3f0) returned 1
	[0167.303] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f24a8, puLen=0x19f3f0) returned 1
	[0167.303] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f254c, puLen=0x19f3f0) returned 1
	[0167.303] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f258c, puLen=0x19f3f0) returned 1
	[0167.303] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f2634, puLen=0x19f3f0) returned 1
	[0167.303] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f26e0, puLen=0x19f3f0) returned 1
	[0167.303] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f2784, puLen=0x19f3f0) returned 1
	[0167.304] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f282c, puLen=0x19f3f0) returned 1
	[0167.304] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.304] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.305] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.305] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.305] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28f288c, puLen=0x19f3e4) returned 1
	[0167.305] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.306] VerQueryValueW (in: pBlock=0x28f2344, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28f236c, puLen=0x19f3f4) returned 1
	[0167.306] CoTaskMemAlloc (cb=0x4) returned 0x783120
	[0167.306] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783120, puReturned=0x2892750 | out: apObjects=0x783120*=0x7ab520, puReturned=0x2892750*=0x1) returned 0x0
	[0167.322] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ab520) returned 0x0
	[0167.323] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.323] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.323] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.323] IUnknown:AddRef (This=0x7ab520) returned 0x3
	[0167.323] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.323] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.323] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ab524) returned 0x0
	[0167.323] IMarshal:GetUnmarshalClass (in: This=0x7ab524, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.323] IUnknown:Release (This=0x7ab524) returned 0x3
	[0167.323] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.324] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.324] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.324] IUnknown:Release (This=0x7ab520) returned 0x2
	[0167.324] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.324] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.324] IUnknown:QueryInterface (in: This=0x7ab520, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ab520) returned 0x0
	[0167.324] IUnknown:AddRef (This=0x7ab520) returned 0x4
	[0167.324] IUnknown:Release (This=0x7ab520) returned 0x3
	[0167.324] IUnknown:Release (This=0x7ab520) returned 0x2
	[0167.324] CoTaskMemFree (pv=0x783120) 
	[0167.324] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.324] IUnknown:AddRef (This=0x7ab520) returned 0x3
	[0167.324] IWbemClassObject:Get (in: This=0x7ab520, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.324] IWbemClassObject:Get (in: This=0x7ab520, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2912\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.325] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2912\"") returned 0x5e
	[0167.325] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2912\"") returned 0x5e
	[0167.325] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6c8
	[0167.325] SetEvent (hEvent=0x2bc) returned 1
	[0167.326] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6c8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.334] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.334] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.334] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a24a8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a24a8) returned 0x0
	[0167.334] WbemDefPath:IUnknown:AddRef (This=0x7a24a8) returned 0x3
	[0167.334] WbemDefPath:IUnknown:Release (This=0x7a24a8) returned 0x2
	[0167.334] WbemDefPath:IWbemPath:SetText (This=0x7a24a8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2912\"") returned 0x0
	[0167.334] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.334] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.334] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.334] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.334] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.334] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.334] IWbemClassObject:Get (in: This=0x7ab520, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f4270*=0, plFlavor=0x28f4274*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows NT\\coreftp.exe", varVal2=0x0), pType=0x28f4270*=8, plFlavor=0x28f4274*=0) returned 0x0
	[0167.334] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\coreftp.exe") returned 0x4e
	[0167.334] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\coreftp.exe") returned 0x4e
	[0167.339] IWbemClassObject:Get (in: This=0x7ab520, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f4270*=8, plFlavor=0x28f4274*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows NT\\coreftp.exe", varVal2=0x0), pType=0x28f4270*=8, plFlavor=0x28f4274*=0) returned 0x0
	[0167.339] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\coreftp.exe") returned 0x4e
	[0167.339] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\coreftp.exe") returned 0x4e
	[0167.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\coreftp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\coreftp.exe", lpFilePart=0x0) returned 0x27
	[0167.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\coreftp.exe" (normalized: "c:\\program files\\windows nt\\coreftp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2004e80, ftCreationTime.dwHighDateTime=0x1d7e890, ftLastAccessTime.dwLowDateTime=0xa7981350, ftLastAccessTime.dwHighDateTime=0x1d80ec4, ftLastWriteTime.dwLowDateTime=0xa7981350, ftLastWriteTime.dwHighDateTime=0x1d80ec4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.340] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows NT\\coreftp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.340] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows NT\\coreftp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28f43fc | out: lpData=0x28f43fc) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28f4944, puLen=0x19f470) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f44b4, puLen=0x19f3f0) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f4560, puLen=0x19f3f0) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f4604, puLen=0x19f3f0) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f4644, puLen=0x19f3f0) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f46ec, puLen=0x19f3f0) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f4798, puLen=0x19f3f0) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f483c, puLen=0x19f3f0) returned 1
	[0167.341] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f48e4, puLen=0x19f3f0) returned 1
	[0167.342] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.342] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.342] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.342] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.342] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28f4944, puLen=0x19f3e4) returned 1
	[0167.342] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.342] VerQueryValueW (in: pBlock=0x28f43fc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28f4424, puLen=0x19f3f4) returned 1
	[0167.342] CoTaskMemAlloc (cb=0x4) returned 0x783080
	[0167.342] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783080, puReturned=0x2892750 | out: apObjects=0x783080*=0x7aa068, puReturned=0x2892750*=0x1) returned 0x0
	[0167.345] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aa068) returned 0x0
	[0167.345] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.345] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.345] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.345] IUnknown:AddRef (This=0x7aa068) returned 0x3
	[0167.345] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.345] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.345] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aa06c) returned 0x0
	[0167.346] IMarshal:GetUnmarshalClass (in: This=0x7aa06c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.346] IUnknown:Release (This=0x7aa06c) returned 0x3
	[0167.346] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.346] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.346] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.346] IUnknown:Release (This=0x7aa068) returned 0x2
	[0167.346] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.346] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.346] IUnknown:QueryInterface (in: This=0x7aa068, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aa068) returned 0x0
	[0167.346] IUnknown:AddRef (This=0x7aa068) returned 0x4
	[0167.347] IUnknown:Release (This=0x7aa068) returned 0x3
	[0167.347] IUnknown:Release (This=0x7aa068) returned 0x2
	[0167.347] CoTaskMemFree (pv=0x783080) 
	[0167.347] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.347] IUnknown:AddRef (This=0x7aa068) returned 0x3
	[0167.347] IWbemClassObject:Get (in: This=0x7aa068, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.347] IWbemClassObject:Get (in: This=0x7aa068, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3700\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.347] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3700\"") returned 0x5e
	[0167.347] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3700\"") returned 0x5e
	[0167.347] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6cc
	[0167.347] SetEvent (hEvent=0x2bc) returned 1
	[0167.348] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6cc, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.358] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.358] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2668, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2668) returned 0x0
	[0167.358] WbemDefPath:IUnknown:AddRef (This=0x7a2668) returned 0x3
	[0167.358] WbemDefPath:IUnknown:Release (This=0x7a2668) returned 0x2
	[0167.358] WbemDefPath:IWbemPath:SetText (This=0x7a2668, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3700\"") returned 0x0
	[0167.359] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.359] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.359] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.359] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.359] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.359] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.359] IWbemClassObject:Get (in: This=0x7aa068, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f62c4*=0, plFlavor=0x28f62c8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Uninstall Information\\far.exe", varVal2=0x0), pType=0x28f62c4*=8, plFlavor=0x28f62c8*=0) returned 0x0
	[0167.359] SysStringByteLen (bstr="C:\\Program Files\\Uninstall Information\\far.exe") returned 0x5c
	[0167.359] SysStringByteLen (bstr="C:\\Program Files\\Uninstall Information\\far.exe") returned 0x5c
	[0167.359] IWbemClassObject:Get (in: This=0x7aa068, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f62c4*=8, plFlavor=0x28f62c8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Uninstall Information\\far.exe", varVal2=0x0), pType=0x28f62c4*=8, plFlavor=0x28f62c8*=0) returned 0x0
	[0167.359] SysStringByteLen (bstr="C:\\Program Files\\Uninstall Information\\far.exe") returned 0x5c
	[0167.359] SysStringByteLen (bstr="C:\\Program Files\\Uninstall Information\\far.exe") returned 0x5c
	[0167.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Uninstall Information\\far.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Uninstall Information\\far.exe", lpFilePart=0x0) returned 0x2e
	[0167.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Uninstall Information\\far.exe" (normalized: "c:\\program files\\uninstall information\\far.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87e00, ftCreationTime.dwHighDateTime=0x1d81748, ftLastAccessTime.dwLowDateTime=0x7a88ec00, ftLastAccessTime.dwHighDateTime=0x1d82327, ftLastWriteTime.dwLowDateTime=0x7a88ec00, ftLastWriteTime.dwHighDateTime=0x1d82327, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.360] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Uninstall Information\\far.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.368] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Uninstall Information\\far.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28f6480 | out: lpData=0x28f6480) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28f69c8, puLen=0x19f470) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f6538, puLen=0x19f3f0) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f65e4, puLen=0x19f3f0) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f6688, puLen=0x19f3f0) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f66c8, puLen=0x19f3f0) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f6770, puLen=0x19f3f0) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f681c, puLen=0x19f3f0) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f68c0, puLen=0x19f3f0) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f6968, puLen=0x19f3f0) returned 1
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.369] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.370] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28f69c8, puLen=0x19f3e4) returned 1
	[0167.370] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.370] VerQueryValueW (in: pBlock=0x28f6480, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28f64a8, puLen=0x19f3f4) returned 1
	[0167.370] CoTaskMemAlloc (cb=0x4) returned 0x783000
	[0167.370] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783000, puReturned=0x2892750 | out: apObjects=0x783000*=0x7abb80, puReturned=0x2892750*=0x1) returned 0x0
	[0167.373] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7abb80) returned 0x0
	[0167.374] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.374] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.374] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.374] IUnknown:AddRef (This=0x7abb80) returned 0x3
	[0167.374] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.374] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.374] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7abb84) returned 0x0
	[0167.374] IMarshal:GetUnmarshalClass (in: This=0x7abb84, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.374] IUnknown:Release (This=0x7abb84) returned 0x3
	[0167.374] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.374] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.374] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.374] IUnknown:Release (This=0x7abb80) returned 0x2
	[0167.374] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.375] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.375] IUnknown:QueryInterface (in: This=0x7abb80, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7abb80) returned 0x0
	[0167.375] IUnknown:AddRef (This=0x7abb80) returned 0x4
	[0167.375] IUnknown:Release (This=0x7abb80) returned 0x3
	[0167.375] IUnknown:Release (This=0x7abb80) returned 0x2
	[0167.375] CoTaskMemFree (pv=0x783000) 
	[0167.375] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.375] IUnknown:AddRef (This=0x7abb80) returned 0x3
	[0167.375] IWbemClassObject:Get (in: This=0x7abb80, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.375] IWbemClassObject:Get (in: This=0x7abb80, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3412\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.375] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3412\"") returned 0x5e
	[0167.375] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3412\"") returned 0x5e
	[0167.375] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6d0
	[0167.375] SetEvent (hEvent=0x2bc) returned 1
	[0167.376] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6d0, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.382] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.382] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a20b8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a20b8) returned 0x0
	[0167.382] WbemDefPath:IUnknown:AddRef (This=0x7a20b8) returned 0x3
	[0167.382] WbemDefPath:IUnknown:Release (This=0x7a20b8) returned 0x2
	[0167.382] WbemDefPath:IWbemPath:SetText (This=0x7a20b8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3412\"") returned 0x0
	[0167.382] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.382] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.382] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.382] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.382] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.382] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.383] IWbemClassObject:Get (in: This=0x7abb80, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f8354*=0, plFlavor=0x28f8358*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Media Player\\filezilla.exe", varVal2=0x0), pType=0x28f8354*=8, plFlavor=0x28f8358*=0) returned 0x0
	[0167.383] SysStringByteLen (bstr="C:\\Program Files\\Windows Media Player\\filezilla.exe") returned 0x66
	[0167.383] SysStringByteLen (bstr="C:\\Program Files\\Windows Media Player\\filezilla.exe") returned 0x66
	[0167.383] IWbemClassObject:Get (in: This=0x7abb80, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28f8354*=8, plFlavor=0x28f8358*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Media Player\\filezilla.exe", varVal2=0x0), pType=0x28f8354*=8, plFlavor=0x28f8358*=0) returned 0x0
	[0167.383] SysStringByteLen (bstr="C:\\Program Files\\Windows Media Player\\filezilla.exe") returned 0x66
	[0167.383] SysStringByteLen (bstr="C:\\Program Files\\Windows Media Player\\filezilla.exe") returned 0x66
	[0167.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\filezilla.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\filezilla.exe", lpFilePart=0x0) returned 0x33
	[0167.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\filezilla.exe" (normalized: "c:\\program files\\windows media player\\filezilla.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80966ae0, ftCreationTime.dwHighDateTime=0x1d7a72c, ftLastAccessTime.dwLowDateTime=0x34a66b90, ftLastAccessTime.dwHighDateTime=0x1d81fd0, ftLastWriteTime.dwLowDateTime=0x34a66b90, ftLastWriteTime.dwHighDateTime=0x1d81fd0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.384] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Media Player\\filezilla.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.384] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Media Player\\filezilla.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28f8528 | out: lpData=0x28f8528) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28f8a70, puLen=0x19f470) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f85e0, puLen=0x19f3f0) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f868c, puLen=0x19f3f0) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f8730, puLen=0x19f3f0) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f8770, puLen=0x19f3f0) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f8818, puLen=0x19f3f0) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f88c4, puLen=0x19f3f0) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f8968, puLen=0x19f3f0) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28f8a10, puLen=0x19f3f0) returned 1
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.387] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28f8a70, puLen=0x19f3e4) returned 1
	[0167.387] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.388] VerQueryValueW (in: pBlock=0x28f8528, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28f8550, puLen=0x19f3f4) returned 1
	[0167.388] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.388] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7aa530, puReturned=0x2892750*=0x1) returned 0x0
	[0167.391] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aa530) returned 0x0
	[0167.391] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.391] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.391] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.392] IUnknown:AddRef (This=0x7aa530) returned 0x3
	[0167.392] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.392] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.392] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aa534) returned 0x0
	[0167.392] IMarshal:GetUnmarshalClass (in: This=0x7aa534, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.392] IUnknown:Release (This=0x7aa534) returned 0x3
	[0167.392] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.392] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.392] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.392] IUnknown:Release (This=0x7aa530) returned 0x2
	[0167.392] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.392] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.392] IUnknown:QueryInterface (in: This=0x7aa530, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aa530) returned 0x0
	[0167.392] IUnknown:AddRef (This=0x7aa530) returned 0x4
	[0167.392] IUnknown:Release (This=0x7aa530) returned 0x3
	[0167.393] IUnknown:Release (This=0x7aa530) returned 0x2
	[0167.393] CoTaskMemFree (pv=0x783170) 
	[0167.393] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.393] IUnknown:AddRef (This=0x7aa530) returned 0x3
	[0167.393] IWbemClassObject:Get (in: This=0x7aa530, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.393] IWbemClassObject:Get (in: This=0x7aa530, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3112\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.393] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3112\"") returned 0x5e
	[0167.393] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3112\"") returned 0x5e
	[0167.393] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6d4
	[0167.393] SetEvent (hEvent=0x2bc) returned 1
	[0167.393] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6d4, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.454] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.454] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.454] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1d38, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1d38) returned 0x0
	[0167.454] WbemDefPath:IUnknown:AddRef (This=0x7a1d38) returned 0x3
	[0167.454] WbemDefPath:IUnknown:Release (This=0x7a1d38) returned 0x2
	[0167.454] WbemDefPath:IWbemPath:SetText (This=0x7a1d38, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3112\"") returned 0x0
	[0167.455] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.455] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.455] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.455] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.455] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.455] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.456] IWbemClassObject:Get (in: This=0x7aa530, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28fa408*=0, plFlavor=0x28fa40c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe", varVal2=0x0), pType=0x28fa408*=8, plFlavor=0x28fa40c*=0) returned 0x0
	[0167.456] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe") returned 0x60
	[0167.456] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe") returned 0x60
	[0167.456] IWbemClassObject:Get (in: This=0x7aa530, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28fa408*=8, plFlavor=0x28fa40c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe", varVal2=0x0), pType=0x28fa408*=8, plFlavor=0x28fa40c*=0) returned 0x0
	[0167.456] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe") returned 0x60
	[0167.456] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe") returned 0x60
	[0167.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe", lpFilePart=0x0) returned 0x30
	[0167.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe" (normalized: "c:\\program files (x86)\\windows mail\\flashfxp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc853ee00, ftCreationTime.dwHighDateTime=0x1d7add2, ftLastAccessTime.dwLowDateTime=0xdf613f40, ftLastAccessTime.dwHighDateTime=0x1d7be5c, ftLastWriteTime.dwLowDateTime=0xdf613f40, ftLastWriteTime.dwHighDateTime=0x1d7be5c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.457] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.458] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Mail\\flashfxp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28fa5d0 | out: lpData=0x28fa5d0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28fab18, puLen=0x19f470) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fa688, puLen=0x19f3f0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fa734, puLen=0x19f3f0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fa7d8, puLen=0x19f3f0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fa818, puLen=0x19f3f0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fa8c0, puLen=0x19f3f0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fa96c, puLen=0x19f3f0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28faa10, puLen=0x19f3f0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28faab8, puLen=0x19f3f0) returned 1
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.459] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28fab18, puLen=0x19f3e4) returned 1
	[0167.459] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.460] VerQueryValueW (in: pBlock=0x28fa5d0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28fa5f8, puLen=0x19f3f4) returned 1
	[0167.460] CoTaskMemAlloc (cb=0x4) returned 0x782fe0
	[0167.460] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fe0, puReturned=0x2892750 | out: apObjects=0x782fe0*=0x7ab388, puReturned=0x2892750*=0x1) returned 0x0
	[0167.464] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ab388) returned 0x0
	[0167.464] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.465] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.465] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.465] IUnknown:AddRef (This=0x7ab388) returned 0x3
	[0167.465] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.465] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.465] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ab38c) returned 0x0
	[0167.465] IMarshal:GetUnmarshalClass (in: This=0x7ab38c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.465] IUnknown:Release (This=0x7ab38c) returned 0x3
	[0167.465] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.465] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.465] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.465] IUnknown:Release (This=0x7ab388) returned 0x2
	[0167.465] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.465] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.465] IUnknown:QueryInterface (in: This=0x7ab388, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ab388) returned 0x0
	[0167.465] IUnknown:AddRef (This=0x7ab388) returned 0x4
	[0167.465] IUnknown:Release (This=0x7ab388) returned 0x3
	[0167.465] IUnknown:Release (This=0x7ab388) returned 0x2
	[0167.465] CoTaskMemFree (pv=0x782fe0) 
	[0167.466] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.466] IUnknown:AddRef (This=0x7ab388) returned 0x3
	[0167.466] IWbemClassObject:Get (in: This=0x7ab388, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.466] IWbemClassObject:Get (in: This=0x7ab388, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3784\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.466] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3784\"") returned 0x5e
	[0167.466] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3784\"") returned 0x5e
	[0167.466] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6d8
	[0167.466] SetEvent (hEvent=0x2bc) returned 1
	[0167.466] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6d8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.469] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.469] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1da8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1da8) returned 0x0
	[0167.469] WbemDefPath:IUnknown:AddRef (This=0x7a1da8) returned 0x3
	[0167.469] WbemDefPath:IUnknown:Release (This=0x7a1da8) returned 0x2
	[0167.469] WbemDefPath:IWbemPath:SetText (This=0x7a1da8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3784\"") returned 0x0
	[0167.469] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.469] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.469] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.469] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.470] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.470] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.470] IWbemClassObject:Get (in: This=0x7ab388, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28fc4d4*=0, plFlavor=0x28fc4d8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Microsoft Office\\fling.exe", varVal2=0x0), pType=0x28fc4d4*=8, plFlavor=0x28fc4d8*=0) returned 0x0
	[0167.470] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft Office\\fling.exe") returned 0x62
	[0167.470] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft Office\\fling.exe") returned 0x62
	[0167.470] IWbemClassObject:Get (in: This=0x7ab388, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28fc4d4*=8, plFlavor=0x28fc4d8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Microsoft Office\\fling.exe", varVal2=0x0), pType=0x28fc4d4*=8, plFlavor=0x28fc4d8*=0) returned 0x0
	[0167.470] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft Office\\fling.exe") returned 0x62
	[0167.470] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft Office\\fling.exe") returned 0x62
	[0167.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\fling.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\fling.exe", lpFilePart=0x0) returned 0x31
	[0167.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\fling.exe" (normalized: "c:\\program files (x86)\\microsoft office\\fling.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c93afc0, ftCreationTime.dwHighDateTime=0x1d7c3cd, ftLastAccessTime.dwLowDateTime=0x4ac51b60, ftLastAccessTime.dwHighDateTime=0x1d82778, ftLastWriteTime.dwLowDateTime=0x4ac51b60, ftLastWriteTime.dwHighDateTime=0x1d82778, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.471] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Microsoft Office\\fling.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.472] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Microsoft Office\\fling.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28fc69c | out: lpData=0x28fc69c) returned 1
	[0167.472] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28fcbe4, puLen=0x19f470) returned 1
	[0167.472] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fc754, puLen=0x19f3f0) returned 1
	[0167.472] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fc800, puLen=0x19f3f0) returned 1
	[0167.472] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fc8a4, puLen=0x19f3f0) returned 1
	[0167.472] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fc8e4, puLen=0x19f3f0) returned 1
	[0167.472] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fc98c, puLen=0x19f3f0) returned 1
	[0167.472] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fca38, puLen=0x19f3f0) returned 1
	[0167.472] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fcadc, puLen=0x19f3f0) returned 1
	[0167.473] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fcb84, puLen=0x19f3f0) returned 1
	[0167.473] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.473] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.473] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.473] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.473] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28fcbe4, puLen=0x19f3e4) returned 1
	[0167.473] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.473] VerQueryValueW (in: pBlock=0x28fc69c, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28fc6c4, puLen=0x19f3f4) returned 1
	[0167.473] CoTaskMemAlloc (cb=0x4) returned 0x782fc0
	[0167.473] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fc0, puReturned=0x2892750 | out: apObjects=0x782fc0*=0x7aaec0, puReturned=0x2892750*=0x1) returned 0x0
	[0167.479] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aaec0) returned 0x0
	[0167.480] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.480] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.480] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.480] IUnknown:AddRef (This=0x7aaec0) returned 0x3
	[0167.480] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.480] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.480] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aaec4) returned 0x0
	[0167.480] IMarshal:GetUnmarshalClass (in: This=0x7aaec4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.480] IUnknown:Release (This=0x7aaec4) returned 0x3
	[0167.480] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.480] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.480] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.480] IUnknown:Release (This=0x7aaec0) returned 0x2
	[0167.480] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.480] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.480] IUnknown:QueryInterface (in: This=0x7aaec0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aaec0) returned 0x0
	[0167.480] IUnknown:AddRef (This=0x7aaec0) returned 0x4
	[0167.480] IUnknown:Release (This=0x7aaec0) returned 0x3
	[0167.480] IUnknown:Release (This=0x7aaec0) returned 0x2
	[0167.481] CoTaskMemFree (pv=0x782fc0) 
	[0167.481] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.481] IUnknown:AddRef (This=0x7aaec0) returned 0x3
	[0167.481] IWbemClassObject:Get (in: This=0x7aaec0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.481] IWbemClassObject:Get (in: This=0x7aaec0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2884\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.481] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2884\"") returned 0x5e
	[0167.481] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2884\"") returned 0x5e
	[0167.481] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6dc
	[0167.481] SetEvent (hEvent=0x2bc) returned 1
	[0167.481] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6dc, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.484] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.484] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a25f8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a25f8) returned 0x0
	[0167.484] WbemDefPath:IUnknown:AddRef (This=0x7a25f8) returned 0x3
	[0167.484] WbemDefPath:IUnknown:Release (This=0x7a25f8) returned 0x2
	[0167.484] WbemDefPath:IWbemPath:SetText (This=0x7a25f8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2884\"") returned 0x0
	[0167.484] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.484] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.484] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.485] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.485] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.485] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.485] IWbemClassObject:Get (in: This=0x7aaec0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28fe568*=0, plFlavor=0x28fe56c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe", varVal2=0x0), pType=0x28fe568*=8, plFlavor=0x28fe56c*=0) returned 0x0
	[0167.485] SysStringByteLen (bstr="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe") returned 0x6c
	[0167.485] SysStringByteLen (bstr="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe") returned 0x6c
	[0167.485] IWbemClassObject:Get (in: This=0x7aaec0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28fe568*=8, plFlavor=0x28fe56c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe", varVal2=0x0), pType=0x28fe568*=8, plFlavor=0x28fe56c*=0) returned 0x0
	[0167.485] SysStringByteLen (bstr="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe") returned 0x6c
	[0167.485] SysStringByteLen (bstr="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe") returned 0x6c
	[0167.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe", lpFilePart=0x0) returned 0x36
	[0167.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe" (normalized: "c:\\program files (x86)\\common files\\foxmailincmail.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd29600, ftCreationTime.dwHighDateTime=0x1d7a7d9, ftLastAccessTime.dwLowDateTime=0xcf3ed6c0, ftLastAccessTime.dwHighDateTime=0x1d7e41f, ftLastWriteTime.dwLowDateTime=0xcf3ed6c0, ftLastWriteTime.dwHighDateTime=0x1d7e41f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.486] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.487] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Common Files\\foxmailincmail.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x28fe754 | out: lpData=0x28fe754) returned 1
	[0167.487] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x28fec9c, puLen=0x19f470) returned 1
	[0167.487] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fe80c, puLen=0x19f3f0) returned 1
	[0167.487] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fe8b8, puLen=0x19f3f0) returned 1
	[0167.487] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fe95c, puLen=0x19f3f0) returned 1
	[0167.487] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fe99c, puLen=0x19f3f0) returned 1
	[0167.487] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fea44, puLen=0x19f3f0) returned 1
	[0167.487] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28feaf0, puLen=0x19f3f0) returned 1
	[0167.487] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28feb94, puLen=0x19f3f0) returned 1
	[0167.488] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x28fec3c, puLen=0x19f3f0) returned 1
	[0167.488] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.488] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.488] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.488] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.488] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x28fec9c, puLen=0x19f3e4) returned 1
	[0167.488] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.488] VerQueryValueW (in: pBlock=0x28fe754, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x28fe77c, puLen=0x19f3f4) returned 1
	[0167.488] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.488] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7ab6b8, puReturned=0x2892750*=0x1) returned 0x0
	[0167.492] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ab6b8) returned 0x0
	[0167.493] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.493] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.493] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.493] IUnknown:AddRef (This=0x7ab6b8) returned 0x3
	[0167.493] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.493] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.493] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ab6bc) returned 0x0
	[0167.493] IMarshal:GetUnmarshalClass (in: This=0x7ab6bc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.493] IUnknown:Release (This=0x7ab6bc) returned 0x3
	[0167.493] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.493] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.493] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.493] IUnknown:Release (This=0x7ab6b8) returned 0x2
	[0167.493] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.493] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.493] IUnknown:QueryInterface (in: This=0x7ab6b8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ab6b8) returned 0x0
	[0167.494] IUnknown:AddRef (This=0x7ab6b8) returned 0x4
	[0167.494] IUnknown:Release (This=0x7ab6b8) returned 0x3
	[0167.494] IUnknown:Release (This=0x7ab6b8) returned 0x2
	[0167.494] CoTaskMemFree (pv=0x783170) 
	[0167.494] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.494] IUnknown:AddRef (This=0x7ab6b8) returned 0x3
	[0167.494] IWbemClassObject:Get (in: This=0x7ab6b8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.494] IWbemClassObject:Get (in: This=0x7ab6b8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3088\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.494] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3088\"") returned 0x5e
	[0167.494] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3088\"") returned 0x5e
	[0167.494] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6e0
	[0167.494] SetEvent (hEvent=0x2bc) returned 1
	[0167.494] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6e0, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.497] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.497] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.497] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1fd8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1fd8) returned 0x0
	[0167.498] WbemDefPath:IUnknown:AddRef (This=0x7a1fd8) returned 0x3
	[0167.498] WbemDefPath:IUnknown:Release (This=0x7a1fd8) returned 0x2
	[0167.498] WbemDefPath:IWbemPath:SetText (This=0x7a1fd8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3088\"") returned 0x0
	[0167.498] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.498] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.498] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.498] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.498] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.498] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.498] IWbemClassObject:Get (in: This=0x7ab6b8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2900680*=0, plFlavor=0x2900684*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe", varVal2=0x0), pType=0x2900680*=8, plFlavor=0x2900684*=0) returned 0x0
	[0167.498] SysStringByteLen (bstr="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe") returned 0x6a
	[0167.498] SysStringByteLen (bstr="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe") returned 0x6a
	[0167.498] IWbemClassObject:Get (in: This=0x7ab6b8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2900680*=8, plFlavor=0x2900684*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe", varVal2=0x0), pType=0x2900680*=8, plFlavor=0x2900684*=0) returned 0x0
	[0167.498] SysStringByteLen (bstr="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe") returned 0x6a
	[0167.498] SysStringByteLen (bstr="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe") returned 0x6a
	[0167.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe", lpFilePart=0x0) returned 0x35
	[0167.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe" (normalized: "c:\\program files\\windows sidebar\\gmailnotifierpro.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f08170, ftCreationTime.dwHighDateTime=0x1d7a977, ftLastAccessTime.dwLowDateTime=0xe7d768c0, ftLastAccessTime.dwHighDateTime=0x1d817d0, ftLastWriteTime.dwLowDateTime=0xe7d768c0, ftLastWriteTime.dwHighDateTime=0x1d817d0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.499] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.500] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Sidebar\\gmailnotifierpro.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2900860 | out: lpData=0x2900860) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2900da8, puLen=0x19f470) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2900918, puLen=0x19f3f0) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29009c4, puLen=0x19f3f0) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2900a68, puLen=0x19f3f0) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2900aa8, puLen=0x19f3f0) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2900b50, puLen=0x19f3f0) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2900bfc, puLen=0x19f3f0) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2900ca0, puLen=0x19f3f0) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2900d48, puLen=0x19f3f0) returned 1
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.501] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.502] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2900da8, puLen=0x19f3e4) returned 1
	[0167.502] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.502] VerQueryValueW (in: pBlock=0x2900860, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2900888, puLen=0x19f3f4) returned 1
	[0167.502] CoTaskMemAlloc (cb=0x4) returned 0x782fc0
	[0167.502] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fc0, puReturned=0x2892750 | out: apObjects=0x782fc0*=0x7abd18, puReturned=0x2892750*=0x1) returned 0x0
	[0167.504] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7abd18) returned 0x0
	[0167.505] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.505] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.505] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.505] IUnknown:AddRef (This=0x7abd18) returned 0x3
	[0167.505] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.505] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.505] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7abd1c) returned 0x0
	[0167.505] IMarshal:GetUnmarshalClass (in: This=0x7abd1c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.505] IUnknown:Release (This=0x7abd1c) returned 0x3
	[0167.505] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.506] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.506] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.506] IUnknown:Release (This=0x7abd18) returned 0x2
	[0167.506] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.506] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.506] IUnknown:QueryInterface (in: This=0x7abd18, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7abd18) returned 0x0
	[0167.506] IUnknown:AddRef (This=0x7abd18) returned 0x4
	[0167.506] IUnknown:Release (This=0x7abd18) returned 0x3
	[0167.506] IUnknown:Release (This=0x7abd18) returned 0x2
	[0167.506] CoTaskMemFree (pv=0x782fc0) 
	[0167.506] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.506] IUnknown:AddRef (This=0x7abd18) returned 0x3
	[0167.506] IWbemClassObject:Get (in: This=0x7abd18, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.507] IWbemClassObject:Get (in: This=0x7abd18, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2212\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.507] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2212\"") returned 0x5e
	[0167.507] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2212\"") returned 0x5e
	[0167.507] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6e4
	[0167.507] SetEvent (hEvent=0x2bc) returned 1
	[0167.507] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6e4, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.513] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.513] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.513] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1f68, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1f68) returned 0x0
	[0167.513] WbemDefPath:IUnknown:AddRef (This=0x7a1f68) returned 0x3
	[0167.513] WbemDefPath:IUnknown:Release (This=0x7a1f68) returned 0x2
	[0167.513] WbemDefPath:IWbemPath:SetText (This=0x7a1f68, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2212\"") returned 0x0
	[0167.514] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.514] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.514] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.514] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.514] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.514] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.514] IWbemClassObject:Get (in: This=0x7abd18, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2902788*=0, plFlavor=0x290278c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Microsoft Office\\icq.exe", varVal2=0x0), pType=0x2902788*=8, plFlavor=0x290278c*=0) returned 0x0
	[0167.514] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft Office\\icq.exe") returned 0x5e
	[0167.515] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft Office\\icq.exe") returned 0x5e
	[0167.515] IWbemClassObject:Get (in: This=0x7abd18, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2902788*=8, plFlavor=0x290278c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Microsoft Office\\icq.exe", varVal2=0x0), pType=0x2902788*=8, plFlavor=0x290278c*=0) returned 0x0
	[0167.515] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft Office\\icq.exe") returned 0x5e
	[0167.515] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft Office\\icq.exe") returned 0x5e
	[0167.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\icq.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\icq.exe", lpFilePart=0x0) returned 0x2f
	[0167.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\icq.exe" (normalized: "c:\\program files (x86)\\microsoft office\\icq.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42da610, ftCreationTime.dwHighDateTime=0x1d7b053, ftLastAccessTime.dwLowDateTime=0x76119590, ftLastAccessTime.dwHighDateTime=0x1d80758, ftLastWriteTime.dwLowDateTime=0x76119590, ftLastWriteTime.dwHighDateTime=0x1d80758, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.515] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Microsoft Office\\icq.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.519] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Microsoft Office\\icq.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2902944 | out: lpData=0x2902944) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2902e8c, puLen=0x19f470) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29029fc, puLen=0x19f3f0) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2902aa8, puLen=0x19f3f0) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2902b4c, puLen=0x19f3f0) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2902b8c, puLen=0x19f3f0) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2902c34, puLen=0x19f3f0) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2902ce0, puLen=0x19f3f0) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2902d84, puLen=0x19f3f0) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2902e2c, puLen=0x19f3f0) returned 1
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.520] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2902e8c, puLen=0x19f3e4) returned 1
	[0167.520] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.521] VerQueryValueW (in: pBlock=0x2902944, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x290296c, puLen=0x19f3f4) returned 1
	[0167.521] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.521] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7aa200, puReturned=0x2892750*=0x1) returned 0x0
	[0167.526] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aa200) returned 0x0
	[0167.527] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.527] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.527] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.527] IUnknown:AddRef (This=0x7aa200) returned 0x3
	[0167.527] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.527] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.527] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aa204) returned 0x0
	[0167.528] IMarshal:GetUnmarshalClass (in: This=0x7aa204, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.528] IUnknown:Release (This=0x7aa204) returned 0x3
	[0167.528] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.528] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.528] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.528] IUnknown:Release (This=0x7aa200) returned 0x2
	[0167.528] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.528] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.528] IUnknown:QueryInterface (in: This=0x7aa200, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aa200) returned 0x0
	[0167.528] IUnknown:AddRef (This=0x7aa200) returned 0x4
	[0167.528] IUnknown:Release (This=0x7aa200) returned 0x3
	[0167.528] IUnknown:Release (This=0x7aa200) returned 0x2
	[0167.528] CoTaskMemFree (pv=0x783170) 
	[0167.528] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.528] IUnknown:AddRef (This=0x7aa200) returned 0x3
	[0167.528] IWbemClassObject:Get (in: This=0x7aa200, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.529] IWbemClassObject:Get (in: This=0x7aa200, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"752\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.529] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"752\"") returned 0x5c
	[0167.529] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"752\"") returned 0x5c
	[0167.529] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6e8
	[0167.529] SetEvent (hEvent=0x2bc) returned 1
	[0167.530] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6e8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.539] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.539] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.539] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e18, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1e18) returned 0x0
	[0167.539] WbemDefPath:IUnknown:AddRef (This=0x7a1e18) returned 0x3
	[0167.539] WbemDefPath:IUnknown:Release (This=0x7a1e18) returned 0x2
	[0167.539] WbemDefPath:IWbemPath:SetText (This=0x7a1e18, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"752\"") returned 0x0
	[0167.539] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.539] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.539] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.539] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.539] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.539] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.540] IWbemClassObject:Get (in: This=0x7aa200, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2904810*=0, plFlavor=0x2904814*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe", varVal2=0x0), pType=0x2904810*=8, plFlavor=0x2904814*=0) returned 0x0
	[0167.540] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe") returned 0x70
	[0167.540] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe") returned 0x70
	[0167.540] IWbemClassObject:Get (in: This=0x7aa200, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2904810*=8, plFlavor=0x2904814*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe", varVal2=0x0), pType=0x2904810*=8, plFlavor=0x2904814*=0) returned 0x0
	[0167.540] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe") returned 0x70
	[0167.540] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe") returned 0x70
	[0167.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe", lpFilePart=0x0) returned 0x38
	[0167.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe" (normalized: "c:\\program files (x86)\\windows media player\\leechftp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x280e02e0, ftCreationTime.dwHighDateTime=0x1d7c8bd, ftLastAccessTime.dwLowDateTime=0xb8373c20, ftLastAccessTime.dwHighDateTime=0x1d7cf06, ftLastWriteTime.dwLowDateTime=0xb8373c20, ftLastWriteTime.dwHighDateTime=0x1d7cf06, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.541] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.547] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Media Player\\leechftp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2904a08 | out: lpData=0x2904a08) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2904f50, puLen=0x19f470) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2904ac0, puLen=0x19f3f0) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2904b6c, puLen=0x19f3f0) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2904c10, puLen=0x19f3f0) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2904c50, puLen=0x19f3f0) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2904cf8, puLen=0x19f3f0) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2904da4, puLen=0x19f3f0) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2904e48, puLen=0x19f3f0) returned 1
	[0167.548] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2904ef0, puLen=0x19f3f0) returned 1
	[0167.549] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.549] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.549] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.549] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.549] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2904f50, puLen=0x19f3e4) returned 1
	[0167.549] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.549] VerQueryValueW (in: pBlock=0x2904a08, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2904a30, puLen=0x19f3f4) returned 1
	[0167.549] CoTaskMemAlloc (cb=0x4) returned 0x783000
	[0167.549] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783000, puReturned=0x2892750 | out: apObjects=0x783000*=0x7abeb0, puReturned=0x2892750*=0x1) returned 0x0
	[0167.553] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7abeb0) returned 0x0
	[0167.553] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.553] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.553] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.554] IUnknown:AddRef (This=0x7abeb0) returned 0x3
	[0167.554] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.554] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.554] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7abeb4) returned 0x0
	[0167.554] IMarshal:GetUnmarshalClass (in: This=0x7abeb4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.554] IUnknown:Release (This=0x7abeb4) returned 0x3
	[0167.554] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.554] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.554] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.554] IUnknown:Release (This=0x7abeb0) returned 0x2
	[0167.554] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.555] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.555] IUnknown:QueryInterface (in: This=0x7abeb0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7abeb0) returned 0x0
	[0167.555] IUnknown:AddRef (This=0x7abeb0) returned 0x4
	[0167.555] IUnknown:Release (This=0x7abeb0) returned 0x3
	[0167.555] IUnknown:Release (This=0x7abeb0) returned 0x2
	[0167.555] CoTaskMemFree (pv=0x783000) 
	[0167.555] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.555] IUnknown:AddRef (This=0x7abeb0) returned 0x3
	[0167.555] IWbemClassObject:Get (in: This=0x7abeb0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.555] IWbemClassObject:Get (in: This=0x7abeb0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2820\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.555] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2820\"") returned 0x5e
	[0167.555] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2820\"") returned 0x5e
	[0167.555] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6ec
	[0167.556] SetEvent (hEvent=0x2bc) returned 1
	[0167.556] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6ec, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.563] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.563] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a23c8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a23c8) returned 0x0
	[0167.563] WbemDefPath:IUnknown:AddRef (This=0x7a23c8) returned 0x3
	[0167.563] WbemDefPath:IUnknown:Release (This=0x7a23c8) returned 0x2
	[0167.563] WbemDefPath:IWbemPath:SetText (This=0x7a23c8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2820\"") returned 0x0
	[0167.563] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.563] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.563] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.564] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.564] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.564] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.564] IWbemClassObject:Get (in: This=0x7abeb0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2906908*=0, plFlavor=0x290690c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\ncftp.exe", varVal2=0x0), pType=0x2906908*=8, plFlavor=0x290690c*=0) returned 0x0
	[0167.564] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\ncftp.exe") returned 0x58
	[0167.564] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\ncftp.exe") returned 0x58
	[0167.564] IWbemClassObject:Get (in: This=0x7abeb0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2906908*=8, plFlavor=0x290690c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\ncftp.exe", varVal2=0x0), pType=0x2906908*=8, plFlavor=0x290690c*=0) returned 0x0
	[0167.564] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\ncftp.exe") returned 0x58
	[0167.564] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\ncftp.exe") returned 0x58
	[0167.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\ncftp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\ncftp.exe", lpFilePart=0x0) returned 0x2c
	[0167.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\ncftp.exe" (normalized: "c:\\program files\\internet explorer\\ncftp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53a6cbf0, ftCreationTime.dwHighDateTime=0x1d7c302, ftLastAccessTime.dwLowDateTime=0xd969bfc0, ftLastAccessTime.dwHighDateTime=0x1d7fae5, ftLastWriteTime.dwLowDateTime=0xd969bfc0, ftLastWriteTime.dwHighDateTime=0x1d7fae5, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.567] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\ncftp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.568] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\ncftp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2906ab8 | out: lpData=0x2906ab8) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2907000, puLen=0x19f470) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2906b70, puLen=0x19f3f0) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2906c1c, puLen=0x19f3f0) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2906cc0, puLen=0x19f3f0) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2906d00, puLen=0x19f3f0) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2906da8, puLen=0x19f3f0) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2906e54, puLen=0x19f3f0) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2906ef8, puLen=0x19f3f0) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2906fa0, puLen=0x19f3f0) returned 1
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.569] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.570] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.570] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.570] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2907000, puLen=0x19f3e4) returned 1
	[0167.570] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.570] VerQueryValueW (in: pBlock=0x2906ab8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2906ae0, puLen=0x19f3f4) returned 1
	[0167.570] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.570] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7ab058, puReturned=0x2892750*=0x1) returned 0x0
	[0167.573] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ab058) returned 0x0
	[0167.574] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.574] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.574] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.574] IUnknown:AddRef (This=0x7ab058) returned 0x3
	[0167.574] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.574] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.574] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ab05c) returned 0x0
	[0167.574] IMarshal:GetUnmarshalClass (in: This=0x7ab05c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.574] IUnknown:Release (This=0x7ab05c) returned 0x3
	[0167.575] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.575] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.575] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.575] IUnknown:Release (This=0x7ab058) returned 0x2
	[0167.575] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.575] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.575] IUnknown:QueryInterface (in: This=0x7ab058, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ab058) returned 0x0
	[0167.575] IUnknown:AddRef (This=0x7ab058) returned 0x4
	[0167.575] IUnknown:Release (This=0x7ab058) returned 0x3
	[0167.575] IUnknown:Release (This=0x7ab058) returned 0x2
	[0167.575] CoTaskMemFree (pv=0x783170) 
	[0167.575] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.575] IUnknown:AddRef (This=0x7ab058) returned 0x3
	[0167.575] IWbemClassObject:Get (in: This=0x7ab058, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.576] IWbemClassObject:Get (in: This=0x7ab058, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2036\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.576] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2036\"") returned 0x5e
	[0167.576] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2036\"") returned 0x5e
	[0167.576] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6f0
	[0167.576] SetEvent (hEvent=0x2bc) returned 1
	[0167.576] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6f0, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.582] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.582] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.582] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2198, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2198) returned 0x0
	[0167.582] WbemDefPath:IUnknown:AddRef (This=0x7a2198) returned 0x3
	[0167.582] WbemDefPath:IUnknown:Release (This=0x7a2198) returned 0x2
	[0167.582] WbemDefPath:IWbemPath:SetText (This=0x7a2198, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2036\"") returned 0x0
	[0167.582] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.582] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.582] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.582] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.582] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.582] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.582] IWbemClassObject:Get (in: This=0x7ab058, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29089a0*=0, plFlavor=0x29089a4*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Photo Viewer\\notepad.exe", varVal2=0x0), pType=0x29089a0*=8, plFlavor=0x29089a4*=0) returned 0x0
	[0167.582] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\notepad.exe") returned 0x62
	[0167.582] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\notepad.exe") returned 0x62
	[0167.583] IWbemClassObject:Get (in: This=0x7ab058, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29089a0*=8, plFlavor=0x29089a4*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Photo Viewer\\notepad.exe", varVal2=0x0), pType=0x29089a0*=8, plFlavor=0x29089a4*=0) returned 0x0
	[0167.583] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\notepad.exe") returned 0x62
	[0167.583] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\notepad.exe") returned 0x62
	[0167.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\notepad.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\notepad.exe", lpFilePart=0x0) returned 0x31
	[0167.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\notepad.exe" (normalized: "c:\\program files\\windows photo viewer\\notepad.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2a3520, ftCreationTime.dwHighDateTime=0x1d7b1a0, ftLastAccessTime.dwLowDateTime=0x68f23940, ftLastAccessTime.dwHighDateTime=0x1d8284c, ftLastWriteTime.dwLowDateTime=0x68f23940, ftLastWriteTime.dwHighDateTime=0x1d8284c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.583] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Photo Viewer\\notepad.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.587] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Photo Viewer\\notepad.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2908b68 | out: lpData=0x2908b68) returned 1
	[0167.587] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x29090b0, puLen=0x19f470) returned 1
	[0167.587] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2908c20, puLen=0x19f3f0) returned 1
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2908ccc, puLen=0x19f3f0) returned 1
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2908d70, puLen=0x19f3f0) returned 1
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2908db0, puLen=0x19f3f0) returned 1
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2908e58, puLen=0x19f3f0) returned 1
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2908f04, puLen=0x19f3f0) returned 1
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2908fa8, puLen=0x19f3f0) returned 1
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2909050, puLen=0x19f3f0) returned 1
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x29090b0, puLen=0x19f3e4) returned 1
	[0167.588] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.588] VerQueryValueW (in: pBlock=0x2908b68, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2908b90, puLen=0x19f3f4) returned 1
	[0167.588] CoTaskMemAlloc (cb=0x4) returned 0x783030
	[0167.588] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783030, puReturned=0x2892750 | out: apObjects=0x783030*=0x7ab1f0, puReturned=0x2892750*=0x1) returned 0x0
	[0167.591] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ab1f0) returned 0x0
	[0167.591] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.591] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.591] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.591] IUnknown:AddRef (This=0x7ab1f0) returned 0x3
	[0167.592] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.592] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.592] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ab1f4) returned 0x0
	[0167.592] IMarshal:GetUnmarshalClass (in: This=0x7ab1f4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.592] IUnknown:Release (This=0x7ab1f4) returned 0x3
	[0167.592] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.592] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.592] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.592] IUnknown:Release (This=0x7ab1f0) returned 0x2
	[0167.592] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.592] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.592] IUnknown:QueryInterface (in: This=0x7ab1f0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ab1f0) returned 0x0
	[0167.592] IUnknown:AddRef (This=0x7ab1f0) returned 0x4
	[0167.593] IUnknown:Release (This=0x7ab1f0) returned 0x3
	[0167.593] IUnknown:Release (This=0x7ab1f0) returned 0x2
	[0167.593] CoTaskMemFree (pv=0x783030) 
	[0167.593] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.593] IUnknown:AddRef (This=0x7ab1f0) returned 0x3
	[0167.593] IWbemClassObject:Get (in: This=0x7ab1f0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.593] IWbemClassObject:Get (in: This=0x7ab1f0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4024\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.593] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4024\"") returned 0x5e
	[0167.593] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4024\"") returned 0x5e
	[0167.593] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6f4
	[0167.593] SetEvent (hEvent=0x2bc) returned 1
	[0167.594] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6f4, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.598] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.598] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1be8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1be8) returned 0x0
	[0167.598] WbemDefPath:IUnknown:AddRef (This=0x7a1be8) returned 0x3
	[0167.598] WbemDefPath:IUnknown:Release (This=0x7a1be8) returned 0x2
	[0167.598] WbemDefPath:IWbemPath:SetText (This=0x7a1be8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4024\"") returned 0x0
	[0167.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.599] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.599] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.599] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.599] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.599] IWbemClassObject:Get (in: This=0x7ab1f0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290aa4c*=0, plFlavor=0x290aa50*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\MSBuild\\operamail.exe", varVal2=0x0), pType=0x290aa4c*=8, plFlavor=0x290aa50*=0) returned 0x0
	[0167.599] SysStringByteLen (bstr="C:\\Program Files (x86)\\MSBuild\\operamail.exe") returned 0x58
	[0167.599] SysStringByteLen (bstr="C:\\Program Files (x86)\\MSBuild\\operamail.exe") returned 0x58
	[0167.599] IWbemClassObject:Get (in: This=0x7ab1f0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290aa4c*=8, plFlavor=0x290aa50*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\MSBuild\\operamail.exe", varVal2=0x0), pType=0x290aa4c*=8, plFlavor=0x290aa50*=0) returned 0x0
	[0167.599] SysStringByteLen (bstr="C:\\Program Files (x86)\\MSBuild\\operamail.exe") returned 0x58
	[0167.599] SysStringByteLen (bstr="C:\\Program Files (x86)\\MSBuild\\operamail.exe") returned 0x58
	[0167.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\operamail.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\operamail.exe", lpFilePart=0x0) returned 0x2c
	[0167.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\operamail.exe" (normalized: "c:\\program files (x86)\\msbuild\\operamail.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dcdd670, ftCreationTime.dwHighDateTime=0x1d82833, ftLastAccessTime.dwLowDateTime=0xe70fff90, ftLastAccessTime.dwHighDateTime=0x1d829e3, ftLastWriteTime.dwLowDateTime=0xe70fff90, ftLastWriteTime.dwHighDateTime=0x1d829e3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.600] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\MSBuild\\operamail.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.601] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\MSBuild\\operamail.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x290abfc | out: lpData=0x290abfc) returned 1
	[0167.604] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x290b144, puLen=0x19f470) returned 1
	[0167.604] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290acb4, puLen=0x19f3f0) returned 1
	[0167.604] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290ad60, puLen=0x19f3f0) returned 1
	[0167.604] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290ae04, puLen=0x19f3f0) returned 1
	[0167.604] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290ae44, puLen=0x19f3f0) returned 1
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290aeec, puLen=0x19f3f0) returned 1
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290af98, puLen=0x19f3f0) returned 1
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290b03c, puLen=0x19f3f0) returned 1
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290b0e4, puLen=0x19f3f0) returned 1
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x290b144, puLen=0x19f3e4) returned 1
	[0167.605] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.605] VerQueryValueW (in: pBlock=0x290abfc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x290ac24, puLen=0x19f3f4) returned 1
	[0167.605] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.605] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7aab90, puReturned=0x2892750*=0x1) returned 0x0
	[0167.610] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aab90) returned 0x0
	[0167.611] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.611] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.611] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.611] IUnknown:AddRef (This=0x7aab90) returned 0x3
	[0167.611] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.611] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.611] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aab94) returned 0x0
	[0167.611] IMarshal:GetUnmarshalClass (in: This=0x7aab94, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.611] IUnknown:Release (This=0x7aab94) returned 0x3
	[0167.611] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.612] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.612] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.612] IUnknown:Release (This=0x7aab90) returned 0x2
	[0167.612] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.612] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.612] IUnknown:QueryInterface (in: This=0x7aab90, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aab90) returned 0x0
	[0167.612] IUnknown:AddRef (This=0x7aab90) returned 0x4
	[0167.612] IUnknown:Release (This=0x7aab90) returned 0x3
	[0167.612] IUnknown:Release (This=0x7aab90) returned 0x2
	[0167.612] CoTaskMemFree (pv=0x783170) 
	[0167.612] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.612] IUnknown:AddRef (This=0x7aab90) returned 0x3
	[0167.612] IWbemClassObject:Get (in: This=0x7aab90, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.612] IWbemClassObject:Get (in: This=0x7aab90, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3828\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.612] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3828\"") returned 0x5e
	[0167.613] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3828\"") returned 0x5e
	[0167.613] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6f8
	[0167.613] SetEvent (hEvent=0x2bc) returned 1
	[0167.613] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6f8, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.619] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.619] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a26d8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a26d8) returned 0x0
	[0167.619] WbemDefPath:IUnknown:AddRef (This=0x7a26d8) returned 0x3
	[0167.619] WbemDefPath:IUnknown:Release (This=0x7a26d8) returned 0x2
	[0167.620] WbemDefPath:IWbemPath:SetText (This=0x7a26d8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3828\"") returned 0x0
	[0167.620] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.620] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.620] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.620] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.620] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.620] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.620] IWbemClassObject:Get (in: This=0x7aab90, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290cadc*=0, plFlavor=0x290cae0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe", varVal2=0x0), pType=0x290cadc*=8, plFlavor=0x290cae0*=0) returned 0x0
	[0167.620] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe") returned 0x6e
	[0167.620] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe") returned 0x6e
	[0167.620] IWbemClassObject:Get (in: This=0x7aab90, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290cadc*=8, plFlavor=0x290cae0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe", varVal2=0x0), pType=0x290cadc*=8, plFlavor=0x290cae0*=0) returned 0x0
	[0167.620] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe") returned 0x6e
	[0167.620] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe") returned 0x6e
	[0167.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe", lpFilePart=0x0) returned 0x37
	[0167.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\outlook.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6dbb6b0, ftCreationTime.dwHighDateTime=0x1d79e73, ftLastAccessTime.dwLowDateTime=0x74b36310, ftLastAccessTime.dwHighDateTime=0x1d7e393, ftLastWriteTime.dwLowDateTime=0x74b36310, ftLastWriteTime.dwHighDateTime=0x1d7e393, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.621] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.624] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Photo Viewer\\outlook.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x290ccc8 | out: lpData=0x290ccc8) returned 1
	[0167.624] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x290d210, puLen=0x19f470) returned 1
	[0167.624] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290cd80, puLen=0x19f3f0) returned 1
	[0167.624] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290ce2c, puLen=0x19f3f0) returned 1
	[0167.624] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290ced0, puLen=0x19f3f0) returned 1
	[0167.624] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290cf10, puLen=0x19f3f0) returned 1
	[0167.624] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290cfb8, puLen=0x19f3f0) returned 1
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290d064, puLen=0x19f3f0) returned 1
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290d108, puLen=0x19f3f0) returned 1
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290d1b0, puLen=0x19f3f0) returned 1
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x290d210, puLen=0x19f3e4) returned 1
	[0167.625] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.625] VerQueryValueW (in: pBlock=0x290ccc8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x290ccf0, puLen=0x19f3f4) returned 1
	[0167.625] CoTaskMemAlloc (cb=0x4) returned 0x782fa0
	[0167.625] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fa0, puReturned=0x2892750 | out: apObjects=0x782fa0*=0x7ab850, puReturned=0x2892750*=0x1) returned 0x0
	[0167.630] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ab850) returned 0x0
	[0167.631] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.631] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.631] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.631] IUnknown:AddRef (This=0x7ab850) returned 0x3
	[0167.631] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.631] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.631] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ab854) returned 0x0
	[0167.631] IMarshal:GetUnmarshalClass (in: This=0x7ab854, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.631] IUnknown:Release (This=0x7ab854) returned 0x3
	[0167.631] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.631] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.631] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.631] IUnknown:Release (This=0x7ab850) returned 0x2
	[0167.632] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.632] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.632] IUnknown:QueryInterface (in: This=0x7ab850, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ab850) returned 0x0
	[0167.632] IUnknown:AddRef (This=0x7ab850) returned 0x4
	[0167.632] IUnknown:Release (This=0x7ab850) returned 0x3
	[0167.632] IUnknown:Release (This=0x7ab850) returned 0x2
	[0167.632] CoTaskMemFree (pv=0x782fa0) 
	[0167.632] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.632] IUnknown:AddRef (This=0x7ab850) returned 0x3
	[0167.632] IWbemClassObject:Get (in: This=0x7ab850, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.632] IWbemClassObject:Get (in: This=0x7ab850, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2740\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.632] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2740\"") returned 0x5e
	[0167.632] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2740\"") returned 0x5e
	[0167.632] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6fc
	[0167.633] SetEvent (hEvent=0x2bc) returned 1
	[0167.633] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x6fc, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.637] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.637] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2358, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2358) returned 0x0
	[0167.637] WbemDefPath:IUnknown:AddRef (This=0x7a2358) returned 0x3
	[0167.637] WbemDefPath:IUnknown:Release (This=0x7a2358) returned 0x2
	[0167.637] WbemDefPath:IWbemPath:SetText (This=0x7a2358, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2740\"") returned 0x0
	[0167.637] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.637] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.637] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.637] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.637] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.638] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.638] IWbemClassObject:Get (in: This=0x7ab850, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290eba8*=0, plFlavor=0x290ebac*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Mail\\pidgin.exe", varVal2=0x0), pType=0x290eba8*=8, plFlavor=0x290ebac*=0) returned 0x0
	[0167.638] SysStringByteLen (bstr="C:\\Program Files\\Windows Mail\\pidgin.exe") returned 0x50
	[0167.638] SysStringByteLen (bstr="C:\\Program Files\\Windows Mail\\pidgin.exe") returned 0x50
	[0167.638] IWbemClassObject:Get (in: This=0x7ab850, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290eba8*=8, plFlavor=0x290ebac*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Mail\\pidgin.exe", varVal2=0x0), pType=0x290eba8*=8, plFlavor=0x290ebac*=0) returned 0x0
	[0167.638] SysStringByteLen (bstr="C:\\Program Files\\Windows Mail\\pidgin.exe") returned 0x50
	[0167.638] SysStringByteLen (bstr="C:\\Program Files\\Windows Mail\\pidgin.exe") returned 0x50
	[0167.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail\\pidgin.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail\\pidgin.exe", lpFilePart=0x0) returned 0x28
	[0167.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\pidgin.exe" (normalized: "c:\\program files\\windows mail\\pidgin.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eabe620, ftCreationTime.dwHighDateTime=0x1d7fbc0, ftLastAccessTime.dwLowDateTime=0xa6c33720, ftLastAccessTime.dwHighDateTime=0x1d813a6, ftLastWriteTime.dwLowDateTime=0xa6c33720, ftLastWriteTime.dwHighDateTime=0x1d813a6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.638] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Mail\\pidgin.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.639] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Mail\\pidgin.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x290ed40 | out: lpData=0x290ed40) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x290f288, puLen=0x19f470) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290edf8, puLen=0x19f3f0) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290eea4, puLen=0x19f3f0) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290ef48, puLen=0x19f3f0) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290ef88, puLen=0x19f3f0) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290f030, puLen=0x19f3f0) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290f0dc, puLen=0x19f3f0) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290f180, puLen=0x19f3f0) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x290f228, puLen=0x19f3f0) returned 1
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.640] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x290f288, puLen=0x19f3e4) returned 1
	[0167.641] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.641] VerQueryValueW (in: pBlock=0x290ed40, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x290ed68, puLen=0x19f3f4) returned 1
	[0167.641] CoTaskMemAlloc (cb=0x4) returned 0x783070
	[0167.641] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783070, puReturned=0x2892750 | out: apObjects=0x783070*=0x7aad28, puReturned=0x2892750*=0x1) returned 0x0
	[0167.643] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aad28) returned 0x0
	[0167.643] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.643] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.643] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.644] IUnknown:AddRef (This=0x7aad28) returned 0x3
	[0167.644] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.644] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.644] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aad2c) returned 0x0
	[0167.644] IMarshal:GetUnmarshalClass (in: This=0x7aad2c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.644] IUnknown:Release (This=0x7aad2c) returned 0x3
	[0167.644] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.644] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.644] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.644] IUnknown:Release (This=0x7aad28) returned 0x2
	[0167.644] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.644] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.644] IUnknown:QueryInterface (in: This=0x7aad28, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aad28) returned 0x0
	[0167.644] IUnknown:AddRef (This=0x7aad28) returned 0x4
	[0167.644] IUnknown:Release (This=0x7aad28) returned 0x3
	[0167.644] IUnknown:Release (This=0x7aad28) returned 0x2
	[0167.644] CoTaskMemFree (pv=0x783070) 
	[0167.644] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.644] IUnknown:AddRef (This=0x7aad28) returned 0x3
	[0167.644] IWbemClassObject:Get (in: This=0x7aad28, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.645] IWbemClassObject:Get (in: This=0x7aad28, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2448\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.645] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2448\"") returned 0x5e
	[0167.645] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2448\"") returned 0x5e
	[0167.645] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x700
	[0167.645] SetEvent (hEvent=0x2bc) returned 1
	[0167.645] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x700, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.647] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.647] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2518, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2518) returned 0x0
	[0167.648] WbemDefPath:IUnknown:AddRef (This=0x7a2518) returned 0x3
	[0167.648] WbemDefPath:IUnknown:Release (This=0x7a2518) returned 0x2
	[0167.648] WbemDefPath:IWbemPath:SetText (This=0x7a2518, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2448\"") returned 0x0
	[0167.648] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.648] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.648] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.648] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.648] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.648] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.648] IWbemClassObject:Get (in: This=0x7aad28, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2910c14*=0, plFlavor=0x2910c18*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe", varVal2=0x0), pType=0x2910c14*=8, plFlavor=0x2910c18*=0) returned 0x0
	[0167.648] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe") returned 0x6c
	[0167.648] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe") returned 0x6c
	[0167.648] IWbemClassObject:Get (in: This=0x7aad28, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2910c14*=8, plFlavor=0x2910c18*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe", varVal2=0x0), pType=0x2910c14*=8, plFlavor=0x2910c18*=0) returned 0x0
	[0167.648] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe") returned 0x6c
	[0167.648] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe") returned 0x6c
	[0167.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe", lpFilePart=0x0) returned 0x36
	[0167.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe" (normalized: "c:\\program files (x86)\\internet explorer\\scriptftp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d605140, ftCreationTime.dwHighDateTime=0x1d8152b, ftLastAccessTime.dwLowDateTime=0x42b694d0, ftLastAccessTime.dwHighDateTime=0x1d8245d, ftLastWriteTime.dwLowDateTime=0x42b694d0, ftLastWriteTime.dwHighDateTime=0x1d8245d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.649] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.650] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\scriptftp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2910e00 | out: lpData=0x2910e00) returned 1
	[0167.650] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2911348, puLen=0x19f470) returned 1
	[0167.650] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2910eb8, puLen=0x19f3f0) returned 1
	[0167.650] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2910f64, puLen=0x19f3f0) returned 1
	[0167.650] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2911008, puLen=0x19f3f0) returned 1
	[0167.650] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2911048, puLen=0x19f3f0) returned 1
	[0167.650] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29110f0, puLen=0x19f3f0) returned 1
	[0167.650] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291119c, puLen=0x19f3f0) returned 1
	[0167.650] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2911240, puLen=0x19f3f0) returned 1
	[0167.651] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29112e8, puLen=0x19f3f0) returned 1
	[0167.651] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.651] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.651] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.651] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.652] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2911348, puLen=0x19f3e4) returned 1
	[0167.652] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.652] VerQueryValueW (in: pBlock=0x2910e00, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2910e28, puLen=0x19f3f4) returned 1
	[0167.652] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.652] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7ab9e8, puReturned=0x2892750*=0x1) returned 0x0
	[0167.654] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ab9e8) returned 0x0
	[0167.655] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.655] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.655] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.655] IUnknown:AddRef (This=0x7ab9e8) returned 0x3
	[0167.655] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.655] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.655] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ab9ec) returned 0x0
	[0167.655] IMarshal:GetUnmarshalClass (in: This=0x7ab9ec, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.655] IUnknown:Release (This=0x7ab9ec) returned 0x3
	[0167.655] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.655] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.655] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.655] IUnknown:Release (This=0x7ab9e8) returned 0x2
	[0167.655] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.655] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.655] IUnknown:QueryInterface (in: This=0x7ab9e8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ab9e8) returned 0x0
	[0167.656] IUnknown:AddRef (This=0x7ab9e8) returned 0x4
	[0167.656] IUnknown:Release (This=0x7ab9e8) returned 0x3
	[0167.656] IUnknown:Release (This=0x7ab9e8) returned 0x2
	[0167.656] CoTaskMemFree (pv=0x783170) 
	[0167.656] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.656] IUnknown:AddRef (This=0x7ab9e8) returned 0x3
	[0167.656] IWbemClassObject:Get (in: This=0x7ab9e8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.656] IWbemClassObject:Get (in: This=0x7ab9e8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4108\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.656] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4108\"") returned 0x5e
	[0167.656] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4108\"") returned 0x5e
	[0167.656] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x704
	[0167.656] SetEvent (hEvent=0x2bc) returned 1
	[0167.656] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x704, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.659] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.659] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2748, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2748) returned 0x0
	[0167.659] WbemDefPath:IUnknown:AddRef (This=0x7a2748) returned 0x3
	[0167.659] WbemDefPath:IUnknown:Release (This=0x7a2748) returned 0x2
	[0167.659] WbemDefPath:IWbemPath:SetText (This=0x7a2748, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4108\"") returned 0x0
	[0167.659] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.659] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.659] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.659] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.659] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.659] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.659] IWbemClassObject:Get (in: This=0x7ab9e8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2912d14*=0, plFlavor=0x2912d18*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe", varVal2=0x0), pType=0x2912d14*=8, plFlavor=0x2912d18*=0) returned 0x0
	[0167.660] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe") returned 0x5c
	[0167.660] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe") returned 0x5c
	[0167.660] IWbemClassObject:Get (in: This=0x7ab9e8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2912d14*=8, plFlavor=0x2912d18*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe", varVal2=0x0), pType=0x2912d14*=8, plFlavor=0x2912d18*=0) returned 0x0
	[0167.660] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe") returned 0x5c
	[0167.660] SysStringByteLen (bstr="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe") returned 0x5c
	[0167.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe", lpFilePart=0x0) returned 0x2e
	[0167.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\skype.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a649e0, ftCreationTime.dwHighDateTime=0x1d828bf, ftLastAccessTime.dwLowDateTime=0xde2c4870, ftLastAccessTime.dwHighDateTime=0x1d82a1a, ftLastWriteTime.dwLowDateTime=0xde2c4870, ftLastWriteTime.dwHighDateTime=0x1d82a1a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.660] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.662] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Microsoft.NET\\skype.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2912ed0 | out: lpData=0x2912ed0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2913418, puLen=0x19f470) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2912f88, puLen=0x19f3f0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2913034, puLen=0x19f3f0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29130d8, puLen=0x19f3f0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2913118, puLen=0x19f3f0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29131c0, puLen=0x19f3f0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291326c, puLen=0x19f3f0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2913310, puLen=0x19f3f0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29133b8, puLen=0x19f3f0) returned 1
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.663] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.664] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.664] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.664] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2913418, puLen=0x19f3e4) returned 1
	[0167.664] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.664] VerQueryValueW (in: pBlock=0x2912ed0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2912ef8, puLen=0x19f3f4) returned 1
	[0167.664] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.664] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7aa398, puReturned=0x2892750*=0x1) returned 0x0
	[0167.685] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aa398) returned 0x0
	[0167.685] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.685] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.685] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.686] IUnknown:AddRef (This=0x7aa398) returned 0x3
	[0167.686] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.686] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.686] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aa39c) returned 0x0
	[0167.686] IMarshal:GetUnmarshalClass (in: This=0x7aa39c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.686] IUnknown:Release (This=0x7aa39c) returned 0x3
	[0167.686] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.686] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.686] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.687] IUnknown:Release (This=0x7aa398) returned 0x2
	[0167.687] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.687] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.687] IUnknown:QueryInterface (in: This=0x7aa398, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aa398) returned 0x0
	[0167.687] IUnknown:AddRef (This=0x7aa398) returned 0x4
	[0167.687] IUnknown:Release (This=0x7aa398) returned 0x3
	[0167.687] IUnknown:Release (This=0x7aa398) returned 0x2
	[0167.687] CoTaskMemFree (pv=0x783170) 
	[0167.687] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.687] IUnknown:AddRef (This=0x7aa398) returned 0x3
	[0167.687] IWbemClassObject:Get (in: This=0x7aa398, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.687] IWbemClassObject:Get (in: This=0x7aa398, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4116\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.687] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4116\"") returned 0x5e
	[0167.687] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4116\"") returned 0x5e
	[0167.688] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x708
	[0167.688] SetEvent (hEvent=0x2bc) returned 1
	[0167.689] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x708, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.693] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.693] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.694] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1cc8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a1cc8) returned 0x0
	[0167.694] WbemDefPath:IUnknown:AddRef (This=0x7a1cc8) returned 0x3
	[0167.694] WbemDefPath:IUnknown:Release (This=0x7a1cc8) returned 0x2
	[0167.694] WbemDefPath:IWbemPath:SetText (This=0x7a1cc8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4116\"") returned 0x0
	[0167.694] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.694] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.694] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.695] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.695] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.695] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.695] IWbemClassObject:Get (in: This=0x7aa398, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2914d90*=0, plFlavor=0x2914d94*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows NT\\smartftp.exe", varVal2=0x0), pType=0x2914d90*=8, plFlavor=0x2914d94*=0) returned 0x0
	[0167.695] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\smartftp.exe") returned 0x50
	[0167.695] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\smartftp.exe") returned 0x50
	[0167.695] IWbemClassObject:Get (in: This=0x7aa398, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2914d90*=8, plFlavor=0x2914d94*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows NT\\smartftp.exe", varVal2=0x0), pType=0x2914d90*=8, plFlavor=0x2914d94*=0) returned 0x0
	[0167.695] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\smartftp.exe") returned 0x50
	[0167.695] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\smartftp.exe") returned 0x50
	[0167.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\smartftp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\smartftp.exe", lpFilePart=0x0) returned 0x28
	[0167.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\smartftp.exe" (normalized: "c:\\program files\\windows nt\\smartftp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58bd1c50, ftCreationTime.dwHighDateTime=0x1d7b7d3, ftLastAccessTime.dwLowDateTime=0xf2226b70, ftLastAccessTime.dwHighDateTime=0x1d7ca52, ftLastWriteTime.dwLowDateTime=0xf2226b70, ftLastWriteTime.dwHighDateTime=0x1d7ca52, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.696] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows NT\\smartftp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.697] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows NT\\smartftp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2914f28 | out: lpData=0x2914f28) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2915470, puLen=0x19f470) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2914fe0, puLen=0x19f3f0) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291508c, puLen=0x19f3f0) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2915130, puLen=0x19f3f0) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2915170, puLen=0x19f3f0) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2915218, puLen=0x19f3f0) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29152c4, puLen=0x19f3f0) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2915368, puLen=0x19f3f0) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2915410, puLen=0x19f3f0) returned 1
	[0167.698] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.699] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.699] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.699] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.699] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2915470, puLen=0x19f3e4) returned 1
	[0167.699] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.699] VerQueryValueW (in: pBlock=0x2914f28, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2914f50, puLen=0x19f3f4) returned 1
	[0167.699] CoTaskMemAlloc (cb=0x4) returned 0x783050
	[0167.699] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783050, puReturned=0x2892750 | out: apObjects=0x783050*=0x7aa6c8, puReturned=0x2892750*=0x1) returned 0x0
	[0167.722] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aa6c8) returned 0x0
	[0167.723] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.723] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.723] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.723] IUnknown:AddRef (This=0x7aa6c8) returned 0x3
	[0167.723] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.723] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.723] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aa6cc) returned 0x0
	[0167.724] IMarshal:GetUnmarshalClass (in: This=0x7aa6cc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.724] IUnknown:Release (This=0x7aa6cc) returned 0x3
	[0167.724] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.724] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.724] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.724] IUnknown:Release (This=0x7aa6c8) returned 0x2
	[0167.724] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.724] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.724] IUnknown:QueryInterface (in: This=0x7aa6c8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aa6c8) returned 0x0
	[0167.724] IUnknown:AddRef (This=0x7aa6c8) returned 0x4
	[0167.724] IUnknown:Release (This=0x7aa6c8) returned 0x3
	[0167.724] IUnknown:Release (This=0x7aa6c8) returned 0x2
	[0167.724] CoTaskMemFree (pv=0x783050) 
	[0167.724] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.725] IUnknown:AddRef (This=0x7aa6c8) returned 0x3
	[0167.725] IWbemClassObject:Get (in: This=0x7aa6c8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.725] IWbemClassObject:Get (in: This=0x7aa6c8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4132\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.725] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4132\"") returned 0x5e
	[0167.725] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4132\"") returned 0x5e
	[0167.725] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x70c
	[0167.725] SetEvent (hEvent=0x2bc) returned 1
	[0167.725] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x70c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.729] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.729] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.729] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2048, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2048) returned 0x0
	[0167.729] WbemDefPath:IUnknown:AddRef (This=0x7a2048) returned 0x3
	[0167.729] WbemDefPath:IUnknown:Release (This=0x7a2048) returned 0x2
	[0167.729] WbemDefPath:IWbemPath:SetText (This=0x7a2048, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4132\"") returned 0x0
	[0167.729] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.729] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.729] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.729] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.729] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.730] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.730] IWbemClassObject:Get (in: This=0x7aa6c8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2916e14*=0, plFlavor=0x2916e18*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe", varVal2=0x0), pType=0x2916e14*=8, plFlavor=0x2916e18*=0) returned 0x0
	[0167.730] SysStringByteLen (bstr="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe") returned 0x64
	[0167.730] SysStringByteLen (bstr="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe") returned 0x64
	[0167.730] IWbemClassObject:Get (in: This=0x7aa6c8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2916e14*=8, plFlavor=0x2916e18*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe", varVal2=0x0), pType=0x2916e14*=8, plFlavor=0x2916e18*=0) returned 0x0
	[0167.730] SysStringByteLen (bstr="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe") returned 0x64
	[0167.730] SysStringByteLen (bstr="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe") returned 0x64
	[0167.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe", lpFilePart=0x0) returned 0x32
	[0167.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe" (normalized: "c:\\program files\\windowspowershell\\thunderbird.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c872fb0, ftCreationTime.dwHighDateTime=0x1d82701, ftLastAccessTime.dwLowDateTime=0x8641aee0, ftLastAccessTime.dwHighDateTime=0x1d82900, ftLastWriteTime.dwLowDateTime=0x8641aee0, ftLastWriteTime.dwHighDateTime=0x1d82900, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.731] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.732] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\WindowsPowerShell\\thunderbird.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2916fe8 | out: lpData=0x2916fe8) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2917530, puLen=0x19f470) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29170a0, puLen=0x19f3f0) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291714c, puLen=0x19f3f0) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29171f0, puLen=0x19f3f0) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2917230, puLen=0x19f3f0) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29172d8, puLen=0x19f3f0) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2917384, puLen=0x19f3f0) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2917428, puLen=0x19f3f0) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29174d0, puLen=0x19f3f0) returned 1
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.734] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2917530, puLen=0x19f3e4) returned 1
	[0167.734] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.735] VerQueryValueW (in: pBlock=0x2916fe8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2917010, puLen=0x19f3f4) returned 1
	[0167.735] CoTaskMemAlloc (cb=0x4) returned 0x782fc0
	[0167.735] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fc0, puReturned=0x2892750 | out: apObjects=0x782fc0*=0x7aa860, puReturned=0x2892750*=0x1) returned 0x0
	[0167.743] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7aa860) returned 0x0
	[0167.743] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.743] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.743] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.744] IUnknown:AddRef (This=0x7aa860) returned 0x3
	[0167.744] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.744] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.744] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7aa864) returned 0x0
	[0167.744] IMarshal:GetUnmarshalClass (in: This=0x7aa864, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.744] IUnknown:Release (This=0x7aa864) returned 0x3
	[0167.744] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.744] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.744] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.745] IUnknown:Release (This=0x7aa860) returned 0x2
	[0167.745] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.745] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.745] IUnknown:QueryInterface (in: This=0x7aa860, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7aa860) returned 0x0
	[0167.745] IUnknown:AddRef (This=0x7aa860) returned 0x4
	[0167.745] IUnknown:Release (This=0x7aa860) returned 0x3
	[0167.745] IUnknown:Release (This=0x7aa860) returned 0x2
	[0167.745] CoTaskMemFree (pv=0x782fc0) 
	[0167.745] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.745] IUnknown:AddRef (This=0x7aa860) returned 0x3
	[0167.745] IWbemClassObject:Get (in: This=0x7aa860, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.745] IWbemClassObject:Get (in: This=0x7aa860, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4140\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.745] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4140\"") returned 0x5e
	[0167.745] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4140\"") returned 0x5e
	[0167.745] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x710
	[0167.746] SetEvent (hEvent=0x2bc) returned 1
	[0167.746] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x710, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.749] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.749] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2128, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2128) returned 0x0
	[0167.750] WbemDefPath:IUnknown:AddRef (This=0x7a2128) returned 0x3
	[0167.750] WbemDefPath:IUnknown:Release (This=0x7a2128) returned 0x2
	[0167.750] WbemDefPath:IWbemPath:SetText (This=0x7a2128, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4140\"") returned 0x0
	[0167.750] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.750] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.750] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.750] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.750] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.750] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.750] IWbemClassObject:Get (in: This=0x7aa860, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2918ee0*=0, plFlavor=0x2918ee4*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Common Files\\trillian.exe", varVal2=0x0), pType=0x2918ee0*=8, plFlavor=0x2918ee4*=0) returned 0x0
	[0167.750] SysStringByteLen (bstr="C:\\Program Files (x86)\\Common Files\\trillian.exe") returned 0x60
	[0167.751] SysStringByteLen (bstr="C:\\Program Files (x86)\\Common Files\\trillian.exe") returned 0x60
	[0167.751] IWbemClassObject:Get (in: This=0x7aa860, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2918ee0*=8, plFlavor=0x2918ee4*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Common Files\\trillian.exe", varVal2=0x0), pType=0x2918ee0*=8, plFlavor=0x2918ee4*=0) returned 0x0
	[0167.751] SysStringByteLen (bstr="C:\\Program Files (x86)\\Common Files\\trillian.exe") returned 0x60
	[0167.751] SysStringByteLen (bstr="C:\\Program Files (x86)\\Common Files\\trillian.exe") returned 0x60
	[0167.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\trillian.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\trillian.exe", lpFilePart=0x0) returned 0x30
	[0167.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\trillian.exe" (normalized: "c:\\program files (x86)\\common files\\trillian.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5e7f10, ftCreationTime.dwHighDateTime=0x1d7f2d9, ftLastAccessTime.dwLowDateTime=0x6a29d410, ftLastAccessTime.dwHighDateTime=0x1d80fd0, ftLastWriteTime.dwLowDateTime=0x6a29d410, ftLastWriteTime.dwHighDateTime=0x1d80fd0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.751] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Common Files\\trillian.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.753] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Common Files\\trillian.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x29190a8 | out: lpData=0x29190a8) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x29195f0, puLen=0x19f470) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2919160, puLen=0x19f3f0) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291920c, puLen=0x19f3f0) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29192b0, puLen=0x19f3f0) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29192f0, puLen=0x19f3f0) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2919398, puLen=0x19f3f0) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2919444, puLen=0x19f3f0) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29194e8, puLen=0x19f3f0) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2919590, puLen=0x19f3f0) returned 1
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.754] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.755] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x29195f0, puLen=0x19f3e4) returned 1
	[0167.755] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.755] VerQueryValueW (in: pBlock=0x29190a8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x29190d0, puLen=0x19f3f4) returned 1
	[0167.755] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.755] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7b8e00, puReturned=0x2892750*=0x1) returned 0x0
	[0167.762] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b8e00) returned 0x0
	[0167.762] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.762] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.762] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.762] IUnknown:AddRef (This=0x7b8e00) returned 0x3
	[0167.763] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.763] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.763] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b8e04) returned 0x0
	[0167.763] IMarshal:GetUnmarshalClass (in: This=0x7b8e04, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.763] IUnknown:Release (This=0x7b8e04) returned 0x3
	[0167.763] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.763] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.763] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.763] IUnknown:Release (This=0x7b8e00) returned 0x2
	[0167.763] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.763] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.763] IUnknown:QueryInterface (in: This=0x7b8e00, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b8e00) returned 0x0
	[0167.763] IUnknown:AddRef (This=0x7b8e00) returned 0x4
	[0167.763] IUnknown:Release (This=0x7b8e00) returned 0x3
	[0167.763] IUnknown:Release (This=0x7b8e00) returned 0x2
	[0167.764] CoTaskMemFree (pv=0x783170) 
	[0167.764] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.764] IUnknown:AddRef (This=0x7b8e00) returned 0x3
	[0167.764] IWbemClassObject:Get (in: This=0x7b8e00, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.765] IWbemClassObject:Get (in: This=0x7b8e00, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4156\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.765] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4156\"") returned 0x5e
	[0167.765] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4156\"") returned 0x5e
	[0167.765] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x714
	[0167.765] SetEvent (hEvent=0x2bc) returned 1
	[0167.765] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x714, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.769] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.769] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2a58, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2a58) returned 0x0
	[0167.769] WbemDefPath:IUnknown:AddRef (This=0x7a2a58) returned 0x3
	[0167.769] WbemDefPath:IUnknown:Release (This=0x7a2a58) returned 0x2
	[0167.769] WbemDefPath:IWbemPath:SetText (This=0x7a2a58, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4156\"") returned 0x0
	[0167.769] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.769] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.769] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.769] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.769] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.769] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.769] IWbemClassObject:Get (in: This=0x7b8e00, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x291af90*=0, plFlavor=0x291af94*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\MSBuild\\webdrive.exe", varVal2=0x0), pType=0x291af90*=8, plFlavor=0x291af94*=0) returned 0x0
	[0167.769] SysStringByteLen (bstr="C:\\Program Files (x86)\\MSBuild\\webdrive.exe") returned 0x56
	[0167.770] SysStringByteLen (bstr="C:\\Program Files (x86)\\MSBuild\\webdrive.exe") returned 0x56
	[0167.770] IWbemClassObject:Get (in: This=0x7b8e00, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x291af90*=8, plFlavor=0x291af94*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\MSBuild\\webdrive.exe", varVal2=0x0), pType=0x291af90*=8, plFlavor=0x291af94*=0) returned 0x0
	[0167.770] SysStringByteLen (bstr="C:\\Program Files (x86)\\MSBuild\\webdrive.exe") returned 0x56
	[0167.770] SysStringByteLen (bstr="C:\\Program Files (x86)\\MSBuild\\webdrive.exe") returned 0x56
	[0167.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\webdrive.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\webdrive.exe", lpFilePart=0x0) returned 0x2b
	[0167.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\webdrive.exe" (normalized: "c:\\program files (x86)\\msbuild\\webdrive.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7054f70, ftCreationTime.dwHighDateTime=0x1d7c541, ftLastAccessTime.dwLowDateTime=0xa1c243d0, ftLastAccessTime.dwHighDateTime=0x1d7e54b, ftLastWriteTime.dwLowDateTime=0xa1c243d0, ftLastWriteTime.dwHighDateTime=0x1d7e54b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.773] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\MSBuild\\webdrive.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.774] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\MSBuild\\webdrive.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x291b134 | out: lpData=0x291b134) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x291b67c, puLen=0x19f470) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291b1ec, puLen=0x19f3f0) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291b298, puLen=0x19f3f0) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291b33c, puLen=0x19f3f0) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291b37c, puLen=0x19f3f0) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291b424, puLen=0x19f3f0) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291b4d0, puLen=0x19f3f0) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291b574, puLen=0x19f3f0) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291b61c, puLen=0x19f3f0) returned 1
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.775] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x291b67c, puLen=0x19f3e4) returned 1
	[0167.775] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.776] VerQueryValueW (in: pBlock=0x291b134, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x291b15c, puLen=0x19f3f4) returned 1
	[0167.776] CoTaskMemAlloc (cb=0x4) returned 0x783040
	[0167.776] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783040, puReturned=0x2892750 | out: apObjects=0x783040*=0x7b9928, puReturned=0x2892750*=0x1) returned 0x0
	[0167.781] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b9928) returned 0x0
	[0167.782] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.782] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.782] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.782] IUnknown:AddRef (This=0x7b9928) returned 0x3
	[0167.782] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.782] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.782] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b992c) returned 0x0
	[0167.782] IMarshal:GetUnmarshalClass (in: This=0x7b992c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.782] IUnknown:Release (This=0x7b992c) returned 0x3
	[0167.782] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.783] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.783] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.783] IUnknown:Release (This=0x7b9928) returned 0x2
	[0167.783] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.783] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.783] IUnknown:QueryInterface (in: This=0x7b9928, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b9928) returned 0x0
	[0167.783] IUnknown:AddRef (This=0x7b9928) returned 0x4
	[0167.783] IUnknown:Release (This=0x7b9928) returned 0x3
	[0167.783] IUnknown:Release (This=0x7b9928) returned 0x2
	[0167.783] CoTaskMemFree (pv=0x783040) 
	[0167.783] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.783] IUnknown:AddRef (This=0x7b9928) returned 0x3
	[0167.783] IWbemClassObject:Get (in: This=0x7b9928, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.783] IWbemClassObject:Get (in: This=0x7b9928, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.784] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"") returned 0x5e
	[0167.784] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"") returned 0x5e
	[0167.784] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x718
	[0167.784] SetEvent (hEvent=0x2bc) returned 1
	[0167.784] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x718, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.791] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.791] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2b38, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2b38) returned 0x0
	[0167.791] WbemDefPath:IUnknown:AddRef (This=0x7a2b38) returned 0x3
	[0167.791] WbemDefPath:IUnknown:Release (This=0x7a2b38) returned 0x2
	[0167.791] WbemDefPath:IWbemPath:SetText (This=0x7a2b38, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"") returned 0x0
	[0167.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.791] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.791] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.791] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.791] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.791] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.791] IWbemClassObject:Get (in: This=0x7b9928, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x291d024*=0, plFlavor=0x291d028*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows NT\\whatsapp.exe", varVal2=0x0), pType=0x291d024*=8, plFlavor=0x291d028*=0) returned 0x0
	[0167.792] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\whatsapp.exe") returned 0x50
	[0167.792] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\whatsapp.exe") returned 0x50
	[0167.792] IWbemClassObject:Get (in: This=0x7b9928, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x291d024*=8, plFlavor=0x291d028*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows NT\\whatsapp.exe", varVal2=0x0), pType=0x291d024*=8, plFlavor=0x291d028*=0) returned 0x0
	[0167.792] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\whatsapp.exe") returned 0x50
	[0167.792] SysStringByteLen (bstr="C:\\Program Files\\Windows NT\\whatsapp.exe") returned 0x50
	[0167.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\whatsapp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\whatsapp.exe", lpFilePart=0x0) returned 0x28
	[0167.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\whatsapp.exe" (normalized: "c:\\program files\\windows nt\\whatsapp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6f8dce0, ftCreationTime.dwHighDateTime=0x1d7c4b2, ftLastAccessTime.dwLowDateTime=0xc6a3ad00, ftLastAccessTime.dwHighDateTime=0x1d7f5ff, ftLastWriteTime.dwLowDateTime=0xc6a3ad00, ftLastWriteTime.dwHighDateTime=0x1d7f5ff, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.793] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows NT\\whatsapp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.800] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows NT\\whatsapp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x291d1bc | out: lpData=0x291d1bc) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x291d704, puLen=0x19f470) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291d274, puLen=0x19f3f0) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291d320, puLen=0x19f3f0) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291d3c4, puLen=0x19f3f0) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291d404, puLen=0x19f3f0) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291d4ac, puLen=0x19f3f0) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291d558, puLen=0x19f3f0) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291d5fc, puLen=0x19f3f0) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291d6a4, puLen=0x19f3f0) returned 1
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.801] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.802] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x291d704, puLen=0x19f3e4) returned 1
	[0167.802] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.802] VerQueryValueW (in: pBlock=0x291d1bc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x291d1e4, puLen=0x19f3f4) returned 1
	[0167.802] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0167.802] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7b9790, puReturned=0x2892750*=0x1) returned 0x0
	[0167.808] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b9790) returned 0x0
	[0167.808] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.808] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.808] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.808] IUnknown:AddRef (This=0x7b9790) returned 0x3
	[0167.809] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.809] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.809] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b9794) returned 0x0
	[0167.809] IMarshal:GetUnmarshalClass (in: This=0x7b9794, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.809] IUnknown:Release (This=0x7b9794) returned 0x3
	[0167.809] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.809] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.809] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.809] IUnknown:Release (This=0x7b9790) returned 0x2
	[0167.809] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.809] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.809] IUnknown:QueryInterface (in: This=0x7b9790, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b9790) returned 0x0
	[0167.809] IUnknown:AddRef (This=0x7b9790) returned 0x4
	[0167.809] IUnknown:Release (This=0x7b9790) returned 0x3
	[0167.809] IUnknown:Release (This=0x7b9790) returned 0x2
	[0167.810] CoTaskMemFree (pv=0x783170) 
	[0167.810] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.810] IUnknown:AddRef (This=0x7b9790) returned 0x3
	[0167.810] IWbemClassObject:Get (in: This=0x7b9790, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.810] IWbemClassObject:Get (in: This=0x7b9790, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4180\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.810] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4180\"") returned 0x5e
	[0167.810] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4180\"") returned 0x5e
	[0167.810] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x71c
	[0167.810] SetEvent (hEvent=0x2bc) returned 1
	[0167.812] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x71c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.818] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.818] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.818] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2ac8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a2ac8) returned 0x0
	[0167.818] WbemDefPath:IUnknown:AddRef (This=0x7a2ac8) returned 0x3
	[0167.818] WbemDefPath:IUnknown:Release (This=0x7a2ac8) returned 0x2
	[0167.818] WbemDefPath:IWbemPath:SetText (This=0x7a2ac8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4180\"") returned 0x0
	[0167.818] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.818] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.818] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.818] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.818] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.819] IWbemClassObject:Get (in: This=0x7b9790, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x291f094*=0, plFlavor=0x291f098*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe", varVal2=0x0), pType=0x291f094*=8, plFlavor=0x291f098*=0) returned 0x0
	[0167.819] SysStringByteLen (bstr="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe") returned 0x66
	[0167.819] SysStringByteLen (bstr="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe") returned 0x66
	[0167.819] IWbemClassObject:Get (in: This=0x7b9790, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x291f094*=8, plFlavor=0x291f098*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe", varVal2=0x0), pType=0x291f094*=8, plFlavor=0x291f098*=0) returned 0x0
	[0167.819] SysStringByteLen (bstr="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe") returned 0x66
	[0167.819] SysStringByteLen (bstr="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe") returned 0x66
	[0167.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe", lpFilePart=0x0) returned 0x33
	[0167.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe" (normalized: "c:\\program files (x86)\\windowspowershell\\winscp.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0c12fb0, ftCreationTime.dwHighDateTime=0x1d7f67d, ftLastAccessTime.dwLowDateTime=0xfff19460, ftLastAccessTime.dwHighDateTime=0x1d800c1, ftLastWriteTime.dwLowDateTime=0xfff19460, ftLastWriteTime.dwHighDateTime=0x1d800c1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.820] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.828] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\WindowsPowerShell\\winscp.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x291f268 | out: lpData=0x291f268) returned 1
	[0167.829] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x291f7b0, puLen=0x19f470) returned 1
	[0167.829] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291f320, puLen=0x19f3f0) returned 1
	[0167.829] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291f3cc, puLen=0x19f3f0) returned 1
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291f470, puLen=0x19f3f0) returned 1
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291f4b0, puLen=0x19f3f0) returned 1
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291f558, puLen=0x19f3f0) returned 1
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291f604, puLen=0x19f3f0) returned 1
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291f6a8, puLen=0x19f3f0) returned 1
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x291f750, puLen=0x19f3f0) returned 1
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.830] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x291f7b0, puLen=0x19f3e4) returned 1
	[0167.830] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.831] VerQueryValueW (in: pBlock=0x291f268, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x291f290, puLen=0x19f3f4) returned 1
	[0167.831] CoTaskMemAlloc (cb=0x4) returned 0x783060
	[0167.831] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783060, puReturned=0x2892750 | out: apObjects=0x783060*=0x7b9ac0, puReturned=0x2892750*=0x1) returned 0x0
	[0167.840] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b9ac0) returned 0x0
	[0167.840] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0167.840] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0167.840] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0167.840] IUnknown:AddRef (This=0x7b9ac0) returned 0x3
	[0167.840] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0167.840] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0167.840] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b9ac4) returned 0x0
	[0167.841] IMarshal:GetUnmarshalClass (in: This=0x7b9ac4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0167.841] IUnknown:Release (This=0x7b9ac4) returned 0x3
	[0167.841] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0167.841] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0167.841] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0167.841] IUnknown:Release (This=0x7b9ac0) returned 0x2
	[0167.841] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0167.841] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0167.841] IUnknown:QueryInterface (in: This=0x7b9ac0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b9ac0) returned 0x0
	[0167.841] IUnknown:AddRef (This=0x7b9ac0) returned 0x4
	[0167.841] IUnknown:Release (This=0x7b9ac0) returned 0x3
	[0167.842] IUnknown:Release (This=0x7b9ac0) returned 0x2
	[0167.842] CoTaskMemFree (pv=0x783060) 
	[0167.842] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0167.842] IUnknown:AddRef (This=0x7b9ac0) returned 0x3
	[0167.842] IWbemClassObject:Get (in: This=0x7b9ac0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0167.842] IWbemClassObject:Get (in: This=0x7b9ac0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4188\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0167.843] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4188\"") returned 0x5e
	[0167.843] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4188\"") returned 0x5e
	[0167.843] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x720
	[0167.843] SetEvent (hEvent=0x2bc) returned 1
	[0167.843] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x720, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0167.947] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0167.948] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0167.948] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a29e8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7a29e8) returned 0x0
	[0167.948] WbemDefPath:IUnknown:AddRef (This=0x7a29e8) returned 0x3
	[0167.948] WbemDefPath:IUnknown:Release (This=0x7a29e8) returned 0x2
	[0167.948] WbemDefPath:IWbemPath:SetText (This=0x7a29e8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4188\"") returned 0x0
	[0167.948] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0167.948] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0167.948] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.948] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0167.948] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0167.948] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0167.948] IWbemClassObject:Get (in: This=0x7b9ac0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2921140*=0, plFlavor=0x2921144*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\MSBuild\\yahoomessenger.exe", varVal2=0x0), pType=0x2921140*=8, plFlavor=0x2921144*=0) returned 0x0
	[0167.948] SysStringByteLen (bstr="C:\\Program Files\\MSBuild\\yahoomessenger.exe") returned 0x56
	[0167.948] SysStringByteLen (bstr="C:\\Program Files\\MSBuild\\yahoomessenger.exe") returned 0x56
	[0167.949] IWbemClassObject:Get (in: This=0x7b9ac0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2921140*=8, plFlavor=0x2921144*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\MSBuild\\yahoomessenger.exe", varVal2=0x0), pType=0x2921140*=8, plFlavor=0x2921144*=0) returned 0x0
	[0167.949] SysStringByteLen (bstr="C:\\Program Files\\MSBuild\\yahoomessenger.exe") returned 0x56
	[0167.949] SysStringByteLen (bstr="C:\\Program Files\\MSBuild\\yahoomessenger.exe") returned 0x56
	[0167.949] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\yahoomessenger.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\yahoomessenger.exe", lpFilePart=0x0) returned 0x2b
	[0167.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0167.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\yahoomessenger.exe" (normalized: "c:\\program files\\msbuild\\yahoomessenger.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d4ee5b0, ftCreationTime.dwHighDateTime=0x1d7a524, ftLastAccessTime.dwLowDateTime=0x443891e0, ftLastAccessTime.dwHighDateTime=0x1d7ed9f, ftLastWriteTime.dwLowDateTime=0x443891e0, ftLastWriteTime.dwHighDateTime=0x1d7ed9f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0167.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0167.950] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\MSBuild\\yahoomessenger.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0167.952] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\MSBuild\\yahoomessenger.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x29212e4 | out: lpData=0x29212e4) returned 1
	[0167.952] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x292182c, puLen=0x19f470) returned 1
	[0167.953] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292139c, puLen=0x19f3f0) returned 1
	[0167.953] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2921448, puLen=0x19f3f0) returned 1
	[0167.953] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29214ec, puLen=0x19f3f0) returned 1
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292152c, puLen=0x19f3f0) returned 1
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29215d4, puLen=0x19f3f0) returned 1
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2921680, puLen=0x19f3f0) returned 1
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2921724, puLen=0x19f3f0) returned 1
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29217cc, puLen=0x19f3f0) returned 1
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x292182c, puLen=0x19f3e4) returned 1
	[0167.954] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0167.954] VerQueryValueW (in: pBlock=0x29212e4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x292130c, puLen=0x19f3f4) returned 1
	[0167.954] CoTaskMemAlloc (cb=0x4) returned 0x782fd0
	[0167.955] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fd0, puReturned=0x2892750 | out: apObjects=0x782fd0*=0x7b9c58, puReturned=0x2892750*=0x1) returned 0x0
	[0168.165] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b9c58) returned 0x0
	[0168.166] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.166] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.166] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.166] IUnknown:AddRef (This=0x7b9c58) returned 0x3
	[0168.166] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.166] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.166] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b9c5c) returned 0x0
	[0168.166] IMarshal:GetUnmarshalClass (in: This=0x7b9c5c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.166] IUnknown:Release (This=0x7b9c5c) returned 0x3
	[0168.167] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.167] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.167] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.167] IUnknown:Release (This=0x7b9c58) returned 0x2
	[0168.167] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.167] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.167] IUnknown:QueryInterface (in: This=0x7b9c58, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b9c58) returned 0x0
	[0168.167] IUnknown:AddRef (This=0x7b9c58) returned 0x4
	[0168.167] IUnknown:Release (This=0x7b9c58) returned 0x3
	[0168.167] IUnknown:Release (This=0x7b9c58) returned 0x2
	[0168.167] CoTaskMemFree (pv=0x782fd0) 
	[0168.167] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.167] IUnknown:AddRef (This=0x7b9c58) returned 0x3
	[0168.167] IWbemClassObject:Get (in: This=0x7b9c58, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.168] IWbemClassObject:Get (in: This=0x7b9c58, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4204\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.168] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4204\"") returned 0x5e
	[0168.168] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4204\"") returned 0x5e
	[0168.168] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x724
	[0168.168] SetEvent (hEvent=0x2bc) returned 1
	[0168.168] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x724, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.235] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.235] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.235] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bca48, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bca48) returned 0x0
	[0168.235] WbemDefPath:IUnknown:AddRef (This=0x7bca48) returned 0x3
	[0168.235] WbemDefPath:IUnknown:Release (This=0x7bca48) returned 0x2
	[0168.235] WbemDefPath:IWbemPath:SetText (This=0x7bca48, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4204\"") returned 0x0
	[0168.235] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.235] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.235] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.235] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.235] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.235] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.236] IWbemClassObject:Get (in: This=0x7b9c58, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29231f4*=0, plFlavor=0x29231f8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe", varVal2=0x0), pType=0x29231f4*=8, plFlavor=0x29231f8*=0) returned 0x0
	[0168.236] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe") returned 0x74
	[0168.236] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe") returned 0x74
	[0168.236] IWbemClassObject:Get (in: This=0x7b9c58, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29231f4*=8, plFlavor=0x29231f8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe", varVal2=0x0), pType=0x29231f4*=8, plFlavor=0x29231f8*=0) returned 0x0
	[0168.236] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe") returned 0x74
	[0168.236] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe") returned 0x74
	[0168.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe", lpFilePart=0x0) returned 0x3a
	[0168.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe" (normalized: "c:\\program files (x86)\\internet explorer\\active-charge.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704bff70, ftCreationTime.dwHighDateTime=0x1d7a5c8, ftLastAccessTime.dwLowDateTime=0x6577eb80, ftLastAccessTime.dwHighDateTime=0x1d7a727, ftLastWriteTime.dwLowDateTime=0x6577eb80, ftLastWriteTime.dwHighDateTime=0x1d7a727, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.237] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.238] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\active-charge.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x29233f8 | out: lpData=0x29233f8) returned 1
	[0168.238] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2923940, puLen=0x19f470) returned 1
	[0168.238] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29234b0, puLen=0x19f3f0) returned 1
	[0168.238] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292355c, puLen=0x19f3f0) returned 1
	[0168.238] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2923600, puLen=0x19f3f0) returned 1
	[0168.238] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2923640, puLen=0x19f3f0) returned 1
	[0168.238] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29236e8, puLen=0x19f3f0) returned 1
	[0168.238] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2923794, puLen=0x19f3f0) returned 1
	[0168.238] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2923838, puLen=0x19f3f0) returned 1
	[0168.239] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29238e0, puLen=0x19f3f0) returned 1
	[0168.239] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.239] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.239] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.239] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.239] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2923940, puLen=0x19f3e4) returned 1
	[0168.239] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.239] VerQueryValueW (in: pBlock=0x29233f8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2923420, puLen=0x19f3f4) returned 1
	[0168.239] CoTaskMemAlloc (cb=0x4) returned 0x783070
	[0168.239] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783070, puReturned=0x2892750 | out: apObjects=0x783070*=0x7b9df0, puReturned=0x2892750*=0x1) returned 0x0
	[0168.249] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b9df0) returned 0x0
	[0168.249] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.249] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.249] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.249] IUnknown:AddRef (This=0x7b9df0) returned 0x3
	[0168.249] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.249] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.250] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b9df4) returned 0x0
	[0168.250] IMarshal:GetUnmarshalClass (in: This=0x7b9df4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.250] IUnknown:Release (This=0x7b9df4) returned 0x3
	[0168.250] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.250] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.250] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.250] IUnknown:Release (This=0x7b9df0) returned 0x2
	[0168.250] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.250] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.250] IUnknown:QueryInterface (in: This=0x7b9df0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b9df0) returned 0x0
	[0168.250] IUnknown:AddRef (This=0x7b9df0) returned 0x4
	[0168.250] IUnknown:Release (This=0x7b9df0) returned 0x3
	[0168.250] IUnknown:Release (This=0x7b9df0) returned 0x2
	[0168.250] CoTaskMemFree (pv=0x783070) 
	[0168.251] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.251] IUnknown:AddRef (This=0x7b9df0) returned 0x3
	[0168.251] IWbemClassObject:Get (in: This=0x7b9df0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.251] IWbemClassObject:Get (in: This=0x7b9df0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4212\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.251] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4212\"") returned 0x5e
	[0168.251] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4212\"") returned 0x5e
	[0168.251] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x728
	[0168.251] SetEvent (hEvent=0x2bc) returned 1
	[0168.251] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x728, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.254] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.254] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.254] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc8f8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bc8f8) returned 0x0
	[0168.254] WbemDefPath:IUnknown:AddRef (This=0x7bc8f8) returned 0x3
	[0168.254] WbemDefPath:IUnknown:Release (This=0x7bc8f8) returned 0x2
	[0168.254] WbemDefPath:IWbemPath:SetText (This=0x7bc8f8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4212\"") returned 0x0
	[0168.254] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.254] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.254] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.254] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.254] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.254] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.254] IWbemClassObject:Get (in: This=0x7b9df0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29252fc*=0, plFlavor=0x2925300*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe", varVal2=0x0), pType=0x29252fc*=8, plFlavor=0x2925300*=0) returned 0x0
	[0168.255] SysStringByteLen (bstr="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe") returned 0x70
	[0168.255] SysStringByteLen (bstr="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe") returned 0x70
	[0168.255] IWbemClassObject:Get (in: This=0x7b9df0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29252fc*=8, plFlavor=0x2925300*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe", varVal2=0x0), pType=0x29252fc*=8, plFlavor=0x2925300*=0) returned 0x0
	[0168.255] SysStringByteLen (bstr="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe") returned 0x70
	[0168.255] SysStringByteLen (bstr="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe") returned 0x70
	[0168.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe", lpFilePart=0x0) returned 0x38
	[0168.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe" (normalized: "c:\\program files\\windows multimedia platform\\accupos.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83627100, ftCreationTime.dwHighDateTime=0x1d7ffb1, ftLastAccessTime.dwLowDateTime=0x86c0b760, ftLastAccessTime.dwHighDateTime=0x1d7ffd6, ftLastWriteTime.dwLowDateTime=0x86c0b760, ftLastWriteTime.dwHighDateTime=0x1d7ffd6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.255] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.256] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Multimedia Platform\\accupos.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x29254f4 | out: lpData=0x29254f4) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2925a3c, puLen=0x19f470) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29255ac, puLen=0x19f3f0) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2925658, puLen=0x19f3f0) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29256fc, puLen=0x19f3f0) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292573c, puLen=0x19f3f0) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29257e4, puLen=0x19f3f0) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2925890, puLen=0x19f3f0) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2925934, puLen=0x19f3f0) returned 1
	[0168.257] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29259dc, puLen=0x19f3f0) returned 1
	[0168.258] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.258] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.258] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.258] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.258] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2925a3c, puLen=0x19f3e4) returned 1
	[0168.258] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.258] VerQueryValueW (in: pBlock=0x29254f4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x292551c, puLen=0x19f3f4) returned 1
	[0168.258] CoTaskMemAlloc (cb=0x4) returned 0x782fd0
	[0168.258] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fd0, puReturned=0x2892750 | out: apObjects=0x782fd0*=0x7b95f8, puReturned=0x2892750*=0x1) returned 0x0
	[0168.269] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b95f8) returned 0x0
	[0168.270] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.270] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.270] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.270] IUnknown:AddRef (This=0x7b95f8) returned 0x3
	[0168.270] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.270] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.270] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b95fc) returned 0x0
	[0168.270] IMarshal:GetUnmarshalClass (in: This=0x7b95fc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.270] IUnknown:Release (This=0x7b95fc) returned 0x3
	[0168.270] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.271] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.271] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.271] IUnknown:Release (This=0x7b95f8) returned 0x2
	[0168.271] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.271] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.271] IUnknown:QueryInterface (in: This=0x7b95f8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b95f8) returned 0x0
	[0168.271] IUnknown:AddRef (This=0x7b95f8) returned 0x4
	[0168.271] IUnknown:Release (This=0x7b95f8) returned 0x3
	[0168.271] IUnknown:Release (This=0x7b95f8) returned 0x2
	[0168.271] CoTaskMemFree (pv=0x782fd0) 
	[0168.271] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.271] IUnknown:AddRef (This=0x7b95f8) returned 0x3
	[0168.271] IWbemClassObject:Get (in: This=0x7b95f8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.271] IWbemClassObject:Get (in: This=0x7b95f8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4228\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.271] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4228\"") returned 0x5e
	[0168.271] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4228\"") returned 0x5e
	[0168.271] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x72c
	[0168.272] SetEvent (hEvent=0x2bc) returned 1
	[0168.272] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x72c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.276] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.276] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.276] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd3e8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd3e8) returned 0x0
	[0168.276] WbemDefPath:IUnknown:AddRef (This=0x7bd3e8) returned 0x3
	[0168.276] WbemDefPath:IUnknown:Release (This=0x7bd3e8) returned 0x2
	[0168.276] WbemDefPath:IWbemPath:SetText (This=0x7bd3e8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4228\"") returned 0x0
	[0168.276] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.276] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.276] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.276] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.276] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.276] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.276] IWbemClassObject:Get (in: This=0x7b95f8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29273e4*=0, plFlavor=0x29273e8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Mail\\afr38.exe", varVal2=0x0), pType=0x29273e4*=8, plFlavor=0x29273e8*=0) returned 0x0
	[0168.276] SysStringByteLen (bstr="C:\\Program Files\\Windows Mail\\afr38.exe") returned 0x4e
	[0168.276] SysStringByteLen (bstr="C:\\Program Files\\Windows Mail\\afr38.exe") returned 0x4e
	[0168.276] IWbemClassObject:Get (in: This=0x7b95f8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29273e4*=8, plFlavor=0x29273e8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Mail\\afr38.exe", varVal2=0x0), pType=0x29273e4*=8, plFlavor=0x29273e8*=0) returned 0x0
	[0168.276] SysStringByteLen (bstr="C:\\Program Files\\Windows Mail\\afr38.exe") returned 0x4e
	[0168.276] SysStringByteLen (bstr="C:\\Program Files\\Windows Mail\\afr38.exe") returned 0x4e
	[0168.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail\\afr38.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail\\afr38.exe", lpFilePart=0x0) returned 0x27
	[0168.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\afr38.exe" (normalized: "c:\\program files\\windows mail\\afr38.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f24c10, ftCreationTime.dwHighDateTime=0x1d7ee58, ftLastAccessTime.dwLowDateTime=0x46d6a4e0, ftLastAccessTime.dwHighDateTime=0x1d7f24b, ftLastWriteTime.dwLowDateTime=0x46d6a4e0, ftLastWriteTime.dwHighDateTime=0x1d7f24b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.278] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Mail\\afr38.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.279] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Mail\\afr38.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2927570 | out: lpData=0x2927570) returned 1
	[0168.280] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2927ab8, puLen=0x19f470) returned 1
	[0168.280] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2927628, puLen=0x19f3f0) returned 1
	[0168.280] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29276d4, puLen=0x19f3f0) returned 1
	[0168.280] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2927778, puLen=0x19f3f0) returned 1
	[0168.280] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29277b8, puLen=0x19f3f0) returned 1
	[0168.280] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2927860, puLen=0x19f3f0) returned 1
	[0168.281] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292790c, puLen=0x19f3f0) returned 1
	[0168.281] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29279b0, puLen=0x19f3f0) returned 1
	[0168.281] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2927a58, puLen=0x19f3f0) returned 1
	[0168.281] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.281] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.281] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.281] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.281] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2927ab8, puLen=0x19f3e4) returned 1
	[0168.281] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.282] VerQueryValueW (in: pBlock=0x2927570, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2927598, puLen=0x19f3f4) returned 1
	[0168.282] CoTaskMemAlloc (cb=0x4) returned 0x783000
	[0168.282] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783000, puReturned=0x2892750 | out: apObjects=0x783000*=0x7b8f98, puReturned=0x2892750*=0x1) returned 0x0
	[0168.293] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b8f98) returned 0x0
	[0168.294] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.294] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.294] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.294] IUnknown:AddRef (This=0x7b8f98) returned 0x3
	[0168.294] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.294] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.294] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b8f9c) returned 0x0
	[0168.294] IMarshal:GetUnmarshalClass (in: This=0x7b8f9c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.294] IUnknown:Release (This=0x7b8f9c) returned 0x3
	[0168.294] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.294] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.294] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.295] IUnknown:Release (This=0x7b8f98) returned 0x2
	[0168.295] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.295] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.295] IUnknown:QueryInterface (in: This=0x7b8f98, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b8f98) returned 0x0
	[0168.295] IUnknown:AddRef (This=0x7b8f98) returned 0x4
	[0168.295] IUnknown:Release (This=0x7b8f98) returned 0x3
	[0168.295] IUnknown:Release (This=0x7b8f98) returned 0x2
	[0168.295] CoTaskMemFree (pv=0x783000) 
	[0168.295] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.295] IUnknown:AddRef (This=0x7b8f98) returned 0x3
	[0168.295] IWbemClassObject:Get (in: This=0x7b8f98, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.295] IWbemClassObject:Get (in: This=0x7b8f98, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4236\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.295] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4236\"") returned 0x5e
	[0168.296] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4236\"") returned 0x5e
	[0168.296] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x730
	[0168.296] SetEvent (hEvent=0x2bc) returned 1
	[0168.296] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x730, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.299] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.299] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.299] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb28, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bcb28) returned 0x0
	[0168.299] WbemDefPath:IUnknown:AddRef (This=0x7bcb28) returned 0x3
	[0168.299] WbemDefPath:IUnknown:Release (This=0x7bcb28) returned 0x2
	[0168.299] WbemDefPath:IWbemPath:SetText (This=0x7bcb28, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4236\"") returned 0x0
	[0168.300] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.300] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.300] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.300] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.300] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.300] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.301] IWbemClassObject:Get (in: This=0x7b8f98, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x292944c*=0, plFlavor=0x2929450*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Defender\\aldelo.exe", varVal2=0x0), pType=0x292944c*=8, plFlavor=0x2929450*=0) returned 0x0
	[0168.301] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\aldelo.exe") returned 0x58
	[0168.301] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\aldelo.exe") returned 0x58
	[0168.301] IWbemClassObject:Get (in: This=0x7b8f98, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x292944c*=8, plFlavor=0x2929450*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Defender\\aldelo.exe", varVal2=0x0), pType=0x292944c*=8, plFlavor=0x2929450*=0) returned 0x0
	[0168.301] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\aldelo.exe") returned 0x58
	[0168.301] SysStringByteLen (bstr="C:\\Program Files\\Windows Defender\\aldelo.exe") returned 0x58
	[0168.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\aldelo.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\aldelo.exe", lpFilePart=0x0) returned 0x2c
	[0168.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\aldelo.exe" (normalized: "c:\\program files\\windows defender\\aldelo.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a295720, ftCreationTime.dwHighDateTime=0x1d7e8a0, ftLastAccessTime.dwLowDateTime=0xe73c1130, ftLastAccessTime.dwHighDateTime=0x1d81e75, ftLastWriteTime.dwLowDateTime=0xe73c1130, ftLastWriteTime.dwHighDateTime=0x1d81e75, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.302] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Defender\\aldelo.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.303] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Defender\\aldelo.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x29295fc | out: lpData=0x29295fc) returned 1
	[0168.304] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2929b44, puLen=0x19f470) returned 1
	[0168.304] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29296b4, puLen=0x19f3f0) returned 1
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2929760, puLen=0x19f3f0) returned 1
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2929804, puLen=0x19f3f0) returned 1
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2929844, puLen=0x19f3f0) returned 1
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29298ec, puLen=0x19f3f0) returned 1
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2929998, puLen=0x19f3f0) returned 1
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2929a3c, puLen=0x19f3f0) returned 1
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2929ae4, puLen=0x19f3f0) returned 1
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2929b44, puLen=0x19f3e4) returned 1
	[0168.305] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.305] VerQueryValueW (in: pBlock=0x29295fc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2929624, puLen=0x19f3f4) returned 1
	[0168.305] CoTaskMemAlloc (cb=0x4) returned 0x782f80
	[0168.305] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782f80, puReturned=0x2892750 | out: apObjects=0x782f80*=0x7b9f88, puReturned=0x2892750*=0x1) returned 0x0
	[0168.312] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b9f88) returned 0x0
	[0168.313] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.313] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.313] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.313] IUnknown:AddRef (This=0x7b9f88) returned 0x3
	[0168.313] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.313] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.313] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b9f8c) returned 0x0
	[0168.313] IMarshal:GetUnmarshalClass (in: This=0x7b9f8c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.314] IUnknown:Release (This=0x7b9f8c) returned 0x3
	[0168.314] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.314] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.314] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.314] IUnknown:Release (This=0x7b9f88) returned 0x2
	[0168.314] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.314] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.314] IUnknown:QueryInterface (in: This=0x7b9f88, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b9f88) returned 0x0
	[0168.314] IUnknown:AddRef (This=0x7b9f88) returned 0x4
	[0168.314] IUnknown:Release (This=0x7b9f88) returned 0x3
	[0168.314] IUnknown:Release (This=0x7b9f88) returned 0x2
	[0168.314] CoTaskMemFree (pv=0x782f80) 
	[0168.314] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.314] IUnknown:AddRef (This=0x7b9f88) returned 0x3
	[0168.314] IWbemClassObject:Get (in: This=0x7b9f88, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.315] IWbemClassObject:Get (in: This=0x7b9f88, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4252\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.315] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4252\"") returned 0x5e
	[0168.315] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4252\"") returned 0x5e
	[0168.315] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x734
	[0168.315] SetEvent (hEvent=0x2bc) returned 1
	[0168.315] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x734, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.329] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.329] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.329] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc888, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bc888) returned 0x0
	[0168.329] WbemDefPath:IUnknown:AddRef (This=0x7bc888) returned 0x3
	[0168.329] WbemDefPath:IUnknown:Release (This=0x7bc888) returned 0x2
	[0168.329] WbemDefPath:IWbemPath:SetText (This=0x7bc888, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4252\"") returned 0x0
	[0168.329] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.329] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.329] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.329] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.330] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.330] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.330] IWbemClassObject:Get (in: This=0x7b9f88, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x292b4fc*=0, plFlavor=0x292b500*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe", varVal2=0x0), pType=0x292b4fc*=8, plFlavor=0x292b500*=0) returned 0x0
	[0168.330] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe") returned 0x6e
	[0168.330] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe") returned 0x6e
	[0168.330] IWbemClassObject:Get (in: This=0x7b9f88, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x292b4fc*=8, plFlavor=0x292b500*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe", varVal2=0x0), pType=0x292b4fc*=8, plFlavor=0x292b500*=0) returned 0x0
	[0168.330] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe") returned 0x6e
	[0168.330] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe") returned 0x6e
	[0168.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe", lpFilePart=0x0) returned 0x37
	[0168.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ccv_server.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb04cb0, ftCreationTime.dwHighDateTime=0x1d80ad4, ftLastAccessTime.dwLowDateTime=0xe6b5eef0, ftLastAccessTime.dwHighDateTime=0x1d81148, ftLastWriteTime.dwLowDateTime=0xe6b5eef0, ftLastWriteTime.dwHighDateTime=0x1d81148, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.331] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.332] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\ccv_server.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x292b6e8 | out: lpData=0x292b6e8) returned 1
	[0168.333] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x292bc30, puLen=0x19f470) returned 1
	[0168.333] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292b7a0, puLen=0x19f3f0) returned 1
	[0168.333] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292b84c, puLen=0x19f3f0) returned 1
	[0168.333] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292b8f0, puLen=0x19f3f0) returned 1
	[0168.333] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292b930, puLen=0x19f3f0) returned 1
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292b9d8, puLen=0x19f3f0) returned 1
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292ba84, puLen=0x19f3f0) returned 1
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292bb28, puLen=0x19f3f0) returned 1
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292bbd0, puLen=0x19f3f0) returned 1
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x292bc30, puLen=0x19f3e4) returned 1
	[0168.334] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.334] VerQueryValueW (in: pBlock=0x292b6e8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x292b710, puLen=0x19f3f4) returned 1
	[0168.334] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0168.334] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7b9460, puReturned=0x2892750*=0x1) returned 0x0
	[0168.339] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b9460) returned 0x0
	[0168.339] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.339] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.339] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.339] IUnknown:AddRef (This=0x7b9460) returned 0x3
	[0168.339] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.340] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.340] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b9464) returned 0x0
	[0168.340] IMarshal:GetUnmarshalClass (in: This=0x7b9464, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.340] IUnknown:Release (This=0x7b9464) returned 0x3
	[0168.340] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.340] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.340] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.340] IUnknown:Release (This=0x7b9460) returned 0x2
	[0168.340] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.340] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.340] IUnknown:QueryInterface (in: This=0x7b9460, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b9460) returned 0x0
	[0168.340] IUnknown:AddRef (This=0x7b9460) returned 0x4
	[0168.340] IUnknown:Release (This=0x7b9460) returned 0x3
	[0168.340] IUnknown:Release (This=0x7b9460) returned 0x2
	[0168.341] CoTaskMemFree (pv=0x783170) 
	[0168.341] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.341] IUnknown:AddRef (This=0x7b9460) returned 0x3
	[0168.341] IWbemClassObject:Get (in: This=0x7b9460, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.341] IWbemClassObject:Get (in: This=0x7b9460, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4260\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.341] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4260\"") returned 0x5e
	[0168.341] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4260\"") returned 0x5e
	[0168.341] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x738
	[0168.341] SetEvent (hEvent=0x2bc) returned 1
	[0168.342] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x738, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.348] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.348] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.348] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd308, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd308) returned 0x0
	[0168.348] WbemDefPath:IUnknown:AddRef (This=0x7bd308) returned 0x3
	[0168.348] WbemDefPath:IUnknown:Release (This=0x7bd308) returned 0x2
	[0168.348] WbemDefPath:IWbemPath:SetText (This=0x7bd308, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4260\"") returned 0x0
	[0168.348] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.348] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.348] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.348] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.348] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.348] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.348] IWbemClassObject:Get (in: This=0x7b9460, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x292d5f4*=0, plFlavor=0x292d5f8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe", varVal2=0x0), pType=0x292d5f4*=8, plFlavor=0x292d5f8*=0) returned 0x0
	[0168.348] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe") returned 0x70
	[0168.348] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe") returned 0x70
	[0168.349] IWbemClassObject:Get (in: This=0x7b9460, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x292d5f4*=8, plFlavor=0x292d5f8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe", varVal2=0x0), pType=0x292d5f4*=8, plFlavor=0x292d5f8*=0) returned 0x0
	[0168.349] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe") returned 0x70
	[0168.349] SysStringByteLen (bstr="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe") returned 0x70
	[0168.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe", lpFilePart=0x0) returned 0x38
	[0168.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe" (normalized: "c:\\program files\\internet explorer\\centralcreditcard.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7025b6c0, ftCreationTime.dwHighDateTime=0x1d7fff1, ftLastAccessTime.dwLowDateTime=0xdf81c380, ftLastAccessTime.dwHighDateTime=0x1d805c1, ftLastWriteTime.dwLowDateTime=0xdf81c380, ftLastWriteTime.dwHighDateTime=0x1d805c1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.349] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.358] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x292d7ec | out: lpData=0x292d7ec) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x292dd34, puLen=0x19f470) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292d8a4, puLen=0x19f3f0) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292d950, puLen=0x19f3f0) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292d9f4, puLen=0x19f3f0) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292da34, puLen=0x19f3f0) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292dadc, puLen=0x19f3f0) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292db88, puLen=0x19f3f0) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292dc2c, puLen=0x19f3f0) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292dcd4, puLen=0x19f3f0) returned 1
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.359] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x292dd34, puLen=0x19f3e4) returned 1
	[0168.360] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.360] VerQueryValueW (in: pBlock=0x292d7ec, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x292d814, puLen=0x19f3f4) returned 1
	[0168.360] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0168.360] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7ba120, puReturned=0x2892750*=0x1) returned 0x0
	[0168.364] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ba120) returned 0x0
	[0168.364] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.365] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.365] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.365] IUnknown:AddRef (This=0x7ba120) returned 0x3
	[0168.365] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.365] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.365] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ba124) returned 0x0
	[0168.365] IMarshal:GetUnmarshalClass (in: This=0x7ba124, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.365] IUnknown:Release (This=0x7ba124) returned 0x3
	[0168.365] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.365] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.365] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.365] IUnknown:Release (This=0x7ba120) returned 0x2
	[0168.365] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.366] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.366] IUnknown:QueryInterface (in: This=0x7ba120, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ba120) returned 0x0
	[0168.366] IUnknown:AddRef (This=0x7ba120) returned 0x4
	[0168.366] IUnknown:Release (This=0x7ba120) returned 0x3
	[0168.366] IUnknown:Release (This=0x7ba120) returned 0x2
	[0168.366] CoTaskMemFree (pv=0x783170) 
	[0168.366] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.366] IUnknown:AddRef (This=0x7ba120) returned 0x3
	[0168.366] IWbemClassObject:Get (in: This=0x7ba120, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.366] IWbemClassObject:Get (in: This=0x7ba120, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.366] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"") returned 0x5e
	[0168.366] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"") returned 0x5e
	[0168.366] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x73c
	[0168.366] SetEvent (hEvent=0x2bc) returned 1
	[0168.367] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x73c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.374] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.374] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.374] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd0d8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd0d8) returned 0x0
	[0168.374] WbemDefPath:IUnknown:AddRef (This=0x7bd0d8) returned 0x3
	[0168.374] WbemDefPath:IUnknown:Release (This=0x7bd0d8) returned 0x2
	[0168.374] WbemDefPath:IWbemPath:SetText (This=0x7bd0d8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"") returned 0x0
	[0168.374] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.374] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.375] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.375] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.375] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.375] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.375] IWbemClassObject:Get (in: This=0x7ba120, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x292f6f8*=0, plFlavor=0x292f6fc*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe", varVal2=0x0), pType=0x292f6f8*=8, plFlavor=0x292f6fc*=0) returned 0x0
	[0168.375] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe") returned 0x6e
	[0168.375] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe") returned 0x6e
	[0168.375] IWbemClassObject:Get (in: This=0x7ba120, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x292f6f8*=8, plFlavor=0x292f6fc*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe", varVal2=0x0), pType=0x292f6f8*=8, plFlavor=0x292f6fc*=0) returned 0x0
	[0168.375] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe") returned 0x6e
	[0168.375] SysStringByteLen (bstr="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe") returned 0x6e
	[0168.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe", lpFilePart=0x0) returned 0x37
	[0168.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe" (normalized: "c:\\program files\\windows photo viewer\\creditservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b7a730, ftCreationTime.dwHighDateTime=0x1d7b4fb, ftLastAccessTime.dwLowDateTime=0xd5859d50, ftLastAccessTime.dwHighDateTime=0x1d7cfdb, ftLastWriteTime.dwLowDateTime=0xd5859d50, ftLastWriteTime.dwHighDateTime=0x1d7cfdb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.376] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.377] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Photo Viewer\\creditservice.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x292f8e4 | out: lpData=0x292f8e4) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x292fe2c, puLen=0x19f470) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292f99c, puLen=0x19f3f0) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292fa48, puLen=0x19f3f0) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292faec, puLen=0x19f3f0) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292fb2c, puLen=0x19f3f0) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292fbd4, puLen=0x19f3f0) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292fc80, puLen=0x19f3f0) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292fd24, puLen=0x19f3f0) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x292fdcc, puLen=0x19f3f0) returned 1
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.385] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.386] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x292fe2c, puLen=0x19f3e4) returned 1
	[0168.386] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.386] VerQueryValueW (in: pBlock=0x292f8e4, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x292f90c, puLen=0x19f3f4) returned 1
	[0168.386] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0168.386] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7ba780, puReturned=0x2892750*=0x1) returned 0x0
	[0168.396] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ba780) returned 0x0
	[0168.397] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.397] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.397] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.397] IUnknown:AddRef (This=0x7ba780) returned 0x3
	[0168.397] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.397] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.397] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ba784) returned 0x0
	[0168.397] IMarshal:GetUnmarshalClass (in: This=0x7ba784, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.397] IUnknown:Release (This=0x7ba784) returned 0x3
	[0168.397] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.398] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.398] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.398] IUnknown:Release (This=0x7ba780) returned 0x2
	[0168.398] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.398] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.398] IUnknown:QueryInterface (in: This=0x7ba780, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ba780) returned 0x0
	[0168.398] IUnknown:AddRef (This=0x7ba780) returned 0x4
	[0168.398] IUnknown:Release (This=0x7ba780) returned 0x3
	[0168.398] IUnknown:Release (This=0x7ba780) returned 0x2
	[0168.398] CoTaskMemFree (pv=0x783170) 
	[0168.398] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.398] IUnknown:AddRef (This=0x7ba780) returned 0x3
	[0168.398] IWbemClassObject:Get (in: This=0x7ba780, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.398] IWbemClassObject:Get (in: This=0x7ba780, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4284\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.399] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4284\"") returned 0x5e
	[0168.399] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4284\"") returned 0x5e
	[0168.399] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x740
	[0168.399] SetEvent (hEvent=0x2bc) returned 1
	[0168.399] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x740, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.406] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.406] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.406] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd458, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd458) returned 0x0
	[0168.406] WbemDefPath:IUnknown:AddRef (This=0x7bd458) returned 0x3
	[0168.407] WbemDefPath:IUnknown:Release (This=0x7bd458) returned 0x2
	[0168.407] WbemDefPath:IWbemPath:SetText (This=0x7bd458, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4284\"") returned 0x0
	[0168.407] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.407] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.407] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.407] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.407] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.407] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.407] IWbemClassObject:Get (in: This=0x7ba780, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2931804*=0, plFlavor=0x2931808*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Journal\\edcsvr.exe", varVal2=0x0), pType=0x2931804*=8, plFlavor=0x2931808*=0) returned 0x0
	[0168.407] SysStringByteLen (bstr="C:\\Program Files\\Windows Journal\\edcsvr.exe") returned 0x56
	[0168.407] SysStringByteLen (bstr="C:\\Program Files\\Windows Journal\\edcsvr.exe") returned 0x56
	[0168.407] IWbemClassObject:Get (in: This=0x7ba780, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2931804*=8, plFlavor=0x2931808*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Journal\\edcsvr.exe", varVal2=0x0), pType=0x2931804*=8, plFlavor=0x2931808*=0) returned 0x0
	[0168.407] SysStringByteLen (bstr="C:\\Program Files\\Windows Journal\\edcsvr.exe") returned 0x56
	[0168.407] SysStringByteLen (bstr="C:\\Program Files\\Windows Journal\\edcsvr.exe") returned 0x56
	[0168.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\edcsvr.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\edcsvr.exe", lpFilePart=0x0) returned 0x2b
	[0168.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\edcsvr.exe" (normalized: "c:\\program files\\windows journal\\edcsvr.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b48ebf0, ftCreationTime.dwHighDateTime=0x1d7f755, ftLastAccessTime.dwLowDateTime=0xdcbac1c0, ftLastAccessTime.dwHighDateTime=0x1d8129a, ftLastWriteTime.dwLowDateTime=0xdcbac1c0, ftLastWriteTime.dwHighDateTime=0x1d8129a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.408] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Journal\\edcsvr.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.414] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Journal\\edcsvr.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x29319a8 | out: lpData=0x29319a8) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2931ef0, puLen=0x19f470) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2931a60, puLen=0x19f3f0) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2931b0c, puLen=0x19f3f0) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2931bb0, puLen=0x19f3f0) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2931bf0, puLen=0x19f3f0) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2931c98, puLen=0x19f3f0) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2931d44, puLen=0x19f3f0) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2931de8, puLen=0x19f3f0) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2931e90, puLen=0x19f3f0) returned 1
	[0168.415] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.416] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.416] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.416] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.416] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2931ef0, puLen=0x19f3e4) returned 1
	[0168.416] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.416] VerQueryValueW (in: pBlock=0x29319a8, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x29319d0, puLen=0x19f3f4) returned 1
	[0168.416] CoTaskMemAlloc (cb=0x4) returned 0x783080
	[0168.416] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783080, puReturned=0x2892750 | out: apObjects=0x783080*=0x7bac48, puReturned=0x2892750*=0x1) returned 0x0
	[0168.436] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7bac48) returned 0x0
	[0168.436] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.436] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.436] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.437] IUnknown:AddRef (This=0x7bac48) returned 0x3
	[0168.437] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.437] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.437] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7bac4c) returned 0x0
	[0168.437] IMarshal:GetUnmarshalClass (in: This=0x7bac4c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.437] IUnknown:Release (This=0x7bac4c) returned 0x3
	[0168.437] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.437] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.437] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.437] IUnknown:Release (This=0x7bac48) returned 0x2
	[0168.437] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.438] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.438] IUnknown:QueryInterface (in: This=0x7bac48, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7bac48) returned 0x0
	[0168.438] IUnknown:AddRef (This=0x7bac48) returned 0x4
	[0168.438] IUnknown:Release (This=0x7bac48) returned 0x3
	[0168.438] IUnknown:Release (This=0x7bac48) returned 0x2
	[0168.438] CoTaskMemFree (pv=0x783080) 
	[0168.438] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.438] IUnknown:AddRef (This=0x7bac48) returned 0x3
	[0168.438] IWbemClassObject:Get (in: This=0x7bac48, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.438] IWbemClassObject:Get (in: This=0x7bac48, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4304\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.438] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4304\"") returned 0x5e
	[0168.438] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4304\"") returned 0x5e
	[0168.438] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x744
	[0168.439] SetEvent (hEvent=0x2bc) returned 1
	[0168.439] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x744, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.446] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.446] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.446] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcab8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bcab8) returned 0x0
	[0168.447] WbemDefPath:IUnknown:AddRef (This=0x7bcab8) returned 0x3
	[0168.447] WbemDefPath:IUnknown:Release (This=0x7bcab8) returned 0x2
	[0168.447] WbemDefPath:IWbemPath:SetText (This=0x7bcab8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4304\"") returned 0x0
	[0168.447] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.447] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.447] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.447] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.448] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.448] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.448] IWbemClassObject:Get (in: This=0x7bac48, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29338c0*=0, plFlavor=0x29338c4*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Reference Assemblies\\fpos.exe", varVal2=0x0), pType=0x29338c0*=8, plFlavor=0x29338c4*=0) returned 0x0
	[0168.448] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\fpos.exe") returned 0x5c
	[0168.448] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\fpos.exe") returned 0x5c
	[0168.448] IWbemClassObject:Get (in: This=0x7bac48, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29338c0*=8, plFlavor=0x29338c4*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Reference Assemblies\\fpos.exe", varVal2=0x0), pType=0x29338c0*=8, plFlavor=0x29338c4*=0) returned 0x0
	[0168.448] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\fpos.exe") returned 0x5c
	[0168.448] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\fpos.exe") returned 0x5c
	[0168.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\fpos.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\fpos.exe", lpFilePart=0x0) returned 0x2e
	[0168.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\fpos.exe" (normalized: "c:\\program files\\reference assemblies\\fpos.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9aedb70, ftCreationTime.dwHighDateTime=0x1d804aa, ftLastAccessTime.dwLowDateTime=0x5c8fb4c0, ftLastAccessTime.dwHighDateTime=0x1d8078b, ftLastWriteTime.dwLowDateTime=0x5c8fb4c0, ftLastWriteTime.dwHighDateTime=0x1d8078b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.453] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Reference Assemblies\\fpos.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.454] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Reference Assemblies\\fpos.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2933a7c | out: lpData=0x2933a7c) returned 1
	[0168.455] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2933fc4, puLen=0x19f470) returned 1
	[0168.455] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2933b34, puLen=0x19f3f0) returned 1
	[0168.455] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2933be0, puLen=0x19f3f0) returned 1
	[0168.455] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2933c84, puLen=0x19f3f0) returned 1
	[0168.455] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2933cc4, puLen=0x19f3f0) returned 1
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2933d6c, puLen=0x19f3f0) returned 1
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2933e18, puLen=0x19f3f0) returned 1
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2933ebc, puLen=0x19f3f0) returned 1
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2933f64, puLen=0x19f3f0) returned 1
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2933fc4, puLen=0x19f3e4) returned 1
	[0168.456] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.456] VerQueryValueW (in: pBlock=0x2933a7c, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2933aa4, puLen=0x19f3f4) returned 1
	[0168.456] CoTaskMemAlloc (cb=0x4) returned 0x783000
	[0168.456] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783000, puReturned=0x2892750 | out: apObjects=0x783000*=0x7ba5e8, puReturned=0x2892750*=0x1) returned 0x0
	[0168.521] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ba5e8) returned 0x0
	[0168.521] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.521] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.521] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.522] IUnknown:AddRef (This=0x7ba5e8) returned 0x3
	[0168.522] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.522] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.522] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ba5ec) returned 0x0
	[0168.522] IMarshal:GetUnmarshalClass (in: This=0x7ba5ec, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.522] IUnknown:Release (This=0x7ba5ec) returned 0x3
	[0168.522] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.522] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.522] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.522] IUnknown:Release (This=0x7ba5e8) returned 0x2
	[0168.522] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.522] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.522] IUnknown:QueryInterface (in: This=0x7ba5e8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ba5e8) returned 0x0
	[0168.523] IUnknown:AddRef (This=0x7ba5e8) returned 0x4
	[0168.523] IUnknown:Release (This=0x7ba5e8) returned 0x3
	[0168.523] IUnknown:Release (This=0x7ba5e8) returned 0x2
	[0168.523] CoTaskMemFree (pv=0x783000) 
	[0168.523] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.523] IUnknown:AddRef (This=0x7ba5e8) returned 0x3
	[0168.523] IWbemClassObject:Get (in: This=0x7ba5e8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.523] IWbemClassObject:Get (in: This=0x7ba5e8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4312\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.523] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4312\"") returned 0x5e
	[0168.523] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4312\"") returned 0x5e
	[0168.523] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x748
	[0168.523] SetEvent (hEvent=0x2bc) returned 1
	[0168.524] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x748, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.536] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.536] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.536] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd4c8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd4c8) returned 0x0
	[0168.536] WbemDefPath:IUnknown:AddRef (This=0x7bd4c8) returned 0x3
	[0168.536] WbemDefPath:IUnknown:Release (This=0x7bd4c8) returned 0x2
	[0168.536] WbemDefPath:IWbemPath:SetText (This=0x7bd4c8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4312\"") returned 0x0
	[0168.536] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.536] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.536] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.536] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.536] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.536] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.536] IWbemClassObject:Get (in: This=0x7ba5e8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2935988*=0, plFlavor=0x293598c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Reference Assemblies\\isspos.exe", varVal2=0x0), pType=0x2935988*=8, plFlavor=0x293598c*=0) returned 0x0
	[0168.537] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\isspos.exe") returned 0x60
	[0168.537] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\isspos.exe") returned 0x60
	[0168.537] IWbemClassObject:Get (in: This=0x7ba5e8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2935988*=8, plFlavor=0x293598c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Reference Assemblies\\isspos.exe", varVal2=0x0), pType=0x2935988*=8, plFlavor=0x293598c*=0) returned 0x0
	[0168.537] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\isspos.exe") returned 0x60
	[0168.537] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\isspos.exe") returned 0x60
	[0168.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\isspos.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\isspos.exe", lpFilePart=0x0) returned 0x30
	[0168.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\isspos.exe" (normalized: "c:\\program files\\reference assemblies\\isspos.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe326c0f0, ftCreationTime.dwHighDateTime=0x1d80614, ftLastAccessTime.dwLowDateTime=0xeb2bb000, ftLastAccessTime.dwHighDateTime=0x1d81995, ftLastWriteTime.dwLowDateTime=0xeb2bb000, ftLastWriteTime.dwHighDateTime=0x1d81995, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.542] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Reference Assemblies\\isspos.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.544] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Reference Assemblies\\isspos.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2935b50 | out: lpData=0x2935b50) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2936098, puLen=0x19f470) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2935c08, puLen=0x19f3f0) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2935cb4, puLen=0x19f3f0) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2935d58, puLen=0x19f3f0) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2935d98, puLen=0x19f3f0) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2935e40, puLen=0x19f3f0) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2935eec, puLen=0x19f3f0) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2935f90, puLen=0x19f3f0) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2936038, puLen=0x19f3f0) returned 1
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2936098, puLen=0x19f3e4) returned 1
	[0168.545] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.545] VerQueryValueW (in: pBlock=0x2935b50, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2935b78, puLen=0x19f3f4) returned 1
	[0168.546] CoTaskMemAlloc (cb=0x4) returned 0x7830a0
	[0168.546] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7830a0, puReturned=0x2892750 | out: apObjects=0x7830a0*=0x7ba2b8, puReturned=0x2892750*=0x1) returned 0x0
	[0168.552] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ba2b8) returned 0x0
	[0168.552] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.552] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.552] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.552] IUnknown:AddRef (This=0x7ba2b8) returned 0x3
	[0168.552] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.552] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.552] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ba2bc) returned 0x0
	[0168.552] IMarshal:GetUnmarshalClass (in: This=0x7ba2bc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.553] IUnknown:Release (This=0x7ba2bc) returned 0x3
	[0168.553] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.553] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.553] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.553] IUnknown:Release (This=0x7ba2b8) returned 0x2
	[0168.553] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.553] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.553] IUnknown:QueryInterface (in: This=0x7ba2b8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ba2b8) returned 0x0
	[0168.553] IUnknown:AddRef (This=0x7ba2b8) returned 0x4
	[0168.553] IUnknown:Release (This=0x7ba2b8) returned 0x3
	[0168.553] IUnknown:Release (This=0x7ba2b8) returned 0x2
	[0168.553] CoTaskMemFree (pv=0x7830a0) 
	[0168.553] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.553] IUnknown:AddRef (This=0x7ba2b8) returned 0x3
	[0168.553] IWbemClassObject:Get (in: This=0x7ba2b8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.553] IWbemClassObject:Get (in: This=0x7ba2b8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4324\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.554] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4324\"") returned 0x5e
	[0168.554] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4324\"") returned 0x5e
	[0168.554] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x74c
	[0168.554] SetEvent (hEvent=0x2bc) returned 1
	[0168.554] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x74c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.562] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.562] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bce38, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bce38) returned 0x0
	[0168.562] WbemDefPath:IUnknown:AddRef (This=0x7bce38) returned 0x3
	[0168.562] WbemDefPath:IUnknown:Release (This=0x7bce38) returned 0x2
	[0168.562] WbemDefPath:IWbemPath:SetText (This=0x7bce38, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4324\"") returned 0x0
	[0168.562] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.562] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.562] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.562] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.562] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.562] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.562] IWbemClassObject:Get (in: This=0x7ba2b8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2937a30*=0, plFlavor=0x2937a34*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe", varVal2=0x0), pType=0x2937a30*=8, plFlavor=0x2937a34*=0) returned 0x0
	[0168.562] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe") returned 0x6c
	[0168.562] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe") returned 0x6c
	[0168.562] IWbemClassObject:Get (in: This=0x7ba2b8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2937a30*=8, plFlavor=0x2937a34*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe", varVal2=0x0), pType=0x2937a30*=8, plFlavor=0x2937a34*=0) returned 0x0
	[0168.562] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe") returned 0x6c
	[0168.562] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe") returned 0x6c
	[0168.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe", lpFilePart=0x0) returned 0x36
	[0168.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe" (normalized: "c:\\program files\\reference assemblies\\mxslipstream.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2ac8e10, ftCreationTime.dwHighDateTime=0x1d7ecf1, ftLastAccessTime.dwLowDateTime=0xb332b8e0, ftLastAccessTime.dwHighDateTime=0x1d7f57a, ftLastWriteTime.dwLowDateTime=0xb332b8e0, ftLastWriteTime.dwHighDateTime=0x1d7f57a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.563] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.583] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Reference Assemblies\\mxslipstream.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2937c1c | out: lpData=0x2937c1c) returned 1
	[0168.583] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2938164, puLen=0x19f470) returned 1
	[0168.583] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2937cd4, puLen=0x19f3f0) returned 1
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2937d80, puLen=0x19f3f0) returned 1
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2937e24, puLen=0x19f3f0) returned 1
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2937e64, puLen=0x19f3f0) returned 1
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2937f0c, puLen=0x19f3f0) returned 1
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2937fb8, puLen=0x19f3f0) returned 1
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293805c, puLen=0x19f3f0) returned 1
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2938104, puLen=0x19f3f0) returned 1
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2938164, puLen=0x19f3e4) returned 1
	[0168.584] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.584] VerQueryValueW (in: pBlock=0x2937c1c, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2937c44, puLen=0x19f3f4) returned 1
	[0168.584] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0168.584] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7ba450, puReturned=0x2892750*=0x1) returned 0x0
	[0168.590] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ba450) returned 0x0
	[0168.590] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.590] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.590] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.590] IUnknown:AddRef (This=0x7ba450) returned 0x3
	[0168.590] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.590] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.590] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ba454) returned 0x0
	[0168.591] IMarshal:GetUnmarshalClass (in: This=0x7ba454, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.591] IUnknown:Release (This=0x7ba454) returned 0x3
	[0168.591] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.591] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.591] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.591] IUnknown:Release (This=0x7ba450) returned 0x2
	[0168.591] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.591] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.591] IUnknown:QueryInterface (in: This=0x7ba450, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ba450) returned 0x0
	[0168.591] IUnknown:AddRef (This=0x7ba450) returned 0x4
	[0168.591] IUnknown:Release (This=0x7ba450) returned 0x3
	[0168.591] IUnknown:Release (This=0x7ba450) returned 0x2
	[0168.591] CoTaskMemFree (pv=0x783170) 
	[0168.591] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.591] IUnknown:AddRef (This=0x7ba450) returned 0x3
	[0168.591] IWbemClassObject:Get (in: This=0x7ba450, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.592] IWbemClassObject:Get (in: This=0x7ba450, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4332\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.592] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4332\"") returned 0x5e
	[0168.592] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4332\"") returned 0x5e
	[0168.592] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x750
	[0168.592] SetEvent (hEvent=0x2bc) returned 1
	[0168.592] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x750, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.599] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.599] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd148, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd148) returned 0x0
	[0168.599] WbemDefPath:IUnknown:AddRef (This=0x7bd148) returned 0x3
	[0168.599] WbemDefPath:IUnknown:Release (This=0x7bd148) returned 0x2
	[0168.599] WbemDefPath:IWbemPath:SetText (This=0x7bd148, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4332\"") returned 0x0
	[0168.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.599] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.599] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.599] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.599] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.599] IWbemClassObject:Get (in: This=0x7ba450, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2939b54*=0, plFlavor=0x2939b58*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe", varVal2=0x0), pType=0x2939b54*=8, plFlavor=0x2939b58*=0) returned 0x0
	[0168.599] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe") returned 0x7c
	[0168.599] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe") returned 0x7c
	[0168.599] IWbemClassObject:Get (in: This=0x7ba450, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2939b54*=8, plFlavor=0x2939b58*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe", varVal2=0x0), pType=0x2939b54*=8, plFlavor=0x2939b58*=0) returned 0x0
	[0168.600] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe") returned 0x7c
	[0168.600] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe") returned 0x7c
	[0168.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe", lpFilePart=0x0) returned 0x3e
	[0168.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe" (normalized: "c:\\program files (x86)\\windows multimedia platform\\omnipos.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfd5020, ftCreationTime.dwHighDateTime=0x1d80fb1, ftLastAccessTime.dwLowDateTime=0x851e7a90, ftLastAccessTime.dwHighDateTime=0x1d81215, ftLastWriteTime.dwLowDateTime=0x851e7a90, ftLastWriteTime.dwHighDateTime=0x1d81215, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.600] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.606] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2939d70 | out: lpData=0x2939d70) returned 1
	[0168.607] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x293a2b8, puLen=0x19f470) returned 1
	[0168.607] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2939e28, puLen=0x19f3f0) returned 1
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2939ed4, puLen=0x19f3f0) returned 1
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2939f78, puLen=0x19f3f0) returned 1
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2939fb8, puLen=0x19f3f0) returned 1
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293a060, puLen=0x19f3f0) returned 1
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293a10c, puLen=0x19f3f0) returned 1
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293a1b0, puLen=0x19f3f0) returned 1
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293a258, puLen=0x19f3f0) returned 1
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x293a2b8, puLen=0x19f3e4) returned 1
	[0168.608] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.608] VerQueryValueW (in: pBlock=0x2939d70, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2939d98, puLen=0x19f3f4) returned 1
	[0168.608] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0168.608] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7ba918, puReturned=0x2892750*=0x1) returned 0x0
	[0168.612] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7ba918) returned 0x0
	[0168.612] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.612] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.612] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.612] IUnknown:AddRef (This=0x7ba918) returned 0x3
	[0168.612] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.612] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.612] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7ba91c) returned 0x0
	[0168.613] IMarshal:GetUnmarshalClass (in: This=0x7ba91c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.613] IUnknown:Release (This=0x7ba91c) returned 0x3
	[0168.613] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.613] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.613] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.613] IUnknown:Release (This=0x7ba918) returned 0x2
	[0168.613] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.613] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.613] IUnknown:QueryInterface (in: This=0x7ba918, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7ba918) returned 0x0
	[0168.613] IUnknown:AddRef (This=0x7ba918) returned 0x4
	[0168.613] IUnknown:Release (This=0x7ba918) returned 0x3
	[0168.613] IUnknown:Release (This=0x7ba918) returned 0x2
	[0168.613] CoTaskMemFree (pv=0x783170) 
	[0168.613] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.613] IUnknown:AddRef (This=0x7ba918) returned 0x3
	[0168.613] IWbemClassObject:Get (in: This=0x7ba918, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.614] IWbemClassObject:Get (in: This=0x7ba918, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4348\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.614] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4348\"") returned 0x5e
	[0168.614] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4348\"") returned 0x5e
	[0168.614] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x754
	[0168.614] SetEvent (hEvent=0x2bc) returned 1
	[0168.614] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x754, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.618] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.618] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.618] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd1b8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd1b8) returned 0x0
	[0168.619] WbemDefPath:IUnknown:AddRef (This=0x7bd1b8) returned 0x3
	[0168.619] WbemDefPath:IUnknown:Release (This=0x7bd1b8) returned 0x2
	[0168.619] WbemDefPath:IWbemPath:SetText (This=0x7bd1b8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4348\"") returned 0x0
	[0168.619] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.619] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.619] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.619] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.619] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.619] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.619] IWbemClassObject:Get (in: This=0x7ba918, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x293bc58*=0, plFlavor=0x293bc5c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows NT\\spcwin.exe", varVal2=0x0), pType=0x293bc58*=8, plFlavor=0x293bc5c*=0) returned 0x0
	[0168.619] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\spcwin.exe") returned 0x58
	[0168.619] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\spcwin.exe") returned 0x58
	[0168.619] IWbemClassObject:Get (in: This=0x7ba918, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x293bc58*=8, plFlavor=0x293bc5c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows NT\\spcwin.exe", varVal2=0x0), pType=0x293bc58*=8, plFlavor=0x293bc5c*=0) returned 0x0
	[0168.619] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\spcwin.exe") returned 0x58
	[0168.619] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\spcwin.exe") returned 0x58
	[0168.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\spcwin.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\spcwin.exe", lpFilePart=0x0) returned 0x2c
	[0168.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\spcwin.exe" (normalized: "c:\\program files (x86)\\windows nt\\spcwin.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79856b10, ftCreationTime.dwHighDateTime=0x1d7b29f, ftLastAccessTime.dwLowDateTime=0x73dd610, ftLastAccessTime.dwHighDateTime=0x1d7e5c5, ftLastWriteTime.dwLowDateTime=0x73dd610, ftLastWriteTime.dwHighDateTime=0x1d7e5c5, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.620] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows NT\\spcwin.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.621] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows NT\\spcwin.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x293be08 | out: lpData=0x293be08) returned 1
	[0168.624] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x293c350, puLen=0x19f470) returned 1
	[0168.624] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293bec0, puLen=0x19f3f0) returned 1
	[0168.624] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293bf6c, puLen=0x19f3f0) returned 1
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293c010, puLen=0x19f3f0) returned 1
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293c050, puLen=0x19f3f0) returned 1
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293c0f8, puLen=0x19f3f0) returned 1
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293c1a4, puLen=0x19f3f0) returned 1
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293c248, puLen=0x19f3f0) returned 1
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293c2f0, puLen=0x19f3f0) returned 1
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x293c350, puLen=0x19f3e4) returned 1
	[0168.625] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.625] VerQueryValueW (in: pBlock=0x293be08, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x293be30, puLen=0x19f3f4) returned 1
	[0168.625] CoTaskMemAlloc (cb=0x4) returned 0x7830b0
	[0168.625] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7830b0, puReturned=0x2892750 | out: apObjects=0x7830b0*=0x7b9130, puReturned=0x2892750*=0x1) returned 0x0
	[0168.629] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b9130) returned 0x0
	[0168.629] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.629] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.629] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.629] IUnknown:AddRef (This=0x7b9130) returned 0x3
	[0168.629] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.630] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.630] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b9134) returned 0x0
	[0168.630] IMarshal:GetUnmarshalClass (in: This=0x7b9134, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.630] IUnknown:Release (This=0x7b9134) returned 0x3
	[0168.630] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.630] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.630] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.630] IUnknown:Release (This=0x7b9130) returned 0x2
	[0168.630] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.630] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.630] IUnknown:QueryInterface (in: This=0x7b9130, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b9130) returned 0x0
	[0168.630] IUnknown:AddRef (This=0x7b9130) returned 0x4
	[0168.630] IUnknown:Release (This=0x7b9130) returned 0x3
	[0168.631] IUnknown:Release (This=0x7b9130) returned 0x2
	[0168.631] CoTaskMemFree (pv=0x7830b0) 
	[0168.631] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.631] IUnknown:AddRef (This=0x7b9130) returned 0x3
	[0168.631] IWbemClassObject:Get (in: This=0x7b9130, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.631] IWbemClassObject:Get (in: This=0x7b9130, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4356\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.631] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4356\"") returned 0x5e
	[0168.631] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4356\"") returned 0x5e
	[0168.631] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x758
	[0168.631] SetEvent (hEvent=0x2bc) returned 1
	[0168.631] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x758, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.638] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.638] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.638] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb98, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bcb98) returned 0x0
	[0168.638] WbemDefPath:IUnknown:AddRef (This=0x7bcb98) returned 0x3
	[0168.638] WbemDefPath:IUnknown:Release (This=0x7bcb98) returned 0x2
	[0168.638] WbemDefPath:IWbemPath:SetText (This=0x7bcb98, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4356\"") returned 0x0
	[0168.638] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.639] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.639] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.639] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.639] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.639] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.639] IWbemClassObject:Get (in: This=0x7b9130, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x293dcec*=0, plFlavor=0x293dcf0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe", varVal2=0x0), pType=0x293dcec*=8, plFlavor=0x293dcf0*=0) returned 0x0
	[0168.639] SysStringByteLen (bstr="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe") returned 0x7a
	[0168.639] SysStringByteLen (bstr="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe") returned 0x7a
	[0168.639] IWbemClassObject:Get (in: This=0x7b9130, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x293dcec*=8, plFlavor=0x293dcf0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe", varVal2=0x0), pType=0x293dcec*=8, plFlavor=0x293dcf0*=0) returned 0x0
	[0168.639] SysStringByteLen (bstr="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe") returned 0x7a
	[0168.639] SysStringByteLen (bstr="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe") returned 0x7a
	[0168.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe", lpFilePart=0x0) returned 0x3d
	[0168.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe" (normalized: "c:\\program files\\windows portable devices\\spgagentservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0999480, ftCreationTime.dwHighDateTime=0x1d7d038, ftLastAccessTime.dwLowDateTime=0x730b9f60, ftLastAccessTime.dwHighDateTime=0x1d818ad, ftLastWriteTime.dwLowDateTime=0x730b9f60, ftLastWriteTime.dwHighDateTime=0x1d818ad, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.640] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.641] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x293defc | out: lpData=0x293defc) returned 1
	[0168.643] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x293e444, puLen=0x19f470) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293dfb4, puLen=0x19f3f0) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293e060, puLen=0x19f3f0) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293e104, puLen=0x19f3f0) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293e144, puLen=0x19f3f0) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293e1ec, puLen=0x19f3f0) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293e298, puLen=0x19f3f0) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293e33c, puLen=0x19f3f0) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x293e3e4, puLen=0x19f3f0) returned 1
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x293e444, puLen=0x19f3e4) returned 1
	[0168.644] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.644] VerQueryValueW (in: pBlock=0x293defc, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x293df24, puLen=0x19f3f4) returned 1
	[0168.644] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0168.644] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7baab0, puReturned=0x2892750*=0x1) returned 0x0
	[0168.648] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7baab0) returned 0x0
	[0168.649] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.649] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.649] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.649] IUnknown:AddRef (This=0x7baab0) returned 0x3
	[0168.649] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.649] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.649] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7baab4) returned 0x0
	[0168.649] IMarshal:GetUnmarshalClass (in: This=0x7baab4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.649] IUnknown:Release (This=0x7baab4) returned 0x3
	[0168.649] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.649] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.649] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.649] IUnknown:Release (This=0x7baab0) returned 0x2
	[0168.649] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.649] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.649] IUnknown:QueryInterface (in: This=0x7baab0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7baab0) returned 0x0
	[0168.650] IUnknown:AddRef (This=0x7baab0) returned 0x4
	[0168.650] IUnknown:Release (This=0x7baab0) returned 0x3
	[0168.650] IUnknown:Release (This=0x7baab0) returned 0x2
	[0168.650] CoTaskMemFree (pv=0x783170) 
	[0168.650] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.650] IUnknown:AddRef (This=0x7baab0) returned 0x3
	[0168.650] IWbemClassObject:Get (in: This=0x7baab0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.650] IWbemClassObject:Get (in: This=0x7baab0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.650] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"") returned 0x5e
	[0168.650] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"") returned 0x5e
	[0168.650] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x75c
	[0168.650] SetEvent (hEvent=0x2bc) returned 1
	[0168.651] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x75c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.656] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.656] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.656] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd538, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd538) returned 0x0
	[0168.656] WbemDefPath:IUnknown:AddRef (This=0x7bd538) returned 0x3
	[0168.656] WbemDefPath:IUnknown:Release (This=0x7bd538) returned 0x2
	[0168.656] WbemDefPath:IWbemPath:SetText (This=0x7bd538, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"") returned 0x0
	[0168.656] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.656] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.656] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.656] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.656] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.656] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.657] IWbemClassObject:Get (in: This=0x7baab0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x293fe0c*=0, plFlavor=0x293fe10*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe", varVal2=0x0), pType=0x293fe0c*=8, plFlavor=0x293fe10*=0) returned 0x0
	[0168.657] SysStringByteLen (bstr="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe") returned 0x6a
	[0168.657] SysStringByteLen (bstr="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe") returned 0x6a
	[0168.657] IWbemClassObject:Get (in: This=0x7baab0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x293fe0c*=8, plFlavor=0x293fe10*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe", varVal2=0x0), pType=0x293fe0c*=8, plFlavor=0x293fe10*=0) returned 0x0
	[0168.657] SysStringByteLen (bstr="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe") returned 0x6a
	[0168.657] SysStringByteLen (bstr="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe") returned 0x6a
	[0168.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe", lpFilePart=0x0) returned 0x35
	[0168.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe" (normalized: "c:\\program files\\windows multimedia platform\\utg2.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4d4fdb0, ftCreationTime.dwHighDateTime=0x1d7c103, ftLastAccessTime.dwLowDateTime=0x9779b730, ftLastAccessTime.dwHighDateTime=0x1d7f254, ftLastWriteTime.dwLowDateTime=0x9779b730, ftLastWriteTime.dwHighDateTime=0x1d7f254, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.657] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.659] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Windows Multimedia Platform\\utg2.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x293ffec | out: lpData=0x293ffec) returned 1
	[0168.661] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2940534, puLen=0x19f470) returned 1
	[0168.661] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29400a4, puLen=0x19f3f0) returned 1
	[0168.661] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2940150, puLen=0x19f3f0) returned 1
	[0168.661] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29401f4, puLen=0x19f3f0) returned 1
	[0168.661] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2940234, puLen=0x19f3f0) returned 1
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29402dc, puLen=0x19f3f0) returned 1
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2940388, puLen=0x19f3f0) returned 1
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294042c, puLen=0x19f3f0) returned 1
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29404d4, puLen=0x19f3f0) returned 1
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2940534, puLen=0x19f3e4) returned 1
	[0168.662] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.662] VerQueryValueW (in: pBlock=0x293ffec, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2940014, puLen=0x19f3f4) returned 1
	[0168.662] CoTaskMemAlloc (cb=0x4) returned 0x782fd0
	[0168.662] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fd0, puReturned=0x2892750 | out: apObjects=0x782fd0*=0x7b92c8, puReturned=0x2892750*=0x1) returned 0x0
	[0168.665] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7b92c8) returned 0x0
	[0168.666] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.666] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.666] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.666] IUnknown:AddRef (This=0x7b92c8) returned 0x3
	[0168.666] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.666] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.666] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7b92cc) returned 0x0
	[0168.667] IMarshal:GetUnmarshalClass (in: This=0x7b92cc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.667] IUnknown:Release (This=0x7b92cc) returned 0x3
	[0168.667] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.667] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.667] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.667] IUnknown:Release (This=0x7b92c8) returned 0x2
	[0168.667] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.667] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.667] IUnknown:QueryInterface (in: This=0x7b92c8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7b92c8) returned 0x0
	[0168.667] IUnknown:AddRef (This=0x7b92c8) returned 0x4
	[0168.667] IUnknown:Release (This=0x7b92c8) returned 0x3
	[0168.667] IUnknown:Release (This=0x7b92c8) returned 0x2
	[0168.667] CoTaskMemFree (pv=0x782fd0) 
	[0168.667] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.667] IUnknown:AddRef (This=0x7b92c8) returned 0x3
	[0168.667] IWbemClassObject:Get (in: This=0x7b92c8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.668] IWbemClassObject:Get (in: This=0x7b92c8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4476\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.668] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4476\"") returned 0x5e
	[0168.668] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4476\"") returned 0x5e
	[0168.668] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x760
	[0168.668] SetEvent (hEvent=0x2bc) returned 1
	[0168.668] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x760, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.674] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.674] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.674] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd228, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd228) returned 0x0
	[0168.674] WbemDefPath:IUnknown:AddRef (This=0x7bd228) returned 0x3
	[0168.674] WbemDefPath:IUnknown:Release (This=0x7bd228) returned 0x2
	[0168.674] WbemDefPath:IWbemPath:SetText (This=0x7bd228, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4476\"") returned 0x0
	[0168.674] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.674] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.674] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.674] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.674] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.674] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.674] IWbemClassObject:Get (in: This=0x7b92c8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2941eb4*=0, plFlavor=0x2941eb8*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE", varVal2=0x0), pType=0x2941eb4*=8, plFlavor=0x2941eb8*=0) returned 0x0
	[0168.674] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE") returned 0x6a
	[0168.675] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE") returned 0x6a
	[0168.675] IWbemClassObject:Get (in: This=0x7b92c8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2941eb4*=8, plFlavor=0x2941eb8*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE", varVal2=0x0), pType=0x2941eb4*=8, plFlavor=0x2941eb8*=0) returned 0x0
	[0168.675] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE") returned 0x6a
	[0168.675] SysStringByteLen (bstr="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE") returned 0x6a
	[0168.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE", lpFilePart=0x0) returned 0x35
	[0168.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52015a87, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x52015a87, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x52015a87, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc82c0)) returned 1
	[0168.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.676] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xba4
	[0168.799] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Internet Explorer\\IEXPLORE.EXE", dwHandle=0x0, dwLen=0xba4, lpData=0x2942094 | out: lpData=0x2942094) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2942660, puLen=0x19f470) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294214c, puLen=0x19f3f0) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29421a0, puLen=0x19f3f0) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29421e4, puLen=0x19f3f0) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2942254, puLen=0x19f3f0) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294228c, puLen=0x19f3f0) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2942310, puLen=0x19f3f0) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2942354, puLen=0x19f3f0) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294239c, puLen=0x19f3f0) returned 1
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.804] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.805] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.805] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.805] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2942660, puLen=0x19f3e4) returned 1
	[0168.805] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.805] VerQueryValueW (in: pBlock=0x2942094, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x29420bc, puLen=0x19f3f4) returned 1
	[0168.805] CoTaskMemAlloc (cb=0x4) returned 0x782fd0
	[0168.805] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fd0, puReturned=0x2892750 | out: apObjects=0x782fd0*=0x7cbce8, puReturned=0x2892750*=0x1) returned 0x0
	[0168.810] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cbce8) returned 0x0
	[0168.810] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.810] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.810] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.811] IUnknown:AddRef (This=0x7cbce8) returned 0x3
	[0168.811] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.811] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.811] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cbcec) returned 0x0
	[0168.811] IMarshal:GetUnmarshalClass (in: This=0x7cbcec, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.811] IUnknown:Release (This=0x7cbcec) returned 0x3
	[0168.811] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.811] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.811] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.811] IUnknown:Release (This=0x7cbce8) returned 0x2
	[0168.811] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.811] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.811] IUnknown:QueryInterface (in: This=0x7cbce8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cbce8) returned 0x0
	[0168.812] IUnknown:AddRef (This=0x7cbce8) returned 0x4
	[0168.812] IUnknown:Release (This=0x7cbce8) returned 0x3
	[0168.812] IUnknown:Release (This=0x7cbce8) returned 0x2
	[0168.812] CoTaskMemFree (pv=0x782fd0) 
	[0168.812] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.812] IUnknown:AddRef (This=0x7cbce8) returned 0x3
	[0168.812] IWbemClassObject:Get (in: This=0x7cbce8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.812] IWbemClassObject:Get (in: This=0x7cbce8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4524\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.812] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4524\"") returned 0x5e
	[0168.812] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4524\"") returned 0x5e
	[0168.812] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x764
	[0168.813] SetEvent (hEvent=0x2bc) returned 1
	[0168.813] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x764, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.818] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.818] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.819] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd298, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd298) returned 0x0
	[0168.819] WbemDefPath:IUnknown:AddRef (This=0x7bd298) returned 0x3
	[0168.819] WbemDefPath:IUnknown:Release (This=0x7bd298) returned 0x2
	[0168.819] WbemDefPath:IWbemPath:SetText (This=0x7bd298, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4524\"") returned 0x0
	[0168.819] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.819] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.819] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.819] IWbemClassObject:Get (in: This=0x7cbce8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29440e8*=0, plFlavor=0x29440ec*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows NT\\accept.exe", varVal2=0x0), pType=0x29440e8*=8, plFlavor=0x29440ec*=0) returned 0x0
	[0168.820] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\accept.exe") returned 0x58
	[0168.820] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\accept.exe") returned 0x58
	[0168.820] IWbemClassObject:Get (in: This=0x7cbce8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29440e8*=8, plFlavor=0x29440ec*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files (x86)\\Windows NT\\accept.exe", varVal2=0x0), pType=0x29440e8*=8, plFlavor=0x29440ec*=0) returned 0x0
	[0168.820] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\accept.exe") returned 0x58
	[0168.820] SysStringByteLen (bstr="C:\\Program Files (x86)\\Windows NT\\accept.exe") returned 0x58
	[0168.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\accept.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\accept.exe", lpFilePart=0x0) returned 0x2c
	[0168.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\accept.exe" (normalized: "c:\\program files (x86)\\windows nt\\accept.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8df98880, ftCreationTime.dwHighDateTime=0x1d7d72d, ftLastAccessTime.dwLowDateTime=0xac4244d0, ftLastAccessTime.dwHighDateTime=0x1d80c2f, ftLastWriteTime.dwLowDateTime=0xac4244d0, ftLastWriteTime.dwHighDateTime=0x1d80c2f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.821] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Windows NT\\accept.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.825] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Windows NT\\accept.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x2944298 | out: lpData=0x2944298) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x29447e0, puLen=0x19f470) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2944350, puLen=0x19f3f0) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29443fc, puLen=0x19f3f0) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29444a0, puLen=0x19f3f0) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29444e0, puLen=0x19f3f0) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2944588, puLen=0x19f3f0) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2944634, puLen=0x19f3f0) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29446d8, puLen=0x19f3f0) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2944780, puLen=0x19f3f0) returned 1
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.826] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x29447e0, puLen=0x19f3e4) returned 1
	[0168.826] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.827] VerQueryValueW (in: pBlock=0x2944298, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x29442c0, puLen=0x19f3f4) returned 1
	[0168.827] CoTaskMemAlloc (cb=0x4) returned 0x783010
	[0168.827] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783010, puReturned=0x2892750 | out: apObjects=0x783010*=0x7cd800, puReturned=0x2892750*=0x1) returned 0x0
	[0168.830] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cd800) returned 0x0
	[0168.831] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.831] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.831] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.831] IUnknown:AddRef (This=0x7cd800) returned 0x3
	[0168.831] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.831] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.831] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cd804) returned 0x0
	[0168.832] IMarshal:GetUnmarshalClass (in: This=0x7cd804, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.832] IUnknown:Release (This=0x7cd804) returned 0x3
	[0168.832] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.832] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.832] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.832] IUnknown:Release (This=0x7cd800) returned 0x2
	[0168.832] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.832] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.832] IUnknown:QueryInterface (in: This=0x7cd800, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cd800) returned 0x0
	[0168.832] IUnknown:AddRef (This=0x7cd800) returned 0x4
	[0168.832] IUnknown:Release (This=0x7cd800) returned 0x3
	[0168.833] IUnknown:Release (This=0x7cd800) returned 0x2
	[0168.833] CoTaskMemFree (pv=0x783010) 
	[0168.833] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.833] IUnknown:AddRef (This=0x7cd800) returned 0x3
	[0168.833] IWbemClassObject:Get (in: This=0x7cd800, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.833] IWbemClassObject:Get (in: This=0x7cd800, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4532\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.833] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4532\"") returned 0x5e
	[0168.833] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4532\"") returned 0x5e
	[0168.833] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x768
	[0168.833] SetEvent (hEvent=0x2bc) returned 1
	[0168.834] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x768, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.839] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.839] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.839] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc7a8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bc7a8) returned 0x0
	[0168.839] WbemDefPath:IUnknown:AddRef (This=0x7bc7a8) returned 0x3
	[0168.839] WbemDefPath:IUnknown:Release (This=0x7bc7a8) returned 0x2
	[0168.839] WbemDefPath:IWbemPath:SetText (This=0x7bc7a8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4532\"") returned 0x0
	[0168.839] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.839] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.840] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.840] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.840] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.840] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.840] IWbemClassObject:Get (in: This=0x7cd800, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294618c*=0, plFlavor=0x2946190*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe", varVal2=0x0), pType=0x294618c*=8, plFlavor=0x2946190*=0) returned 0x0
	[0168.840] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe") returned 0x7a
	[0168.840] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe") returned 0x7a
	[0168.840] IWbemClassObject:Get (in: This=0x7cd800, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294618c*=8, plFlavor=0x2946190*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe", varVal2=0x0), pType=0x294618c*=8, plFlavor=0x2946190*=0) returned 0x0
	[0168.840] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe") returned 0x7a
	[0168.840] SysStringByteLen (bstr="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe") returned 0x7a
	[0168.840] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe", lpFilePart=0x0) returned 0x3d
	[0168.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe" (normalized: "c:\\program files\\reference assemblies\\different_shot_from.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12a5cb90, ftCreationTime.dwHighDateTime=0x1d79fc8, ftLastAccessTime.dwLowDateTime=0x2d1bf590, ftLastAccessTime.dwHighDateTime=0x1d810e2, ftLastWriteTime.dwLowDateTime=0x2d1bf590, ftLastWriteTime.dwHighDateTime=0x1d810e2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0168.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.841] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0xa9c
	[0168.843] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Reference Assemblies\\different_shot_from.exe", dwHandle=0x0, dwLen=0xa9c, lpData=0x294639c | out: lpData=0x294639c) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x29468e4, puLen=0x19f470) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2946454, puLen=0x19f3f0) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2946500, puLen=0x19f3f0) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29465a4, puLen=0x19f3f0) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29465e4, puLen=0x19f3f0) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294668c, puLen=0x19f3f0) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2946738, puLen=0x19f3f0) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29467dc, puLen=0x19f3f0) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2946884, puLen=0x19f3f0) returned 1
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.844] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.845] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x29468e4, puLen=0x19f3e4) returned 1
	[0168.845] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.845] VerQueryValueW (in: pBlock=0x294639c, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x29463c4, puLen=0x19f3f4) returned 1
	[0168.845] CoTaskMemAlloc (cb=0x4) returned 0x782fc0
	[0168.845] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x782fc0, puReturned=0x2892750 | out: apObjects=0x782fc0*=0x7cb9b8, puReturned=0x2892750*=0x1) returned 0x0
	[0168.848] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cb9b8) returned 0x0
	[0168.848] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.848] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.848] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.848] IUnknown:AddRef (This=0x7cb9b8) returned 0x3
	[0168.848] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.848] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.849] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cb9bc) returned 0x0
	[0168.849] IMarshal:GetUnmarshalClass (in: This=0x7cb9bc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.849] IUnknown:Release (This=0x7cb9bc) returned 0x3
	[0168.849] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.849] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.849] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.849] IUnknown:Release (This=0x7cb9b8) returned 0x2
	[0168.849] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.849] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.849] IUnknown:QueryInterface (in: This=0x7cb9b8, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cb9b8) returned 0x0
	[0168.849] IUnknown:AddRef (This=0x7cb9b8) returned 0x4
	[0168.849] IUnknown:Release (This=0x7cb9b8) returned 0x3
	[0168.849] IUnknown:Release (This=0x7cb9b8) returned 0x2
	[0168.849] CoTaskMemFree (pv=0x782fc0) 
	[0168.850] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.850] IUnknown:AddRef (This=0x7cb9b8) returned 0x3
	[0168.850] IWbemClassObject:Get (in: This=0x7cb9b8, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.850] IWbemClassObject:Get (in: This=0x7cb9b8, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4820\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.850] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4820\"") returned 0x5e
	[0168.850] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4820\"") returned 0x5e
	[0168.850] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x76c
	[0168.850] SetEvent (hEvent=0x2bc) returned 1
	[0168.851] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x76c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.858] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.858] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.858] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd378, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bd378) returned 0x0
	[0168.858] WbemDefPath:IUnknown:AddRef (This=0x7bd378) returned 0x3
	[0168.858] WbemDefPath:IUnknown:Release (This=0x7bd378) returned 0x2
	[0168.858] WbemDefPath:IWbemPath:SetText (This=0x7bd378, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4820\"") returned 0x0
	[0168.858] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.858] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.858] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.859] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.859] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.859] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.859] IWbemClassObject:Get (in: This=0x7cb9b8, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29482bc*=0, plFlavor=0x29482c0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\backgroundTaskHost.exe", varVal2=0x0), pType=0x29482bc*=8, plFlavor=0x29482c0*=0) returned 0x0
	[0168.859] SysStringByteLen (bstr="C:\\Windows\\system32\\backgroundTaskHost.exe") returned 0x54
	[0168.859] SysStringByteLen (bstr="C:\\Windows\\system32\\backgroundTaskHost.exe") returned 0x54
	[0168.859] IWbemClassObject:Get (in: This=0x7cb9b8, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29482bc*=8, plFlavor=0x29482c0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\backgroundTaskHost.exe", varVal2=0x0), pType=0x29482bc*=8, plFlavor=0x29482c0*=0) returned 0x0
	[0168.859] SysStringByteLen (bstr="C:\\Windows\\system32\\backgroundTaskHost.exe") returned 0x54
	[0168.859] SysStringByteLen (bstr="C:\\Windows\\system32\\backgroundTaskHost.exe") returned 0x54
	[0168.859] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\backgroundTaskHost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\backgroundTaskHost.exe", lpFilePart=0x0) returned 0x2a
	[0168.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.860] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\backgroundTaskHost.exe" (normalized: "c:\\windows\\syswow64\\backgroundtaskhost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5ab817, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e5ab817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e5ab817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4560)) returned 1
	[0168.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.865] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\backgroundTaskHost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x77c
	[0168.871] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\backgroundTaskHost.exe", dwHandle=0x0, dwLen=0x77c, lpData=0x2948460 | out: lpData=0x2948460) returned 1
	[0168.872] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x2948818, puLen=0x19f470) returned 1
	[0168.872] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2948518, puLen=0x19f3f0) returned 1
	[0168.872] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294856c, puLen=0x19f3f0) returned 1
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29485b8, puLen=0x19f3f0) returned 1
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2948628, puLen=0x19f3f0) returned 1
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x2948678, puLen=0x19f3f0) returned 1
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29486fc, puLen=0x19f3f0) returned 1
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294874c, puLen=0x19f3f0) returned 1
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x29487bc, puLen=0x19f3f0) returned 1
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x2948818, puLen=0x19f3e4) returned 1
	[0168.873] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.873] VerQueryValueW (in: pBlock=0x2948460, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x2948488, puLen=0x19f3f4) returned 1
	[0168.873] CoTaskMemAlloc (cb=0x4) returned 0x7830b0
	[0168.874] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7830b0, puReturned=0x2892750 | out: apObjects=0x7830b0*=0x7cc678, puReturned=0x2892750*=0x1) returned 0x0
	[0168.877] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cc678) returned 0x0
	[0168.878] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.878] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.878] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.878] IUnknown:AddRef (This=0x7cc678) returned 0x3
	[0168.878] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.878] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.878] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cc67c) returned 0x0
	[0168.878] IMarshal:GetUnmarshalClass (in: This=0x7cc67c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.878] IUnknown:Release (This=0x7cc67c) returned 0x3
	[0168.879] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.879] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.879] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.879] IUnknown:Release (This=0x7cc678) returned 0x2
	[0168.879] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.879] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.879] IUnknown:QueryInterface (in: This=0x7cc678, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cc678) returned 0x0
	[0168.879] IUnknown:AddRef (This=0x7cc678) returned 0x4
	[0168.879] IUnknown:Release (This=0x7cc678) returned 0x3
	[0168.879] IUnknown:Release (This=0x7cc678) returned 0x2
	[0168.879] CoTaskMemFree (pv=0x7830b0) 
	[0168.879] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.879] IUnknown:AddRef (This=0x7cc678) returned 0x3
	[0168.879] IWbemClassObject:Get (in: This=0x7cc678, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.880] IWbemClassObject:Get (in: This=0x7cc678, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4844\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.880] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4844\"") returned 0x5e
	[0168.880] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4844\"") returned 0x5e
	[0168.880] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x770
	[0168.880] SetEvent (hEvent=0x2bc) returned 1
	[0168.880] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x770, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.884] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.884] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc968, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bc968) returned 0x0
	[0168.884] WbemDefPath:IUnknown:AddRef (This=0x7bc968) returned 0x3
	[0168.884] WbemDefPath:IUnknown:Release (This=0x7bc968) returned 0x2
	[0168.884] WbemDefPath:IWbemPath:SetText (This=0x7bc968, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4844\"") returned 0x0
	[0168.884] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.884] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.884] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.884] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.884] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.884] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.884] IWbemClassObject:Get (in: This=0x7cc678, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294a0e0*=0, plFlavor=0x294a0e4*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294a0e0*=8, plFlavor=0x294a0e4*=32) returned 0x0
	[0168.885] IWbemClassObject:Get (in: This=0x7cc678, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294a0e0*=8, plFlavor=0x294a0e4*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294a0e0*=8, plFlavor=0x294a0e4*=32) returned 0x0
	[0168.885] CoTaskMemAlloc (cb=0x4) returned 0x7830b0
	[0168.885] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x7830b0, puReturned=0x2892750 | out: apObjects=0x7830b0*=0x7cc018, puReturned=0x2892750*=0x1) returned 0x0
	[0168.903] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cc018) returned 0x0
	[0168.904] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.904] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.904] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.904] IUnknown:AddRef (This=0x7cc018) returned 0x3
	[0168.904] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.904] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.904] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cc01c) returned 0x0
	[0168.904] IMarshal:GetUnmarshalClass (in: This=0x7cc01c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.904] IUnknown:Release (This=0x7cc01c) returned 0x3
	[0168.904] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.905] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.905] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.905] IUnknown:Release (This=0x7cc018) returned 0x2
	[0168.905] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.905] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.905] IUnknown:QueryInterface (in: This=0x7cc018, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cc018) returned 0x0
	[0168.905] IUnknown:AddRef (This=0x7cc018) returned 0x4
	[0168.905] IUnknown:Release (This=0x7cc018) returned 0x3
	[0168.905] IUnknown:Release (This=0x7cc018) returned 0x2
	[0168.905] CoTaskMemFree (pv=0x7830b0) 
	[0168.905] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.905] IUnknown:AddRef (This=0x7cc018) returned 0x3
	[0168.905] IWbemClassObject:Get (in: This=0x7cc018, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.905] IWbemClassObject:Get (in: This=0x7cc018, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4860\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.906] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4860\"") returned 0x5e
	[0168.906] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4860\"") returned 0x5e
	[0168.906] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x774
	[0168.906] SetEvent (hEvent=0x2bc) returned 1
	[0168.906] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x774, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.909] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.909] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.909] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc818, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bc818) returned 0x0
	[0168.909] WbemDefPath:IUnknown:AddRef (This=0x7bc818) returned 0x3
	[0168.909] WbemDefPath:IUnknown:Release (This=0x7bc818) returned 0x2
	[0168.909] WbemDefPath:IWbemPath:SetText (This=0x7bc818, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4860\"") returned 0x0
	[0168.909] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.909] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.909] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.910] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.910] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.910] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.910] IWbemClassObject:Get (in: This=0x7cc018, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294a914*=0, plFlavor=0x294a918*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294a914*=8, plFlavor=0x294a918*=32) returned 0x0
	[0168.910] IWbemClassObject:Get (in: This=0x7cc018, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294a914*=8, plFlavor=0x294a918*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294a914*=8, plFlavor=0x294a918*=32) returned 0x0
	[0168.910] CoTaskMemAlloc (cb=0x4) returned 0x783040
	[0168.910] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783040, puReturned=0x2892750 | out: apObjects=0x783040*=0x7cd1a0, puReturned=0x2892750*=0x1) returned 0x0
	[0168.922] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cd1a0) returned 0x0
	[0168.923] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.923] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.923] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.923] IUnknown:AddRef (This=0x7cd1a0) returned 0x3
	[0168.923] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.923] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.923] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cd1a4) returned 0x0
	[0168.923] IMarshal:GetUnmarshalClass (in: This=0x7cd1a4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.923] IUnknown:Release (This=0x7cd1a4) returned 0x3
	[0168.923] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.924] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.924] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.924] IUnknown:Release (This=0x7cd1a0) returned 0x2
	[0168.924] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.924] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.924] IUnknown:QueryInterface (in: This=0x7cd1a0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cd1a0) returned 0x0
	[0168.924] IUnknown:AddRef (This=0x7cd1a0) returned 0x4
	[0168.924] IUnknown:Release (This=0x7cd1a0) returned 0x3
	[0168.924] IUnknown:Release (This=0x7cd1a0) returned 0x2
	[0168.924] CoTaskMemFree (pv=0x783040) 
	[0168.924] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.924] IUnknown:AddRef (This=0x7cd1a0) returned 0x3
	[0168.924] IWbemClassObject:Get (in: This=0x7cd1a0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.925] IWbemClassObject:Get (in: This=0x7cd1a0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4932\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.925] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4932\"") returned 0x5e
	[0168.925] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4932\"") returned 0x5e
	[0168.925] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x778
	[0168.925] SetEvent (hEvent=0x2bc) returned 1
	[0168.925] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x778, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0168.928] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0168.928] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0168.928] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc9d8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bc9d8) returned 0x0
	[0168.928] WbemDefPath:IUnknown:AddRef (This=0x7bc9d8) returned 0x3
	[0168.928] WbemDefPath:IUnknown:Release (This=0x7bc9d8) returned 0x2
	[0168.929] WbemDefPath:IWbemPath:SetText (This=0x7bc9d8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4932\"") returned 0x0
	[0168.929] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0168.929] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0168.929] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.929] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0168.929] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0168.929] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0168.929] IWbemClassObject:Get (in: This=0x7cd1a0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294b148*=0, plFlavor=0x294b14c*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\backgroundTaskHost.exe", varVal2=0x0), pType=0x294b148*=8, plFlavor=0x294b14c*=0) returned 0x0
	[0168.929] SysStringByteLen (bstr="C:\\Windows\\system32\\backgroundTaskHost.exe") returned 0x54
	[0168.929] SysStringByteLen (bstr="C:\\Windows\\system32\\backgroundTaskHost.exe") returned 0x54
	[0168.929] IWbemClassObject:Get (in: This=0x7cd1a0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294b148*=8, plFlavor=0x294b14c*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\backgroundTaskHost.exe", varVal2=0x0), pType=0x294b148*=8, plFlavor=0x294b14c*=0) returned 0x0
	[0168.929] SysStringByteLen (bstr="C:\\Windows\\system32\\backgroundTaskHost.exe") returned 0x54
	[0168.929] SysStringByteLen (bstr="C:\\Windows\\system32\\backgroundTaskHost.exe") returned 0x54
	[0168.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\backgroundTaskHost.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\backgroundTaskHost.exe", lpFilePart=0x0) returned 0x2a
	[0168.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0168.949] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\backgroundTaskHost.exe" (normalized: "c:\\windows\\syswow64\\backgroundtaskhost.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5ab817, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e5ab817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e5ab817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4560)) returned 1
	[0168.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0168.949] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\backgroundTaskHost.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x77c
	[0168.951] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\backgroundTaskHost.exe", dwHandle=0x0, dwLen=0x77c, lpData=0x294b2ec | out: lpData=0x294b2ec) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x294b6a4, puLen=0x19f470) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294b3a4, puLen=0x19f3f0) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294b3f8, puLen=0x19f3f0) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294b444, puLen=0x19f3f0) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294b4b4, puLen=0x19f3f0) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294b504, puLen=0x19f3f0) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294b588, puLen=0x19f3f0) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294b5d8, puLen=0x19f3f0) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294b648, puLen=0x19f3f0) returned 1
	[0168.952] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.953] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.953] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.953] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0168.953] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x294b6a4, puLen=0x19f3e4) returned 1
	[0168.953] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0168.953] VerQueryValueW (in: pBlock=0x294b2ec, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x294b314, puLen=0x19f3f4) returned 1
	[0168.953] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0168.953] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x7cbb50, puReturned=0x2892750*=0x1) returned 0x0
	[0168.980] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cbb50) returned 0x0
	[0168.981] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0168.981] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0168.981] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0168.981] IUnknown:AddRef (This=0x7cbb50) returned 0x3
	[0168.981] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0168.981] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0168.981] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cbb54) returned 0x0
	[0168.982] IMarshal:GetUnmarshalClass (in: This=0x7cbb54, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0168.982] IUnknown:Release (This=0x7cbb54) returned 0x3
	[0168.982] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0168.982] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0168.982] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0168.982] IUnknown:Release (This=0x7cbb50) returned 0x2
	[0168.982] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0168.982] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0168.982] IUnknown:QueryInterface (in: This=0x7cbb50, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cbb50) returned 0x0
	[0168.982] IUnknown:AddRef (This=0x7cbb50) returned 0x4
	[0168.982] IUnknown:Release (This=0x7cbb50) returned 0x3
	[0168.983] IUnknown:Release (This=0x7cbb50) returned 0x2
	[0168.983] CoTaskMemFree (pv=0x783170) 
	[0168.983] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0168.983] IUnknown:AddRef (This=0x7cbb50) returned 0x3
	[0168.983] IWbemClassObject:Get (in: This=0x7cbb50, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0168.983] IWbemClassObject:Get (in: This=0x7cbb50, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0168.983] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x5e
	[0168.983] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x5e
	[0168.983] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x77c
	[0168.983] SetEvent (hEvent=0x2bc) returned 1
	[0168.984] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x77c, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0169.077] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0169.077] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0169.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcea8, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bcea8) returned 0x0
	[0169.077] WbemDefPath:IUnknown:AddRef (This=0x7bcea8) returned 0x3
	[0169.077] WbemDefPath:IUnknown:Release (This=0x7bcea8) returned 0x2
	[0169.077] WbemDefPath:IWbemPath:SetText (This=0x7bcea8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2572\"") returned 0x0
	[0169.079] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0169.079] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0169.079] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0169.079] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0169.079] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0169.079] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0169.079] IWbemClassObject:Get (in: This=0x7cbb50, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294cf6c*=0, plFlavor=0x294cf70*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\msfeedssync.exe", varVal2=0x0), pType=0x294cf6c*=8, plFlavor=0x294cf70*=0) returned 0x0
	[0169.079] SysStringByteLen (bstr="C:\\Windows\\system32\\msfeedssync.exe") returned 0x46
	[0169.079] SysStringByteLen (bstr="C:\\Windows\\system32\\msfeedssync.exe") returned 0x46
	[0169.079] IWbemClassObject:Get (in: This=0x7cbb50, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294cf6c*=8, plFlavor=0x294cf70*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\msfeedssync.exe", varVal2=0x0), pType=0x294cf6c*=8, plFlavor=0x294cf70*=0) returned 0x0
	[0169.079] SysStringByteLen (bstr="C:\\Windows\\system32\\msfeedssync.exe") returned 0x46
	[0169.079] SysStringByteLen (bstr="C:\\Windows\\system32\\msfeedssync.exe") returned 0x46
	[0169.079] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\msfeedssync.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\msfeedssync.exe", lpFilePart=0x0) returned 0x23
	[0169.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0169.080] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\msfeedssync.exe" (normalized: "c:\\windows\\syswow64\\msfeedssync.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e76e76, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56e76e76, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56e76e76, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3400)) returned 1
	[0169.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0169.174] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\msfeedssync.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x70c
	[0169.216] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\msfeedssync.exe", dwHandle=0x0, dwLen=0x70c, lpData=0x294d0e0 | out: lpData=0x294d0e0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x294d460, puLen=0x19f470) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294d198, puLen=0x19f3f0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294d1ec, puLen=0x19f3f0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294d24c, puLen=0x19f3f0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294d2bc, puLen=0x19f3f0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294d2f8, puLen=0x19f3f0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294d37c, puLen=0x19f3f0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294d3bc, puLen=0x19f3f0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294d404, puLen=0x19f3f0) returned 1
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.217] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.218] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x294d460, puLen=0x19f3e4) returned 1
	[0169.218] VerLanguageNameW (in: wLang=0x409, szLang=0x19f178, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0169.218] VerQueryValueW (in: pBlock=0x294d0e0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x294d108, puLen=0x19f3f4) returned 1
	[0169.218] CoTaskMemAlloc (cb=0x4) returned 0x783080
	[0169.218] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783080, puReturned=0x2892750 | out: apObjects=0x783080*=0x7cc1b0, puReturned=0x2892750*=0x1) returned 0x0
	[0169.287] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cc1b0) returned 0x0
	[0169.288] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0169.288] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0169.288] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0169.288] IUnknown:AddRef (This=0x7cc1b0) returned 0x3
	[0169.288] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0169.288] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0169.288] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cc1b4) returned 0x0
	[0169.288] IMarshal:GetUnmarshalClass (in: This=0x7cc1b4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0169.288] IUnknown:Release (This=0x7cc1b4) returned 0x3
	[0169.288] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0169.289] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0169.289] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0169.289] IUnknown:Release (This=0x7cc1b0) returned 0x2
	[0169.289] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0169.289] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0169.289] IUnknown:QueryInterface (in: This=0x7cc1b0, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cc1b0) returned 0x0
	[0169.289] IUnknown:AddRef (This=0x7cc1b0) returned 0x4
	[0169.289] IUnknown:Release (This=0x7cc1b0) returned 0x3
	[0169.289] IUnknown:Release (This=0x7cc1b0) returned 0x2
	[0169.289] CoTaskMemFree (pv=0x783080) 
	[0169.289] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0169.289] IUnknown:AddRef (This=0x7cc1b0) returned 0x3
	[0169.289] IWbemClassObject:Get (in: This=0x7cc1b0, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0169.289] IWbemClassObject:Get (in: This=0x7cc1b0, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3144\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0169.289] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3144\"") returned 0x5e
	[0169.289] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3144\"") returned 0x5e
	[0169.289] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x780
	[0169.290] SetEvent (hEvent=0x2bc) returned 1
	[0169.290] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x780, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0169.297] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0169.297] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0169.297] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc08, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bcc08) returned 0x0
	[0169.297] WbemDefPath:IUnknown:AddRef (This=0x7bcc08) returned 0x3
	[0169.297] WbemDefPath:IUnknown:Release (This=0x7bcc08) returned 0x2
	[0169.298] WbemDefPath:IWbemPath:SetText (This=0x7bcc08, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3144\"") returned 0x0
	[0169.298] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0169.298] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0169.298] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0169.298] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0169.298] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0169.298] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0169.298] IWbemClassObject:Get (in: This=0x7cc1b0, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294ecb8*=0, plFlavor=0x294ecbc*=0 | out: pVal=0x19f40c*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294ecb8*=8, plFlavor=0x294ecbc*=32) returned 0x0
	[0169.298] IWbemClassObject:Get (in: This=0x7cc1b0, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294ecb8*=8, plFlavor=0x294ecbc*=32 | out: pVal=0x19f414*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294ecb8*=8, plFlavor=0x294ecbc*=32) returned 0x0
	[0169.298] CoTaskMemAlloc (cb=0x4) returned 0x783070
	[0169.298] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783070, puReturned=0x2892750 | out: apObjects=0x783070*=0x7cc810, puReturned=0x2892750*=0x1) returned 0x0
	[0169.364] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea78 | out: ppvObject=0x19ea78*=0x7cc810) returned 0x0
	[0169.364] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0169.364] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0169.364] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e62c | out: ppvObject=0x19e62c*=0x0) returned 0x80004002
	[0169.365] IUnknown:AddRef (This=0x7cc810) returned 0x3
	[0169.365] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e394 | out: ppvObject=0x19e394*=0x0) returned 0x80004002
	[0169.365] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e344 | out: ppvObject=0x19e344*=0x0) returned 0x80004002
	[0169.365] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e350 | out: ppvObject=0x19e350*=0x7cc814) returned 0x0
	[0169.365] IMarshal:GetUnmarshalClass (in: This=0x7cc814, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e358 | out: pCid=0x19e358*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0169.365] IUnknown:Release (This=0x7cc814) returned 0x3
	[0169.365] CoGetContextToken (in: pToken=0x19e3b0 | out: pToken=0x19e3b0) returned 0x0
	[0169.365] CoGetContextToken (in: pToken=0x19e7b8 | out: pToken=0x19e7b8) returned 0x0
	[0169.365] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e848 | out: ppvObject=0x19e848*=0x0) returned 0x80004002
	[0169.365] IUnknown:Release (This=0x7cc810) returned 0x2
	[0169.366] CoGetContextToken (in: pToken=0x19ed88 | out: pToken=0x19ed88) returned 0x0
	[0169.366] CoGetContextToken (in: pToken=0x19ece8 | out: pToken=0x19ece8) returned 0x0
	[0169.366] IUnknown:QueryInterface (in: This=0x7cc810, riid=0x19edb8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x7cc810) returned 0x0
	[0169.366] IUnknown:AddRef (This=0x7cc810) returned 0x4
	[0169.366] IUnknown:Release (This=0x7cc810) returned 0x3
	[0169.366] IUnknown:Release (This=0x7cc810) returned 0x2
	[0169.366] CoTaskMemFree (pv=0x783070) 
	[0169.366] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0169.366] IUnknown:AddRef (This=0x7cc810) returned 0x3
	[0169.366] IWbemClassObject:Get (in: This=0x7cc810, wszName="__GENUS", lFlags=0, pVal=0x19f408*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f488*=0, plFlavor=0x19f484*=0 | out: pVal=0x19f408*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f488*=3, plFlavor=0x19f484*=64) returned 0x0
	[0169.367] IWbemClassObject:Get (in: This=0x7cc810, wszName="__PATH", lFlags=0, pVal=0x19f3ec*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f470*=0, plFlavor=0x19f46c*=0 | out: pVal=0x19f3ec*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1908\"", varVal2=0x0), pType=0x19f470*=8, plFlavor=0x19f46c*=64) returned 0x0
	[0169.367] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1908\"") returned 0x5e
	[0169.367] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1908\"") returned 0x5e
	[0169.367] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x784
	[0169.367] SetEvent (hEvent=0x2bc) returned 1
	[0169.368] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f3c4*=0x784, lpdwindex=0x19f1e4 | out: lpdwindex=0x19f1e4) returned 0x0
	[0169.383] CoGetContextToken (in: pToken=0x19f290 | out: pToken=0x19f290) returned 0x0
	[0169.383] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0169.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc78, riid=0x19f2c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f2bc | out: ppvObject=0x19f2bc*=0x7bcc78) returned 0x0
	[0169.383] WbemDefPath:IUnknown:AddRef (This=0x7bcc78) returned 0x3
	[0169.383] WbemDefPath:IUnknown:Release (This=0x7bcc78) returned 0x2
	[0169.383] WbemDefPath:IWbemPath:SetText (This=0x7bcc78, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1908\"") returned 0x0
	[0169.383] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f444 | out: puCount=0x19f444*=0x2) returned 0x0
	[0169.383] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0x0, pszText=0x0 | out: puBuffLength=0x19f440*=0xf, pszText=0x0) returned 0x0
	[0169.383] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f440*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f440*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0169.384] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x19f410 | out: puCount=0x19f410*=0x2) returned 0x0
	[0169.384] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0x0, pszText=0x0 | out: puBuffLength=0x19f40c*=0xf, pszText=0x0) returned 0x0
	[0169.384] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=4, puBuffLength=0x19f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0169.384] IWbemClassObject:Get (in: This=0x7cc810, wszName="ExecutablePath", lFlags=0, pVal=0x19f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294f4ec*=0, plFlavor=0x294f4f0*=0 | out: pVal=0x19f40c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", varVal2=0x0), pType=0x294f4ec*=8, plFlavor=0x294f4f0*=0) returned 0x0
	[0169.384] SysStringByteLen (bstr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe") returned 0x76
	[0169.384] SysStringByteLen (bstr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe") returned 0x76
	[0169.384] IWbemClassObject:Get (in: This=0x7cc810, wszName="ExecutablePath", lFlags=0, pVal=0x19f414*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x294f4ec*=8, plFlavor=0x294f4f0*=0 | out: pVal=0x19f414*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", varVal2=0x0), pType=0x294f4ec*=8, plFlavor=0x294f4f0*=0) returned 0x0
	[0169.384] SysStringByteLen (bstr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe") returned 0x76
	[0169.384] SysStringByteLen (bstr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe") returned 0x76
	[0169.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", nBufferLength=0x105, lpBuffer=0x19ef50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", lpFilePart=0x0) returned 0x3b
	[0169.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b0) returned 1
	[0169.385] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f42c | out: lpFileInformation=0x19f42c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c5c48c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x61c5c48c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x61c5c48c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8)) returned 1
	[0169.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3ac) returned 1
	[0169.385] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", lpdwHandle=0x19f4a0 | out: lpdwHandle=0x19f4a0) returned 0x49c
	[0169.386] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe", dwHandle=0x0, dwLen=0x49c, lpData=0x294f6f0 | out: lpData=0x294f6f0) returned 1
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f474, puLen=0x19f470 | out: lplpBuffer=0x19f474*=0x294f78c, puLen=0x19f470) returned 1
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294f7f4, puLen=0x19f3f0) returned 1
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294f818, puLen=0x19f3f0) returned 1
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294f848, puLen=0x19f3f0) returned 1
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294f888, puLen=0x19f3f0) returned 1
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294f8b4, puLen=0x19f3f0) returned 1
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x294f8f4, puLen=0x19f3f0) returned 1
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.386] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x19f3f4, puLen=0x19f3f0 | out: lplpBuffer=0x19f3f4*=0x0, puLen=0x19f3f0) returned 0
	[0169.387] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f3e8, puLen=0x19f3e4 | out: lplpBuffer=0x19f3e8*=0x294f78c, puLen=0x19f3e4) returned 1
	[0169.387] VerLanguageNameW (in: wLang=0x0, szLang=0x19f178, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10
	[0169.387] VerQueryValueW (in: pBlock=0x294f6f0, lpSubBlock="\\", lplpBuffer=0x19f3f8, puLen=0x19f3f4 | out: lplpBuffer=0x19f3f8*=0x294f718, puLen=0x19f3f4) returned 1
	[0169.387] CoTaskMemAlloc (cb=0x4) returned 0x783170
	[0169.387] IEnumWbemClassObject:Next (in: This=0x742d48, lTimeout=-1, uCount=0x1, apObjects=0x783170, puReturned=0x2892750 | out: apObjects=0x783170*=0x0, puReturned=0x2892750*=0x0) returned 0x1
	[0169.391] CoTaskMemFree (pv=0x783170) 
	[0169.391] CoGetContextToken (in: pToken=0x19f340 | out: pToken=0x19f340) returned 0x0
	[0169.391] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x1
	[0169.391] IUnknown:Release (This=0x742d48) returned 0x0
	[0169.415] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x788
	[0169.415] SetEvent (hEvent=0x2bc) returned 1
	[0169.415] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f378*=0x788, lpdwindex=0x19f194 | out: lpdwindex=0x19f194) returned 0x0
	[0169.421] CoGetContextToken (in: pToken=0x19f248 | out: pToken=0x19f248) returned 0x0
	[0169.421] CoGetContextToken (in: pToken=0x19f1a8 | out: pToken=0x19f1a8) returned 0x0
	[0169.421] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcce8, riid=0x19f278*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f274 | out: ppvObject=0x19f274*=0x7bcce8) returned 0x0
	[0169.421] WbemDefPath:IUnknown:AddRef (This=0x7bcce8) returned 0x3
	[0169.421] WbemDefPath:IUnknown:Release (This=0x7bcce8) returned 0x2
	[0169.421] WbemDefPath:IWbemPath:SetText (This=0x7bcce8, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0169.421] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcce8, puCount=0x19f3f4 | out: puCount=0x19f3f4*=0x2) returned 0x0
	[0169.421] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3f0*=0x0, pszText=0x0 | out: puBuffLength=0x19f3f0*=0xf, pszText=0x0) returned 0x0
	[0169.421] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3f0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0169.422] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcce8, puCount=0x19f3e0 | out: puCount=0x19f3e0*=0x2) returned 0x0
	[0169.422] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3dc*=0x0, pszText=0x0 | out: puBuffLength=0x19f3dc*=0xf, pszText=0x0) returned 0x0
	[0169.422] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3dc*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3dc*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0169.443] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f294*=0x79c, lpdwindex=0x19f144 | out: lpdwindex=0x19f144) returned 0x0
	[0169.511] CoGetContextToken (in: pToken=0x19f050 | out: pToken=0x19f050) returned 0x0
	[0169.511] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0
	[0169.511] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efd8 | out: ppvObject=0x19efd8*=0x712148) returned 0x0
	[0169.511] CObjectContext::ContextCallback () returned 0x0
	[0169.515] IUnknown:Release (This=0x712148) returned 0x1
	[0169.516] CoUnmarshalInterface (in: pStm=0x743610, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f040 | out: ppv=0x19f040*=0x748fc8) returned 0x0
	[0169.517] CoMarshalInterface (pStm=0x743610, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x748fc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0169.517] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eee4 | out: ppvObject=0x19eee4*=0x748fc8) returned 0x0
	[0169.517] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eea0 | out: ppvObject=0x19eea0*=0x0) returned 0x80004002
	[0169.518] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ecbc | out: ppvObject=0x19ecbc*=0x0) returned 0x80004002
	[0169.519] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ea94 | out: ppvObject=0x19ea94*=0x0) returned 0x80004002
	[0169.520] WbemLocator:IUnknown:AddRef (This=0x748fc8) returned 0x3
	[0169.520] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e7fc | out: ppvObject=0x19e7fc*=0x0) returned 0x80004002
	[0169.520] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e7ac | out: ppvObject=0x19e7ac*=0x0) returned 0x80004002
	[0169.520] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7b8 | out: ppvObject=0x19e7b8*=0x748f24) returned 0x0
	[0169.520] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748f24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e7c0 | out: pCid=0x19e7c0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0169.520] WbemLocator:IUnknown:Release (This=0x748f24) returned 0x3
	[0169.520] CoGetContextToken (in: pToken=0x19e818 | out: pToken=0x19e818) returned 0x0
	[0169.520] CoGetContextToken (in: pToken=0x19ec20 | out: pToken=0x19ec20) returned 0x0
	[0169.520] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecb0 | out: ppvObject=0x19ecb0*=0x748fac) returned 0x0
	[0169.520] WbemLocator:IRpcOptions:Query (in: This=0x748fac, pPrx=0x748fc8, dwProperty=2, pdwValue=0x19ecd8 | out: pdwValue=0x19ecd8) returned 0x0
	[0169.521] WbemLocator:IUnknown:Release (This=0x748fac) returned 0x3
	[0169.521] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x2
	[0169.521] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x1
	[0169.521] CoGetContextToken (in: pToken=0x19ef90 | out: pToken=0x19ef90) returned 0x0
	[0169.521] WbemLocator:IUnknown:AddRef (This=0x748fc8) returned 0x2
	[0169.521] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f24c | out: ppvObject=0x19f24c*=0x748fa4) returned 0x0
	[0169.521] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x748fa4, pProxy=0x748fc8, pAuthnSvc=0x19f29c, pAuthzSvc=0x19f298, pServerPrincName=0x19f290, pAuthnLevel=0x19f294, pImpLevel=0x19f284, pAuthInfo=0x19f288, pCapabilites=0x19f28c | out: pAuthnSvc=0x19f29c*=0xa, pAuthzSvc=0x19f298*=0x0, pServerPrincName=0x19f290, pAuthnLevel=0x19f294*=0x6, pImpLevel=0x19f284*=0x2, pAuthInfo=0x19f288, pCapabilites=0x19f28c*=0x1) returned 0x0
	[0169.521] WbemLocator:IUnknown:Release (This=0x748fa4) returned 0x2
	[0169.521] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f240 | out: ppvObject=0x19f240*=0x748fc8) returned 0x0
	[0169.522] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f23c | out: ppvObject=0x19f23c*=0x748fa4) returned 0x0
	[0169.522] WbemLocator:IClientSecurity:SetBlanket (This=0x748fa4, pProxy=0x748fc8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0169.522] WbemLocator:IUnknown:Release (This=0x748fa4) returned 0x3
	[0169.522] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x2
	[0169.522] CoTaskMemFree (pv=0x7481d0) 
	[0169.522] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x1
	[0169.522] SysStringLen (param_1=0x0) returned 0x0
	[0169.523] CoGetContextToken (in: pToken=0x19f208 | out: pToken=0x19f208) returned 0x0
	[0169.523] CoGetContextToken (in: pToken=0x19f168 | out: pToken=0x19f168) returned 0x0
	[0169.523] WbemLocator:IUnknown:QueryInterface (in: This=0x748fc8, riid=0x19f238*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19f234 | out: ppvObject=0x19f234*=0x7c81e0) returned 0x0
	[0169.524] WbemLocator:IUnknown:AddRef (This=0x7c81e0) returned 0x3
	[0169.524] WbemLocator:IUnknown:Release (This=0x7c81e0) returned 0x2
	[0169.524] CoGetContextToken (in: pToken=0x19f1c8 | out: pToken=0x19f1c8) returned 0x0
	[0169.524] WbemLocator:IUnknown:AddRef (This=0x7c81e0) returned 0x3
	[0169.524] WbemLocator:IUnknown:QueryInterface (in: This=0x7c81e0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f24c | out: ppvObject=0x19f24c*=0x748fa4) returned 0x0
	[0169.524] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x748fa4, pProxy=0x7c81e0, pAuthnSvc=0x19f29c, pAuthzSvc=0x19f298, pServerPrincName=0x19f290, pAuthnLevel=0x19f294, pImpLevel=0x19f284, pAuthInfo=0x19f288, pCapabilites=0x19f28c | out: pAuthnSvc=0x19f29c*=0xa, pAuthzSvc=0x19f298*=0x0, pServerPrincName=0x19f290, pAuthnLevel=0x19f294*=0x6, pImpLevel=0x19f284*=0x2, pAuthInfo=0x19f288, pCapabilites=0x19f28c*=0x1) returned 0x0
	[0169.524] WbemLocator:IUnknown:Release (This=0x748fa4) returned 0x3
	[0169.525] WbemLocator:IUnknown:QueryInterface (in: This=0x7c81e0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f240 | out: ppvObject=0x19f240*=0x748fc8) returned 0x0
	[0169.525] WbemLocator:IUnknown:QueryInterface (in: This=0x7c81e0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f23c | out: ppvObject=0x19f23c*=0x748fa4) returned 0x0
	[0169.525] WbemLocator:IClientSecurity:SetBlanket (This=0x748fa4, pProxy=0x7c81e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0169.525] WbemLocator:IUnknown:Release (This=0x748fa4) returned 0x4
	[0169.525] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x3
	[0169.525] CoTaskMemFree (pv=0x7484d0) 
	[0169.525] WbemLocator:IUnknown:Release (This=0x7c81e0) returned 0x2
	[0169.526] SysStringLen (param_1=0x0) returned 0x0
	[0169.526] CoGetContextToken (in: pToken=0x19f148 | out: pToken=0x19f148) returned 0x0
	[0169.526] WbemLocator:IUnknown:AddRef (This=0x7c81e0) returned 0x3
	[0169.526] IWbemServices:ExecQuery (in: This=0x7c81e0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x19f358 | out: ppEnum=0x19f358*=0x743068) returned 0x0
	[0169.614] IUnknown:QueryInterface (in: This=0x743068, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f1bc | out: ppvObject=0x19f1bc*=0x74306c) returned 0x0
	[0169.614] IClientSecurity:QueryBlanket (in: This=0x74306c, pProxy=0x743068, pAuthnSvc=0x19f20c, pAuthzSvc=0x19f208, pServerPrincName=0x19f200, pAuthnLevel=0x19f204, pImpLevel=0x19f1f4, pAuthInfo=0x19f1f8, pCapabilites=0x19f1fc | out: pAuthnSvc=0x19f20c*=0xa, pAuthzSvc=0x19f208*=0x0, pServerPrincName=0x19f200, pAuthnLevel=0x19f204*=0x6, pImpLevel=0x19f1f4*=0x2, pAuthInfo=0x19f1f8, pCapabilites=0x19f1fc*=0x1) returned 0x0
	[0169.614] IUnknown:Release (This=0x74306c) returned 0x1
	[0169.614] IUnknown:QueryInterface (in: This=0x743068, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f1b0 | out: ppvObject=0x19f1b0*=0x748ac8) returned 0x0
	[0169.614] IUnknown:QueryInterface (in: This=0x743068, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f1ac | out: ppvObject=0x19f1ac*=0x74306c) returned 0x0
	[0169.615] IClientSecurity:SetBlanket (This=0x74306c, pProxy=0x743068, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0169.669] IUnknown:Release (This=0x74306c) returned 0x2
	[0169.669] WbemLocator:IUnknown:Release (This=0x748ac8) returned 0x1
	[0169.669] CoTaskMemFree (pv=0x748440) 
	[0169.669] IUnknown:QueryInterface (in: This=0x743068, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eda8 | out: ppvObject=0x19eda8*=0x748ac8) returned 0x0
	[0169.669] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x0) returned 0x80004002
	[0169.709] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb84 | out: ppvObject=0x19eb84*=0x0) returned 0x80004002
	[0169.713] IUnknown:QueryInterface (in: This=0x743068, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e95c | out: ppvObject=0x19e95c*=0x0) returned 0x80004002
	[0169.717] WbemLocator:IUnknown:AddRef (This=0x748ac8) returned 0x3
	[0169.717] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e6c4 | out: ppvObject=0x19e6c4*=0x0) returned 0x80004002
	[0169.717] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e674 | out: ppvObject=0x19e674*=0x0) returned 0x80004002
	[0169.717] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e680 | out: ppvObject=0x19e680*=0x748a24) returned 0x0
	[0169.717] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748a24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e688 | out: pCid=0x19e688*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0169.717] WbemLocator:IUnknown:Release (This=0x748a24) returned 0x3
	[0169.717] CoGetContextToken (in: pToken=0x19e6e0 | out: pToken=0x19e6e0) returned 0x0
	[0169.718] CoGetContextToken (in: pToken=0x19eae8 | out: pToken=0x19eae8) returned 0x0
	[0169.718] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb78 | out: ppvObject=0x19eb78*=0x748aac) returned 0x0
	[0169.718] WbemLocator:IRpcOptions:Query (in: This=0x748aac, pPrx=0x748ac8, dwProperty=2, pdwValue=0x19eba0 | out: pdwValue=0x19eba0) returned 0x80004002
	[0169.718] WbemLocator:IUnknown:Release (This=0x748aac) returned 0x3
	[0169.718] WbemLocator:IUnknown:Release (This=0x748ac8) returned 0x2
	[0169.718] CoGetContextToken (in: pToken=0x19f0b8 | out: pToken=0x19f0b8) returned 0x0
	[0169.718] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0169.718] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x19f0e8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f0e4 | out: ppvObject=0x19f0e4*=0x743068) returned 0x0
	[0169.718] IUnknown:AddRef (This=0x743068) returned 0x4
	[0169.718] IUnknown:Release (This=0x743068) returned 0x3
	[0169.718] IUnknown:Release (This=0x743068) returned 0x2
	[0169.718] WbemLocator:IUnknown:Release (This=0x7c81e0) returned 0x2
	[0169.718] SysStringLen (param_1=0x0) returned 0x0
	[0169.719] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcce8, puCount=0x19f3a4 | out: puCount=0x19f3a4*=0x2) returned 0x0
	[0169.719] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3a0*=0x0, pszText=0x0 | out: puBuffLength=0x19f3a0*=0xf, pszText=0x0) returned 0x0
	[0169.719] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0169.719] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0169.719] IUnknown:AddRef (This=0x743068) returned 0x3
	[0169.719] IEnumWbemClassObject:Clone (in: This=0x743068, ppEnum=0x19f3b0 | out: ppEnum=0x19f3b0*=0x742578) returned 0x0
	[0169.726] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f274 | out: ppvObject=0x19f274*=0x74257c) returned 0x0
	[0169.726] IClientSecurity:QueryBlanket (in: This=0x74257c, pProxy=0x742578, pAuthnSvc=0x19f2c4, pAuthzSvc=0x19f2c0, pServerPrincName=0x19f2b8, pAuthnLevel=0x19f2bc, pImpLevel=0x19f2ac, pAuthInfo=0x19f2b0, pCapabilites=0x19f2b4 | out: pAuthnSvc=0x19f2c4*=0xa, pAuthzSvc=0x19f2c0*=0x0, pServerPrincName=0x19f2b8, pAuthnLevel=0x19f2bc*=0x6, pImpLevel=0x19f2ac*=0x2, pAuthInfo=0x19f2b0, pCapabilites=0x19f2b4*=0x1) returned 0x0
	[0169.726] IUnknown:Release (This=0x74257c) returned 0x1
	[0169.726] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f268 | out: ppvObject=0x19f268*=0x748dc8) returned 0x0
	[0169.726] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f264 | out: ppvObject=0x19f264*=0x74257c) returned 0x0
	[0169.726] IClientSecurity:SetBlanket (This=0x74257c, pProxy=0x742578, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0169.764] IUnknown:Release (This=0x74257c) returned 0x2
	[0169.764] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x1
	[0169.764] CoTaskMemFree (pv=0x7484d0) 
	[0169.765] IUnknown:QueryInterface (in: This=0x742578, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee50 | out: ppvObject=0x19ee50*=0x748dc8) returned 0x0
	[0169.765] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ee0c | out: ppvObject=0x19ee0c*=0x0) returned 0x80004002
	[0169.771] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ec2c | out: ppvObject=0x19ec2c*=0x0) returned 0x80004002
	[0169.776] IUnknown:QueryInterface (in: This=0x742578, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ea04 | out: ppvObject=0x19ea04*=0x0) returned 0x80004002
	[0169.782] WbemLocator:IUnknown:AddRef (This=0x748dc8) returned 0x3
	[0169.782] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e76c | out: ppvObject=0x19e76c*=0x0) returned 0x80004002
	[0169.782] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e71c | out: ppvObject=0x19e71c*=0x0) returned 0x80004002
	[0169.782] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e728 | out: ppvObject=0x19e728*=0x748d24) returned 0x0
	[0169.783] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748d24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e730 | out: pCid=0x19e730*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0169.783] WbemLocator:IUnknown:Release (This=0x748d24) returned 0x3
	[0169.783] CoGetContextToken (in: pToken=0x19e788 | out: pToken=0x19e788) returned 0x0
	[0169.783] CoGetContextToken (in: pToken=0x19eb90 | out: pToken=0x19eb90) returned 0x0
	[0169.783] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec20 | out: ppvObject=0x19ec20*=0x748dac) returned 0x0
	[0169.784] WbemLocator:IRpcOptions:Query (in: This=0x748dac, pPrx=0x748dc8, dwProperty=2, pdwValue=0x19ec48 | out: pdwValue=0x19ec48) returned 0x80004002
	[0169.784] WbemLocator:IUnknown:Release (This=0x748dac) returned 0x3
	[0169.784] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x2
	[0169.784] CoGetContextToken (in: pToken=0x19f160 | out: pToken=0x19f160) returned 0x0
	[0169.784] CoGetContextToken (in: pToken=0x19f0c0 | out: pToken=0x19f0c0) returned 0x0
	[0169.784] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x19f190*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f18c | out: ppvObject=0x19f18c*=0x742578) returned 0x0
	[0169.784] IUnknown:AddRef (This=0x742578) returned 0x4
	[0169.784] IUnknown:Release (This=0x742578) returned 0x3
	[0169.784] IUnknown:Release (This=0x742578) returned 0x2
	[0169.784] IUnknown:Release (This=0x743068) returned 0x2
	[0169.784] SysStringLen (param_1=0x0) returned 0x0
	[0169.784] IEnumWbemClassObject:Reset (This=0x742578) returned 0x0
	[0169.788] CoTaskMemAlloc (cb=0x4) returned 0x782fc0
	[0169.788] IEnumWbemClassObject:Next (in: This=0x742578, lTimeout=-1, uCount=0x1, apObjects=0x782fc0, puReturned=0x2951b54 | out: apObjects=0x782fc0*=0x7ccb40, puReturned=0x2951b54*=0x1) returned 0x0
	[0170.735] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea10 | out: ppvObject=0x19ea10*=0x7ccb40) returned 0x0
	[0170.735] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x0) returned 0x80004002
	[0170.736] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0170.736] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5c4 | out: ppvObject=0x19e5c4*=0x0) returned 0x80004002
	[0170.736] IUnknown:AddRef (This=0x7ccb40) returned 0x3
	[0170.736] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e32c | out: ppvObject=0x19e32c*=0x0) returned 0x80004002
	[0170.736] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e2dc | out: ppvObject=0x19e2dc*=0x0) returned 0x80004002
	[0170.736] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2e8 | out: ppvObject=0x19e2e8*=0x7ccb44) returned 0x0
	[0170.736] IMarshal:GetUnmarshalClass (in: This=0x7ccb44, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2f0 | out: pCid=0x19e2f0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0170.736] IUnknown:Release (This=0x7ccb44) returned 0x3
	[0170.736] CoGetContextToken (in: pToken=0x19e348 | out: pToken=0x19e348) returned 0x0
	[0170.737] CoGetContextToken (in: pToken=0x19e750 | out: pToken=0x19e750) returned 0x0
	[0170.737] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7e0 | out: ppvObject=0x19e7e0*=0x0) returned 0x80004002
	[0170.737] IUnknown:Release (This=0x7ccb40) returned 0x2
	[0170.737] CoGetContextToken (in: pToken=0x19ed20 | out: pToken=0x19ed20) returned 0x0
	[0170.737] CoGetContextToken (in: pToken=0x19ec80 | out: pToken=0x19ec80) returned 0x0
	[0170.737] IUnknown:QueryInterface (in: This=0x7ccb40, riid=0x19ed50*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ed4c | out: ppvObject=0x19ed4c*=0x7ccb40) returned 0x0
	[0170.737] IUnknown:AddRef (This=0x7ccb40) returned 0x4
	[0170.737] IUnknown:Release (This=0x7ccb40) returned 0x3
	[0170.737] IUnknown:Release (This=0x7ccb40) returned 0x2
	[0170.737] CoTaskMemFree (pv=0x782fc0) 
	[0170.737] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0170.737] IUnknown:AddRef (This=0x7ccb40) returned 0x3
	[0170.738] IWbemClassObject:Get (in: This=0x7ccb40, wszName="__GENUS", lFlags=0, pVal=0x19f3a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f420*=0, plFlavor=0x19f41c*=0 | out: pVal=0x19f3a0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f420*=3, plFlavor=0x19f41c*=64) returned 0x0
	[0170.738] IWbemClassObject:Get (in: This=0x7ccb40, wszName="__PATH", lFlags=0, pVal=0x19f384*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f408*=0, plFlavor=0x19f404*=0 | out: pVal=0x19f384*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x19f408*=8, plFlavor=0x19f404*=64) returned 0x0
	[0170.738] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0170.738] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0170.739] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7a0
	[0170.739] SetEvent (hEvent=0x2bc) returned 1
	[0170.739] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f35c*=0x7a0, lpdwindex=0x19f17c | out: lpdwindex=0x19f17c) returned 0x0
	[0170.752] CoGetContextToken (in: pToken=0x19f228 | out: pToken=0x19f228) returned 0x0
	[0170.752] CoGetContextToken (in: pToken=0x19f188 | out: pToken=0x19f188) returned 0x0
	[0170.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcd58, riid=0x19f258*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f254 | out: ppvObject=0x19f254*=0x7bcd58) returned 0x0
	[0170.752] WbemDefPath:IUnknown:AddRef (This=0x7bcd58) returned 0x3
	[0170.752] WbemDefPath:IUnknown:Release (This=0x7bcd58) returned 0x2
	[0170.752] WbemDefPath:IWbemPath:SetText (This=0x7bcd58, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0170.752] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcce8, puCount=0x19f3dc | out: puCount=0x19f3dc*=0x2) returned 0x0
	[0170.752] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3d8*=0x0, pszText=0x0 | out: puBuffLength=0x19f3d8*=0xf, pszText=0x0) returned 0x0
	[0170.752] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3d8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3d8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0170.753] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcce8, puCount=0x19f3a8 | out: puCount=0x19f3a8*=0x2) returned 0x0
	[0170.753] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3a4*=0x0, pszText=0x0 | out: puBuffLength=0x19f3a4*=0xf, pszText=0x0) returned 0x0
	[0170.753] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=4, puBuffLength=0x19f3a4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3a4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0170.753] IWbemClassObject:Get (in: This=0x7ccb40, wszName="Name", lFlags=0, pVal=0x19f3a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29523a4*=0, plFlavor=0x29523a8*=0 | out: pVal=0x19f3a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x29523a4*=8, plFlavor=0x29523a8*=0) returned 0x0
	[0170.753] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0170.753] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0170.753] IWbemClassObject:Get (in: This=0x7ccb40, wszName="Name", lFlags=0, pVal=0x19f3ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29523a4*=8, plFlavor=0x29523a8*=0 | out: pVal=0x19f3ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x29523a4*=8, plFlavor=0x29523a8*=0) returned 0x0
	[0170.753] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0170.753] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0170.754] CoGetContextToken (in: pToken=0x19f2d8 | out: pToken=0x19f2d8) returned 0x0
	[0170.754] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x1
	[0170.754] IUnknown:Release (This=0x742578) returned 0x0
	[0170.760] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7a4
	[0170.760] SetEvent (hEvent=0x2bc) returned 1
	[0170.760] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f378*=0x7a4, lpdwindex=0x19f194 | out: lpdwindex=0x19f194) returned 0x0
	[0170.764] CoGetContextToken (in: pToken=0x19f248 | out: pToken=0x19f248) returned 0x0
	[0170.764] CoGetContextToken (in: pToken=0x19f1a8 | out: pToken=0x19f1a8) returned 0x0
	[0170.764] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf18, riid=0x19f278*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f274 | out: ppvObject=0x19f274*=0x7bcf18) returned 0x0
	[0170.764] WbemDefPath:IUnknown:AddRef (This=0x7bcf18) returned 0x3
	[0170.764] WbemDefPath:IUnknown:Release (This=0x7bcf18) returned 0x2
	[0170.764] WbemDefPath:IWbemPath:SetText (This=0x7bcf18, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0170.764] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcf18, puCount=0x19f3f4 | out: puCount=0x19f3f4*=0x2) returned 0x0
	[0170.764] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3f0*=0x0, pszText=0x0 | out: puBuffLength=0x19f3f0*=0xf, pszText=0x0) returned 0x0
	[0170.764] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3f0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0170.764] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcf18, puCount=0x19f3e0 | out: puCount=0x19f3e0*=0x2) returned 0x0
	[0170.764] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3dc*=0x0, pszText=0x0 | out: puBuffLength=0x19f3dc*=0xf, pszText=0x0) returned 0x0
	[0170.764] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3dc*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3dc*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0170.777] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f294*=0x7b8, lpdwindex=0x19f144 | out: lpdwindex=0x19f144) returned 0x0
	[0170.839] CoGetContextToken (in: pToken=0x19f050 | out: pToken=0x19f050) returned 0x0
	[0170.839] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0
	[0170.839] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efd8 | out: ppvObject=0x19efd8*=0x712148) returned 0x0
	[0170.840] CObjectContext::ContextCallback () returned 0x0
	[0170.841] IUnknown:Release (This=0x712148) returned 0x1
	[0170.841] CoUnmarshalInterface (in: pStm=0x743450, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f040 | out: ppv=0x19f040*=0x74a0c8) returned 0x0
	[0170.842] CoMarshalInterface (pStm=0x743450, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x74a0c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0170.842] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eee4 | out: ppvObject=0x19eee4*=0x74a0c8) returned 0x0
	[0170.842] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eea0 | out: ppvObject=0x19eea0*=0x0) returned 0x80004002
	[0170.843] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ecbc | out: ppvObject=0x19ecbc*=0x0) returned 0x80004002
	[0170.843] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ea94 | out: ppvObject=0x19ea94*=0x0) returned 0x80004002
	[0170.844] WbemLocator:IUnknown:AddRef (This=0x74a0c8) returned 0x3
	[0170.844] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e7fc | out: ppvObject=0x19e7fc*=0x0) returned 0x80004002
	[0170.844] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e7ac | out: ppvObject=0x19e7ac*=0x0) returned 0x80004002
	[0170.844] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7b8 | out: ppvObject=0x19e7b8*=0x74a024) returned 0x0
	[0170.844] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74a024, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e7c0 | out: pCid=0x19e7c0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0170.844] WbemLocator:IUnknown:Release (This=0x74a024) returned 0x3
	[0170.844] CoGetContextToken (in: pToken=0x19e818 | out: pToken=0x19e818) returned 0x0
	[0170.844] CoGetContextToken (in: pToken=0x19ec20 | out: pToken=0x19ec20) returned 0x0
	[0170.844] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecb0 | out: ppvObject=0x19ecb0*=0x74a0ac) returned 0x0
	[0170.844] WbemLocator:IRpcOptions:Query (in: This=0x74a0ac, pPrx=0x74a0c8, dwProperty=2, pdwValue=0x19ecd8 | out: pdwValue=0x19ecd8) returned 0x0
	[0170.844] WbemLocator:IUnknown:Release (This=0x74a0ac) returned 0x3
	[0170.845] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x2
	[0170.845] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x1
	[0170.845] CoGetContextToken (in: pToken=0x19ef90 | out: pToken=0x19ef90) returned 0x0
	[0170.845] WbemLocator:IUnknown:AddRef (This=0x74a0c8) returned 0x2
	[0170.845] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f24c | out: ppvObject=0x19f24c*=0x74a0a4) returned 0x0
	[0170.845] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x74a0a4, pProxy=0x74a0c8, pAuthnSvc=0x19f29c, pAuthzSvc=0x19f298, pServerPrincName=0x19f290, pAuthnLevel=0x19f294, pImpLevel=0x19f284, pAuthInfo=0x19f288, pCapabilites=0x19f28c | out: pAuthnSvc=0x19f29c*=0xa, pAuthzSvc=0x19f298*=0x0, pServerPrincName=0x19f290, pAuthnLevel=0x19f294*=0x6, pImpLevel=0x19f284*=0x2, pAuthInfo=0x19f288, pCapabilites=0x19f28c*=0x1) returned 0x0
	[0170.845] WbemLocator:IUnknown:Release (This=0x74a0a4) returned 0x2
	[0170.845] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f240 | out: ppvObject=0x19f240*=0x74a0c8) returned 0x0
	[0170.845] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f23c | out: ppvObject=0x19f23c*=0x74a0a4) returned 0x0
	[0170.846] WbemLocator:IClientSecurity:SetBlanket (This=0x74a0a4, pProxy=0x74a0c8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0170.846] WbemLocator:IUnknown:Release (This=0x74a0a4) returned 0x3
	[0170.846] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x2
	[0170.846] CoTaskMemFree (pv=0x748410) 
	[0170.846] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x1
	[0170.846] SysStringLen (param_1=0x0) returned 0x0
	[0170.846] CoGetContextToken (in: pToken=0x19f208 | out: pToken=0x19f208) returned 0x0
	[0170.846] CoGetContextToken (in: pToken=0x19f168 | out: pToken=0x19f168) returned 0x0
	[0170.846] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x19f238*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19f234 | out: ppvObject=0x19f234*=0x7c80a0) returned 0x0
	[0170.847] WbemLocator:IUnknown:AddRef (This=0x7c80a0) returned 0x3
	[0170.847] WbemLocator:IUnknown:Release (This=0x7c80a0) returned 0x2
	[0170.847] CoGetContextToken (in: pToken=0x19f1c8 | out: pToken=0x19f1c8) returned 0x0
	[0170.847] WbemLocator:IUnknown:AddRef (This=0x7c80a0) returned 0x3
	[0170.848] WbemLocator:IUnknown:QueryInterface (in: This=0x7c80a0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f24c | out: ppvObject=0x19f24c*=0x74a0a4) returned 0x0
	[0170.848] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x74a0a4, pProxy=0x7c80a0, pAuthnSvc=0x19f29c, pAuthzSvc=0x19f298, pServerPrincName=0x19f290, pAuthnLevel=0x19f294, pImpLevel=0x19f284, pAuthInfo=0x19f288, pCapabilites=0x19f28c | out: pAuthnSvc=0x19f29c*=0xa, pAuthzSvc=0x19f298*=0x0, pServerPrincName=0x19f290, pAuthnLevel=0x19f294*=0x6, pImpLevel=0x19f284*=0x2, pAuthInfo=0x19f288, pCapabilites=0x19f28c*=0x1) returned 0x0
	[0170.848] WbemLocator:IUnknown:Release (This=0x74a0a4) returned 0x3
	[0170.848] WbemLocator:IUnknown:QueryInterface (in: This=0x7c80a0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f240 | out: ppvObject=0x19f240*=0x74a0c8) returned 0x0
	[0170.848] WbemLocator:IUnknown:QueryInterface (in: This=0x7c80a0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f23c | out: ppvObject=0x19f23c*=0x74a0a4) returned 0x0
	[0170.848] WbemLocator:IClientSecurity:SetBlanket (This=0x74a0a4, pProxy=0x7c80a0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0170.848] WbemLocator:IUnknown:Release (This=0x74a0a4) returned 0x4
	[0170.848] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x3
	[0170.848] CoTaskMemFree (pv=0x748500) 
	[0170.848] WbemLocator:IUnknown:Release (This=0x7c80a0) returned 0x2
	[0170.849] SysStringLen (param_1=0x0) returned 0x0
	[0170.849] CoGetContextToken (in: pToken=0x19f140 | out: pToken=0x19f140) returned 0x0
	[0170.849] WbemLocator:IUnknown:AddRef (This=0x7c80a0) returned 0x3
	[0170.849] IWbemServices:ExecQuery (in: This=0x7c80a0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19f358 | out: ppEnum=0x19f358*=0x7427d0) returned 0x0
	[0170.881] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f1b0 | out: ppvObject=0x19f1b0*=0x7427d4) returned 0x0
	[0170.882] IClientSecurity:QueryBlanket (in: This=0x7427d4, pProxy=0x7427d0, pAuthnSvc=0x19f200, pAuthzSvc=0x19f1fc, pServerPrincName=0x19f1f4, pAuthnLevel=0x19f1f8, pImpLevel=0x19f1e8, pAuthInfo=0x19f1ec, pCapabilites=0x19f1f0 | out: pAuthnSvc=0x19f200*=0xa, pAuthzSvc=0x19f1fc*=0x0, pServerPrincName=0x19f1f4, pAuthnLevel=0x19f1f8*=0x6, pImpLevel=0x19f1e8*=0x2, pAuthInfo=0x19f1ec, pCapabilites=0x19f1f0*=0x1) returned 0x0
	[0170.882] IUnknown:Release (This=0x7427d4) returned 0x1
	[0170.882] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f1a4 | out: ppvObject=0x19f1a4*=0x748dc8) returned 0x0
	[0170.882] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f1a0 | out: ppvObject=0x19f1a0*=0x7427d4) returned 0x0
	[0170.882] IClientSecurity:SetBlanket (This=0x7427d4, pProxy=0x7427d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0170.884] IUnknown:Release (This=0x7427d4) returned 0x2
	[0170.884] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x1
	[0170.884] CoTaskMemFree (pv=0x748440) 
	[0170.884] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed9c | out: ppvObject=0x19ed9c*=0x748dc8) returned 0x0
	[0170.884] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ed58 | out: ppvObject=0x19ed58*=0x0) returned 0x80004002
	[0170.885] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb74 | out: ppvObject=0x19eb74*=0x0) returned 0x80004002
	[0170.885] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e94c | out: ppvObject=0x19e94c*=0x0) returned 0x80004002
	[0170.885] WbemLocator:IUnknown:AddRef (This=0x748dc8) returned 0x3
	[0170.886] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e6b4 | out: ppvObject=0x19e6b4*=0x0) returned 0x80004002
	[0170.886] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e664 | out: ppvObject=0x19e664*=0x0) returned 0x80004002
	[0170.886] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e670 | out: ppvObject=0x19e670*=0x748d24) returned 0x0
	[0170.886] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748d24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e678 | out: pCid=0x19e678*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0170.886] WbemLocator:IUnknown:Release (This=0x748d24) returned 0x3
	[0170.886] CoGetContextToken (in: pToken=0x19e6d0 | out: pToken=0x19e6d0) returned 0x0
	[0170.886] CoGetContextToken (in: pToken=0x19ead8 | out: pToken=0x19ead8) returned 0x0
	[0170.886] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb68 | out: ppvObject=0x19eb68*=0x748dac) returned 0x0
	[0170.886] WbemLocator:IRpcOptions:Query (in: This=0x748dac, pPrx=0x748dc8, dwProperty=2, pdwValue=0x19eb90 | out: pdwValue=0x19eb90) returned 0x80004002
	[0170.886] WbemLocator:IUnknown:Release (This=0x748dac) returned 0x3
	[0170.886] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x2
	[0170.886] CoGetContextToken (in: pToken=0x19f0b0 | out: pToken=0x19f0b0) returned 0x0
	[0170.886] CoGetContextToken (in: pToken=0x19f010 | out: pToken=0x19f010) returned 0x0
	[0170.886] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x19f0e0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f0dc | out: ppvObject=0x19f0dc*=0x7427d0) returned 0x0
	[0170.886] IUnknown:AddRef (This=0x7427d0) returned 0x4
	[0170.886] IUnknown:Release (This=0x7427d0) returned 0x3
	[0170.886] IUnknown:Release (This=0x7427d0) returned 0x2
	[0170.887] WbemLocator:IUnknown:Release (This=0x7c80a0) returned 0x2
	[0170.887] SysStringLen (param_1=0x0) returned 0x0
	[0170.887] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcf18, puCount=0x19f3a4 | out: puCount=0x19f3a4*=0x2) returned 0x0
	[0170.887] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3a0*=0x0, pszText=0x0 | out: puBuffLength=0x19f3a0*=0xf, pszText=0x0) returned 0x0
	[0170.887] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0170.887] CoGetContextToken (in: pToken=0x19f1f0 | out: pToken=0x19f1f0) returned 0x0
	[0170.887] IUnknown:AddRef (This=0x7427d0) returned 0x3
	[0170.887] IEnumWbemClassObject:Clone (in: This=0x7427d0, ppEnum=0x19f3b0 | out: ppEnum=0x19f3b0*=0x742c80) returned 0x0
	[0170.888] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f274 | out: ppvObject=0x19f274*=0x742c84) returned 0x0
	[0170.888] IClientSecurity:QueryBlanket (in: This=0x742c84, pProxy=0x742c80, pAuthnSvc=0x19f2c4, pAuthzSvc=0x19f2c0, pServerPrincName=0x19f2b8, pAuthnLevel=0x19f2bc, pImpLevel=0x19f2ac, pAuthInfo=0x19f2b0, pCapabilites=0x19f2b4 | out: pAuthnSvc=0x19f2c4*=0xa, pAuthzSvc=0x19f2c0*=0x0, pServerPrincName=0x19f2b8, pAuthnLevel=0x19f2bc*=0x6, pImpLevel=0x19f2ac*=0x2, pAuthInfo=0x19f2b0, pCapabilites=0x19f2b4*=0x1) returned 0x0
	[0170.888] IUnknown:Release (This=0x742c84) returned 0x1
	[0170.888] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f268 | out: ppvObject=0x19f268*=0x7499c8) returned 0x0
	[0170.888] IUnknown:QueryInterface (in: This=0x742c80, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f264 | out: ppvObject=0x19f264*=0x742c84) returned 0x0
	[0170.888] IClientSecurity:SetBlanket (This=0x742c84, pProxy=0x742c80, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0170.889] IUnknown:Release (This=0x742c84) returned 0x2
	[0170.890] WbemLocator:IUnknown:Release (This=0x7499c8) returned 0x1
	[0170.890] CoTaskMemFree (pv=0x7484d0) 
	[0170.890] IUnknown:QueryInterface (in: This=0x742c80, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee50 | out: ppvObject=0x19ee50*=0x7499c8) returned 0x0
	[0170.890] WbemLocator:IUnknown:QueryInterface (in: This=0x7499c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ee0c | out: ppvObject=0x19ee0c*=0x0) returned 0x80004002
	[0170.890] WbemLocator:IUnknown:QueryInterface (in: This=0x7499c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ec2c | out: ppvObject=0x19ec2c*=0x0) returned 0x80004002
	[0170.891] IUnknown:QueryInterface (in: This=0x742c80, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ea04 | out: ppvObject=0x19ea04*=0x0) returned 0x80004002
	[0170.891] WbemLocator:IUnknown:AddRef (This=0x7499c8) returned 0x3
	[0170.891] WbemLocator:IUnknown:QueryInterface (in: This=0x7499c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e76c | out: ppvObject=0x19e76c*=0x0) returned 0x80004002
	[0170.891] WbemLocator:IUnknown:QueryInterface (in: This=0x7499c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e71c | out: ppvObject=0x19e71c*=0x0) returned 0x80004002
	[0170.891] WbemLocator:IUnknown:QueryInterface (in: This=0x7499c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e728 | out: ppvObject=0x19e728*=0x749924) returned 0x0
	[0170.891] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749924, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e730 | out: pCid=0x19e730*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0170.891] WbemLocator:IUnknown:Release (This=0x749924) returned 0x3
	[0170.891] CoGetContextToken (in: pToken=0x19e788 | out: pToken=0x19e788) returned 0x0
	[0170.891] CoGetContextToken (in: pToken=0x19eb90 | out: pToken=0x19eb90) returned 0x0
	[0170.892] WbemLocator:IUnknown:QueryInterface (in: This=0x7499c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec20 | out: ppvObject=0x19ec20*=0x7499ac) returned 0x0
	[0170.892] WbemLocator:IRpcOptions:Query (in: This=0x7499ac, pPrx=0x7499c8, dwProperty=2, pdwValue=0x19ec48 | out: pdwValue=0x19ec48) returned 0x80004002
	[0170.892] WbemLocator:IUnknown:Release (This=0x7499ac) returned 0x3
	[0170.892] WbemLocator:IUnknown:Release (This=0x7499c8) returned 0x2
	[0170.892] CoGetContextToken (in: pToken=0x19f160 | out: pToken=0x19f160) returned 0x0
	[0170.892] CoGetContextToken (in: pToken=0x19f0c0 | out: pToken=0x19f0c0) returned 0x0
	[0170.892] WbemLocator:IUnknown:QueryInterface (in: This=0x7499c8, riid=0x19f190*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f18c | out: ppvObject=0x19f18c*=0x742c80) returned 0x0
	[0170.892] IUnknown:AddRef (This=0x742c80) returned 0x4
	[0170.892] IUnknown:Release (This=0x742c80) returned 0x3
	[0170.892] IUnknown:Release (This=0x742c80) returned 0x2
	[0170.892] IUnknown:Release (This=0x7427d0) returned 0x2
	[0170.892] SysStringLen (param_1=0x0) returned 0x0
	[0170.892] IEnumWbemClassObject:Reset (This=0x742c80) returned 0x0
	[0170.893] CoTaskMemAlloc (cb=0x4) returned 0x7831e0
	[0170.893] IEnumWbemClassObject:Next (in: This=0x742c80, lTimeout=-1, uCount=0x1, apObjects=0x7831e0, puReturned=0x29534e8 | out: apObjects=0x7831e0*=0x7cd008, puReturned=0x29534e8*=0x1) returned 0x0
	[0170.897] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea10 | out: ppvObject=0x19ea10*=0x7cd008) returned 0x0
	[0170.897] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9cc | out: ppvObject=0x19e9cc*=0x0) returned 0x80004002
	[0170.897] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0170.897] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5c4 | out: ppvObject=0x19e5c4*=0x0) returned 0x80004002
	[0170.898] IUnknown:AddRef (This=0x7cd008) returned 0x3
	[0170.898] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e32c | out: ppvObject=0x19e32c*=0x0) returned 0x80004002
	[0170.898] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e2dc | out: ppvObject=0x19e2dc*=0x0) returned 0x80004002
	[0170.898] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2e8 | out: ppvObject=0x19e2e8*=0x7cd00c) returned 0x0
	[0170.898] IMarshal:GetUnmarshalClass (in: This=0x7cd00c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2f0 | out: pCid=0x19e2f0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0170.898] IUnknown:Release (This=0x7cd00c) returned 0x3
	[0170.898] CoGetContextToken (in: pToken=0x19e348 | out: pToken=0x19e348) returned 0x0
	[0170.898] CoGetContextToken (in: pToken=0x19e750 | out: pToken=0x19e750) returned 0x0
	[0170.898] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7e0 | out: ppvObject=0x19e7e0*=0x0) returned 0x80004002
	[0170.898] IUnknown:Release (This=0x7cd008) returned 0x2
	[0170.898] CoGetContextToken (in: pToken=0x19ed20 | out: pToken=0x19ed20) returned 0x0
	[0170.898] CoGetContextToken (in: pToken=0x19ec80 | out: pToken=0x19ec80) returned 0x0
	[0170.898] IUnknown:QueryInterface (in: This=0x7cd008, riid=0x19ed50*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ed4c | out: ppvObject=0x19ed4c*=0x7cd008) returned 0x0
	[0170.898] IUnknown:AddRef (This=0x7cd008) returned 0x4
	[0170.898] IUnknown:Release (This=0x7cd008) returned 0x3
	[0170.898] IUnknown:Release (This=0x7cd008) returned 0x2
	[0170.898] CoTaskMemFree (pv=0x7831e0) 
	[0170.898] CoGetContextToken (in: pToken=0x19f090 | out: pToken=0x19f090) returned 0x0
	[0170.898] IUnknown:AddRef (This=0x7cd008) returned 0x3
	[0170.899] IWbemClassObject:Get (in: This=0x7cd008, wszName="__GENUS", lFlags=0, pVal=0x19f3a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f420*=0, plFlavor=0x19f41c*=0 | out: pVal=0x19f3a0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f420*=3, plFlavor=0x19f41c*=64) returned 0x0
	[0170.899] IWbemClassObject:Get (in: This=0x7cd008, wszName="__PATH", lFlags=0, pVal=0x19f384*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f408*=0, plFlavor=0x19f404*=0 | out: pVal=0x19f384*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19f408*=8, plFlavor=0x19f404*=64) returned 0x0
	[0170.899] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0170.899] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0170.899] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7bc
	[0170.899] SetEvent (hEvent=0x2bc) returned 1
	[0170.899] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19f35c*=0x7bc, lpdwindex=0x19f17c | out: lpdwindex=0x19f17c) returned 0x0
	[0170.907] CoGetContextToken (in: pToken=0x19f228 | out: pToken=0x19f228) returned 0x0
	[0170.907] CoGetContextToken (in: pToken=0x19f188 | out: pToken=0x19f188) returned 0x0
	[0170.907] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf88, riid=0x19f258*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f254 | out: ppvObject=0x19f254*=0x7bcf88) returned 0x0
	[0170.907] WbemDefPath:IUnknown:AddRef (This=0x7bcf88) returned 0x3
	[0170.907] WbemDefPath:IUnknown:Release (This=0x7bcf88) returned 0x2
	[0170.907] WbemDefPath:IWbemPath:SetText (This=0x7bcf88, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0
	[0170.907] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcf18, puCount=0x19f3dc | out: puCount=0x19f3dc*=0x2) returned 0x0
	[0170.907] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3d8*=0x0, pszText=0x0 | out: puBuffLength=0x19f3d8*=0xf, pszText=0x0) returned 0x0
	[0170.907] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3d8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3d8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0170.907] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcf18, puCount=0x19f3a8 | out: puCount=0x19f3a8*=0x2) returned 0x0
	[0170.907] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3a4*=0x0, pszText=0x0 | out: puBuffLength=0x19f3a4*=0xf, pszText=0x0) returned 0x0
	[0170.907] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=4, puBuffLength=0x19f3a4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f3a4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0170.907] IWbemClassObject:Get (in: This=0x7cd008, wszName="Name", lFlags=0, pVal=0x19f3a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2953d5c*=0, plFlavor=0x2953d60*=0 | out: pVal=0x19f3a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x2953d5c*=8, plFlavor=0x2953d60*=0) returned 0x0
	[0170.908] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0170.908] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0170.908] IWbemClassObject:Get (in: This=0x7cd008, wszName="Name", lFlags=0, pVal=0x19f3ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2953d5c*=8, plFlavor=0x2953d60*=0 | out: pVal=0x19f3ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x2953d5c*=8, plFlavor=0x2953d60*=0) returned 0x0
	[0170.908] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0170.908] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0170.908] CoGetContextToken (in: pToken=0x19f2d8 | out: pToken=0x19f2d8) returned 0x0
	[0170.908] WbemLocator:IUnknown:Release (This=0x7499c8) returned 0x1
	[0170.908] IUnknown:Release (This=0x742c80) returned 0x0
	[0170.957] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", nBufferLength=0x105, lpBuffer=0x19efb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", lpFilePart=0x0) returned 0x44
	[0170.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f40c) returned 1
	[0170.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef"), fInfoLevelId=0x0, lpFileInformation=0x19f488 | out: lpFileInformation=0x19f488*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xa29d722, ftCreationTime.dwHighDateTime=0x1d83d26, ftLastAccessTime.dwLowDateTime=0xa29d722, ftLastAccessTime.dwHighDateTime=0x1d83d26, ftLastWriteTime.dwLowDateTime=0xa29d722, ftLastWriteTime.dwHighDateTime=0x1d83d26, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f408) returned 1
	[0170.963] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", nBufferLength=0x105, lpBuffer=0x19efd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", lpFilePart=0x0) returned 0x44
	[0170.964] SetCurrentDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef")) returned 1
	[0171.658] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7c4
	[0171.658] SetEvent (hEvent=0x2bc) returned 1
	[0171.658] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19dc14*=0x7c4, lpdwindex=0x19da34 | out: lpdwindex=0x19da34) returned 0x0
	[0171.659] CoGetContextToken (in: pToken=0x19ca4c | out: pToken=0x19ca4c) returned 0x0
	[0171.659] CoGetContextToken (in: pToken=0x19ca34 | out: pToken=0x19ca34) returned 0x0
	[0171.659] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.659] WbemLocator:IUnknown:Release (This=0x7479d0) returned 0x1
	[0171.659] WbemLocator:IUnknown:Release (This=0x726258) returned 0x0
	[0171.661] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.661] IUnknown:Release (This=0x7205f8) returned 0x2
	[0171.661] IUnknown:Release (This=0x7205f8) returned 0x1
	[0171.661] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.661] WbemLocator:IUnknown:Release (This=0x749dc8) returned 0x1
	[0171.661] WbemLocator:IUnknown:Release (This=0x726a28) returned 0x0
	[0171.662] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.662] IUnknown:Release (This=0x720ac0) returned 0x2
	[0171.662] IUnknown:Release (This=0x720ac0) returned 0x1
	[0171.662] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.662] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x1
	[0171.662] WbemLocator:IUnknown:Release (This=0x776a38) returned 0x0
	[0171.663] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.663] IUnknown:Release (This=0x720df0) returned 0x2
	[0171.663] IUnknown:Release (This=0x720df0) returned 0x1
	[0171.663] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.663] WbemLocator:IUnknown:Release (This=0x7496c8) returned 0x1
	[0171.663] WbemLocator:IUnknown:Release (This=0x776498) returned 0x0
	[0171.664] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.664] IUnknown:Release (This=0x7202c8) returned 0x2
	[0171.664] IUnknown:Release (This=0x7202c8) returned 0x1
	[0171.664] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.664] WbemLocator:IUnknown:Release (This=0x7489c8) returned 0x1
	[0171.664] WbemLocator:IUnknown:Release (This=0x776358) returned 0x0
	[0171.664] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.664] IUnknown:Release (This=0x7756e0) returned 0x2
	[0171.664] IUnknown:Release (This=0x7756e0) returned 0x1
	[0171.665] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.665] IUnknown:Release (This=0x774228) returned 0x2
	[0171.665] IUnknown:Release (This=0x774228) returned 0x1
	[0171.665] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.665] IUnknown:Release (This=0x775a10) returned 0x2
	[0171.665] IUnknown:Release (This=0x775a10) returned 0x1
	[0171.665] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.665] IUnknown:Release (This=0x775548) returned 0x2
	[0171.665] IUnknown:Release (This=0x775548) returned 0x1
	[0171.665] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.665] IUnknown:Release (This=0x775878) returned 0x2
	[0171.665] IUnknown:Release (This=0x775878) returned 0x1
	[0171.665] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.665] IUnknown:Release (This=0x775ed8) returned 0x2
	[0171.665] IUnknown:Release (This=0x775ed8) returned 0x1
	[0171.665] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.665] IUnknown:Release (This=0x775ba8) returned 0x2
	[0171.665] IUnknown:Release (This=0x775ba8) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x774a20) returned 0x2
	[0171.666] IUnknown:Release (This=0x774a20) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x7743c0) returned 0x2
	[0171.666] IUnknown:Release (This=0x7743c0) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x774bb8) returned 0x2
	[0171.666] IUnknown:Release (This=0x774bb8) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x7746f0) returned 0x2
	[0171.666] IUnknown:Release (This=0x7746f0) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x7753b0) returned 0x2
	[0171.666] IUnknown:Release (This=0x7753b0) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x774d50) returned 0x2
	[0171.666] IUnknown:Release (This=0x774d50) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x774888) returned 0x2
	[0171.666] IUnknown:Release (This=0x774888) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x775d40) returned 0x2
	[0171.666] IUnknown:Release (This=0x775d40) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.666] IUnknown:Release (This=0x774ee8) returned 0x2
	[0171.666] IUnknown:Release (This=0x774ee8) returned 0x1
	[0171.666] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x775080) returned 0x2
	[0171.667] IUnknown:Release (This=0x775080) returned 0x1
	[0171.667] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x775218) returned 0x2
	[0171.667] IUnknown:Release (This=0x775218) returned 0x1
	[0171.667] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x792658) returned 0x2
	[0171.667] IUnknown:Release (This=0x792658) returned 0x1
	[0171.667] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x792190) returned 0x2
	[0171.667] IUnknown:Release (This=0x792190) returned 0x1
	[0171.667] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x792328) returned 0x2
	[0171.667] IUnknown:Release (This=0x792328) returned 0x1
	[0171.667] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x7924c0) returned 0x2
	[0171.667] IUnknown:Release (This=0x7924c0) returned 0x1
	[0171.667] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x790810) returned 0x2
	[0171.667] IUnknown:Release (This=0x790810) returned 0x1
	[0171.667] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x791008) returned 0x2
	[0171.667] IUnknown:Release (This=0x791008) returned 0x1
	[0171.667] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.667] IUnknown:Release (This=0x791668) returned 0x2
	[0171.667] IUnknown:Release (This=0x791668) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x791b30) returned 0x2
	[0171.668] IUnknown:Release (This=0x791b30) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x791ff8) returned 0x2
	[0171.668] IUnknown:Release (This=0x791ff8) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x7909a8) returned 0x2
	[0171.668] IUnknown:Release (This=0x7909a8) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x791800) returned 0x2
	[0171.668] IUnknown:Release (This=0x791800) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x790b40) returned 0x2
	[0171.668] IUnknown:Release (This=0x790b40) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x790cd8) returned 0x2
	[0171.668] IUnknown:Release (This=0x790cd8) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x790e70) returned 0x2
	[0171.668] IUnknown:Release (This=0x790e70) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x7911a0) returned 0x2
	[0171.668] IUnknown:Release (This=0x7911a0) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.668] IUnknown:Release (This=0x791338) returned 0x2
	[0171.668] IUnknown:Release (This=0x791338) returned 0x1
	[0171.668] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.669] IUnknown:Release (This=0x7914d0) returned 0x2
	[0171.669] IUnknown:Release (This=0x7914d0) returned 0x1
	[0171.669] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.669] IUnknown:Release (This=0x791998) returned 0x2
	[0171.669] IUnknown:Release (This=0x791998) returned 0x1
	[0171.669] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.669] IUnknown:Release (This=0x791cc8) returned 0x2
	[0171.669] IUnknown:Release (This=0x791cc8) returned 0x1
	[0171.669] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.669] IUnknown:Release (This=0x79b0b8) returned 0x2
	[0171.669] IUnknown:Release (This=0x79b0b8) returned 0x1
	[0171.669] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.669] IUnknown:Release (This=0x79bd78) returned 0x2
	[0171.669] IUnknown:Release (This=0x79bd78) returned 0x1
	[0171.669] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.669] IUnknown:Release (This=0x79bf10) returned 0x2
	[0171.669] IUnknown:Release (This=0x79bf10) returned 0x1
	[0171.669] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.669] IUnknown:Release (This=0x79c0a8) returned 0x2
	[0171.669] IUnknown:Release (This=0x79c0a8) returned 0x1
	[0171.669] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.669] IUnknown:Release (This=0x79c8a0) returned 0x2
	[0171.669] IUnknown:Release (This=0x79c8a0) returned 0x1
	[0171.670] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.670] IUnknown:Release (This=0x79c570) returned 0x2
	[0171.670] IUnknown:Release (This=0x79c570) returned 0x1
	[0171.670] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.670] IUnknown:Release (This=0x79ad88) returned 0x2
	[0171.670] IUnknown:Release (This=0x79ad88) returned 0x1
	[0171.670] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.670] IUnknown:Release (This=0x79aa58) returned 0x2
	[0171.670] IUnknown:Release (This=0x79aa58) returned 0x1
	[0171.670] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.670] IUnknown:Release (This=0x79b718) returned 0x2
	[0171.670] IUnknown:Release (This=0x79b718) returned 0x1
	[0171.670] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.670] IUnknown:Release (This=0x79c708) returned 0x2
	[0171.670] IUnknown:Release (This=0x79c708) returned 0x1
	[0171.670] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.670] IUnknown:Release (This=0x79c3d8) returned 0x2
	[0171.670] IUnknown:Release (This=0x79c3d8) returned 0x1
	[0171.670] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.670] IUnknown:Release (This=0x79abf0) returned 0x2
	[0171.670] IUnknown:Release (This=0x79abf0) returned 0x1
	[0171.670] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.670] IUnknown:Release (This=0x79af20) returned 0x2
	[0171.671] IUnknown:Release (This=0x79af20) returned 0x1
	[0171.671] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.671] IUnknown:Release (This=0x79c240) returned 0x2
	[0171.671] IUnknown:Release (This=0x79c240) returned 0x1
	[0171.671] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.671] IUnknown:Release (This=0x79b250) returned 0x2
	[0171.671] IUnknown:Release (This=0x79b250) returned 0x1
	[0171.671] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.671] IUnknown:Release (This=0x79b3e8) returned 0x2
	[0171.671] IUnknown:Release (This=0x79b3e8) returned 0x1
	[0171.677] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.677] IUnknown:Release (This=0x79bbe0) returned 0x2
	[0171.677] IUnknown:Release (This=0x79bbe0) returned 0x1
	[0171.677] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.677] IUnknown:Release (This=0x79b580) returned 0x2
	[0171.677] IUnknown:Release (This=0x79b580) returned 0x1
	[0171.677] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.677] IUnknown:Release (This=0x79b8b0) returned 0x2
	[0171.677] IUnknown:Release (This=0x79b8b0) returned 0x1
	[0171.677] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.677] IUnknown:Release (This=0x79ba48) returned 0x2
	[0171.677] IUnknown:Release (This=0x79ba48) returned 0x1
	[0171.677] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.677] IUnknown:Release (This=0x7aa9f8) returned 0x2
	[0171.677] IUnknown:Release (This=0x7aa9f8) returned 0x1
	[0171.677] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.677] IUnknown:Release (This=0x7ab520) returned 0x2
	[0171.677] IUnknown:Release (This=0x7ab520) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7aa068) returned 0x2
	[0171.678] IUnknown:Release (This=0x7aa068) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7abb80) returned 0x2
	[0171.678] IUnknown:Release (This=0x7abb80) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7aa530) returned 0x2
	[0171.678] IUnknown:Release (This=0x7aa530) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7ab388) returned 0x2
	[0171.678] IUnknown:Release (This=0x7ab388) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7aaec0) returned 0x2
	[0171.678] IUnknown:Release (This=0x7aaec0) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7ab6b8) returned 0x2
	[0171.678] IUnknown:Release (This=0x7ab6b8) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7abd18) returned 0x2
	[0171.678] IUnknown:Release (This=0x7abd18) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7aa200) returned 0x2
	[0171.678] IUnknown:Release (This=0x7aa200) returned 0x1
	[0171.678] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.678] IUnknown:Release (This=0x7abeb0) returned 0x2
	[0171.678] IUnknown:Release (This=0x7abeb0) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7ab058) returned 0x2
	[0171.679] IUnknown:Release (This=0x7ab058) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7ab1f0) returned 0x2
	[0171.679] IUnknown:Release (This=0x7ab1f0) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7aab90) returned 0x2
	[0171.679] IUnknown:Release (This=0x7aab90) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7ab850) returned 0x2
	[0171.679] IUnknown:Release (This=0x7ab850) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7aad28) returned 0x2
	[0171.679] IUnknown:Release (This=0x7aad28) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7ab9e8) returned 0x2
	[0171.679] IUnknown:Release (This=0x7ab9e8) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7aa398) returned 0x2
	[0171.679] IUnknown:Release (This=0x7aa398) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7aa6c8) returned 0x2
	[0171.679] IUnknown:Release (This=0x7aa6c8) returned 0x1
	[0171.679] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.679] IUnknown:Release (This=0x7aa860) returned 0x2
	[0171.680] IUnknown:Release (This=0x7aa860) returned 0x1
	[0171.680] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.680] IUnknown:Release (This=0x7b8e00) returned 0x2
	[0171.680] IUnknown:Release (This=0x7b8e00) returned 0x1
	[0171.680] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.680] IUnknown:Release (This=0x7b9928) returned 0x2
	[0171.680] IUnknown:Release (This=0x7b9928) returned 0x1
	[0171.680] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.680] IUnknown:Release (This=0x7b9790) returned 0x2
	[0171.680] IUnknown:Release (This=0x7b9790) returned 0x1
	[0171.680] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.680] IUnknown:Release (This=0x7b9ac0) returned 0x2
	[0171.680] IUnknown:Release (This=0x7b9ac0) returned 0x1
	[0171.680] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.680] IUnknown:Release (This=0x7b9c58) returned 0x2
	[0171.680] IUnknown:Release (This=0x7b9c58) returned 0x1
	[0171.752] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.752] IUnknown:Release (This=0x7b9df0) returned 0x2
	[0171.753] IUnknown:Release (This=0x7b9df0) returned 0x1
	[0171.753] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.753] IUnknown:Release (This=0x7b95f8) returned 0x2
	[0171.753] IUnknown:Release (This=0x7b95f8) returned 0x1
	[0171.753] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.753] IUnknown:Release (This=0x7b8f98) returned 0x2
	[0171.753] IUnknown:Release (This=0x7b8f98) returned 0x1
	[0171.753] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.753] IUnknown:Release (This=0x7b9f88) returned 0x2
	[0171.753] IUnknown:Release (This=0x7b9f88) returned 0x1
	[0171.753] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.753] IUnknown:Release (This=0x7b9460) returned 0x2
	[0171.753] IUnknown:Release (This=0x7b9460) returned 0x1
	[0171.753] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.753] IUnknown:Release (This=0x7ba120) returned 0x2
	[0171.753] IUnknown:Release (This=0x7ba120) returned 0x1
	[0171.753] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.753] IUnknown:Release (This=0x7ba780) returned 0x2
	[0171.753] IUnknown:Release (This=0x7ba780) returned 0x1
	[0171.753] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.753] IUnknown:Release (This=0x7bac48) returned 0x2
	[0171.753] IUnknown:Release (This=0x7bac48) returned 0x1
	[0171.753] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7ba5e8) returned 0x2
	[0171.754] IUnknown:Release (This=0x7ba5e8) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7ba2b8) returned 0x2
	[0171.754] IUnknown:Release (This=0x7ba2b8) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7ba450) returned 0x2
	[0171.754] IUnknown:Release (This=0x7ba450) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7ba918) returned 0x2
	[0171.754] IUnknown:Release (This=0x7ba918) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7b9130) returned 0x2
	[0171.754] IUnknown:Release (This=0x7b9130) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7baab0) returned 0x2
	[0171.754] IUnknown:Release (This=0x7baab0) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7b92c8) returned 0x2
	[0171.754] IUnknown:Release (This=0x7b92c8) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7cbce8) returned 0x2
	[0171.754] IUnknown:Release (This=0x7cbce8) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7cd800) returned 0x2
	[0171.754] IUnknown:Release (This=0x7cd800) returned 0x1
	[0171.754] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.754] IUnknown:Release (This=0x7cb9b8) returned 0x2
	[0171.754] IUnknown:Release (This=0x7cb9b8) returned 0x1
	[0171.755] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.755] IUnknown:Release (This=0x7cc678) returned 0x2
	[0171.755] IUnknown:Release (This=0x7cc678) returned 0x1
	[0171.755] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.755] IUnknown:Release (This=0x7cc018) returned 0x2
	[0171.755] IUnknown:Release (This=0x7cc018) returned 0x1
	[0171.755] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.755] IUnknown:Release (This=0x7cd1a0) returned 0x2
	[0171.755] IUnknown:Release (This=0x7cd1a0) returned 0x1
	[0171.755] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.755] IUnknown:Release (This=0x7cbb50) returned 0x2
	[0171.755] IUnknown:Release (This=0x7cbb50) returned 0x1
	[0171.755] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.755] IUnknown:Release (This=0x7cc1b0) returned 0x2
	[0171.755] IUnknown:Release (This=0x7cc1b0) returned 0x1
	[0171.755] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.755] IUnknown:Release (This=0x7cc810) returned 0x2
	[0171.755] IUnknown:Release (This=0x7cc810) returned 0x1
	[0171.755] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.755] WbemLocator:IUnknown:Release (This=0x748fc8) returned 0x1
	[0171.755] WbemLocator:IUnknown:Release (This=0x7c81e0) returned 0x0
	[0171.756] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.756] IUnknown:Release (This=0x7ccb40) returned 0x2
	[0171.756] IUnknown:Release (This=0x7ccb40) returned 0x1
	[0171.756] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.756] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x1
	[0171.756] WbemLocator:IUnknown:Release (This=0x7c80a0) returned 0x0
	[0171.756] CoGetContextToken (in: pToken=0x19c9c0 | out: pToken=0x19c9c0) returned 0x0
	[0171.756] IUnknown:Release (This=0x7cd008) returned 0x2
	[0171.756] IUnknown:Release (This=0x7cd008) returned 0x1
	[0171.761] CoGetContextToken (in: pToken=0x19dae0 | out: pToken=0x19dae0) returned 0x0
	[0171.761] CoGetContextToken (in: pToken=0x19da40 | out: pToken=0x19da40) returned 0x0
	[0171.761] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd068, riid=0x19db10*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19db0c | out: ppvObject=0x19db0c*=0x7bd068) returned 0x0
	[0171.761] WbemDefPath:IUnknown:AddRef (This=0x7bd068) returned 0x3
	[0171.761] WbemDefPath:IUnknown:Release (This=0x7bd068) returned 0x2
	[0171.761] WbemDefPath:IWbemPath:SetText (This=0x7bd068, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0171.761] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd068, puCount=0x19dc90 | out: puCount=0x19dc90*=0x2) returned 0x0
	[0171.761] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc8c*=0x0, pszText=0x0 | out: puBuffLength=0x19dc8c*=0xf, pszText=0x0) returned 0x0
	[0171.761] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc8c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc8c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0171.761] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd068, puCount=0x19dc7c | out: puCount=0x19dc7c*=0x2) returned 0x0
	[0171.761] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc78*=0x0, pszText=0x0 | out: puBuffLength=0x19dc78*=0xf, pszText=0x0) returned 0x0
	[0171.761] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc78*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc78*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0171.773] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19db30*=0x7d8, lpdwindex=0x19d9e4 | out: lpdwindex=0x19d9e4) returned 0x0
	[0171.773] CoGetContextToken (in: pToken=0x19c9fc | out: pToken=0x19c9fc) returned 0x0
	[0171.773] CoGetContextToken (in: pToken=0x19c9bc | out: pToken=0x19c9bc) returned 0x0
	[0171.773] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x1
	[0171.773] IUnknown:Release (This=0x7427d0) returned 0x0
	[0171.790] CoGetContextToken (in: pToken=0x19c9fc | out: pToken=0x19c9fc) returned 0x0
	[0171.790] CoGetContextToken (in: pToken=0x19c9bc | out: pToken=0x19c9bc) returned 0x0
	[0171.790] WbemLocator:IUnknown:Release (This=0x7492c8) returned 0x1
	[0171.790] IUnknown:Release (This=0x742fa0) returned 0x0
	[0171.809] CoGetContextToken (in: pToken=0x19c9fc | out: pToken=0x19c9fc) returned 0x0
	[0171.809] CoGetContextToken (in: pToken=0x19c9bc | out: pToken=0x19c9bc) returned 0x0
	[0171.809] WbemLocator:IUnknown:Release (This=0x748ac8) returned 0x1
	[0171.809] IUnknown:Release (This=0x743068) returned 0x0
	[0171.830] CoGetContextToken (in: pToken=0x19c9fc | out: pToken=0x19c9fc) returned 0x0
	[0171.831] CoGetContextToken (in: pToken=0x19c9bc | out: pToken=0x19c9bc) returned 0x0
	[0171.831] WbemLocator:IUnknown:Release (This=0x749ac8) returned 0x1
	[0171.831] IUnknown:Release (This=0x742af0) returned 0x0
	[0171.840] CoGetContextToken (in: pToken=0x19d8f0 | out: pToken=0x19d8f0) returned 0x0
	[0171.840] CoGetContextToken (in: pToken=0x19d898 | out: pToken=0x19d898) returned 0x0
	[0171.840] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d878 | out: ppvObject=0x19d878*=0x712148) returned 0x0
	[0171.841] CObjectContext::ContextCallback () returned 0x0
	[0171.842] IUnknown:Release (This=0x712148) returned 0x1
	[0171.842] CoUnmarshalInterface (in: pStm=0x7434d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d8e0 | out: ppv=0x19d8e0*=0x749fc8) returned 0x0
	[0171.842] CoMarshalInterface (pStm=0x7434d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749fc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0171.843] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d784 | out: ppvObject=0x19d784*=0x749fc8) returned 0x0
	[0171.843] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d740 | out: ppvObject=0x19d740*=0x0) returned 0x80004002
	[0171.843] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d55c | out: ppvObject=0x19d55c*=0x0) returned 0x80004002
	[0171.843] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d334 | out: ppvObject=0x19d334*=0x0) returned 0x80004002
	[0171.844] WbemLocator:IUnknown:AddRef (This=0x749fc8) returned 0x3
	[0171.844] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19d09c | out: ppvObject=0x19d09c*=0x0) returned 0x80004002
	[0171.844] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19d04c | out: ppvObject=0x19d04c*=0x0) returned 0x80004002
	[0171.844] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d058 | out: ppvObject=0x19d058*=0x749f24) returned 0x0
	[0171.844] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749f24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19d060 | out: pCid=0x19d060*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0171.844] WbemLocator:IUnknown:Release (This=0x749f24) returned 0x3
	[0171.844] CoGetContextToken (in: pToken=0x19d0b8 | out: pToken=0x19d0b8) returned 0x0
	[0171.844] CoGetContextToken (in: pToken=0x19d4c0 | out: pToken=0x19d4c0) returned 0x0
	[0171.844] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d550 | out: ppvObject=0x19d550*=0x749fac) returned 0x0
	[0171.845] WbemLocator:IRpcOptions:Query (in: This=0x749fac, pPrx=0x749fc8, dwProperty=2, pdwValue=0x19d578 | out: pdwValue=0x19d578) returned 0x0
	[0171.845] WbemLocator:IUnknown:Release (This=0x749fac) returned 0x3
	[0171.845] WbemLocator:IUnknown:Release (This=0x749fc8) returned 0x2
	[0171.845] WbemLocator:IUnknown:Release (This=0x749fc8) returned 0x1
	[0171.845] CoGetContextToken (in: pToken=0x19d830 | out: pToken=0x19d830) returned 0x0
	[0171.845] WbemLocator:IUnknown:AddRef (This=0x749fc8) returned 0x2
	[0171.845] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae8 | out: ppvObject=0x19dae8*=0x749fa4) returned 0x0
	[0171.845] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x749fa4, pProxy=0x749fc8, pAuthnSvc=0x19db38, pAuthzSvc=0x19db34, pServerPrincName=0x19db2c, pAuthnLevel=0x19db30, pImpLevel=0x19db20, pAuthInfo=0x19db24, pCapabilites=0x19db28 | out: pAuthnSvc=0x19db38*=0xa, pAuthzSvc=0x19db34*=0x0, pServerPrincName=0x19db2c, pAuthnLevel=0x19db30*=0x6, pImpLevel=0x19db20*=0x2, pAuthInfo=0x19db24, pCapabilites=0x19db28*=0x1) returned 0x0
	[0171.845] WbemLocator:IUnknown:Release (This=0x749fa4) returned 0x2
	[0171.845] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dadc | out: ppvObject=0x19dadc*=0x749fc8) returned 0x0
	[0171.845] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dad8 | out: ppvObject=0x19dad8*=0x749fa4) returned 0x0
	[0171.845] WbemLocator:IClientSecurity:SetBlanket (This=0x749fa4, pProxy=0x749fc8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0171.846] WbemLocator:IUnknown:Release (This=0x749fa4) returned 0x3
	[0171.846] WbemLocator:IUnknown:Release (This=0x749fc8) returned 0x2
	[0171.846] CoTaskMemFree (pv=0x747f00) 
	[0171.846] WbemLocator:IUnknown:Release (This=0x749fc8) returned 0x1
	[0171.846] SysStringLen (param_1=0x0) returned 0x0
	[0171.846] CoGetContextToken (in: pToken=0x19daa0 | out: pToken=0x19daa0) returned 0x0
	[0171.846] CoGetContextToken (in: pToken=0x19da00 | out: pToken=0x19da00) returned 0x0
	[0171.846] WbemLocator:IUnknown:QueryInterface (in: This=0x749fc8, riid=0x19dad0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19dacc | out: ppvObject=0x19dacc*=0x776358) returned 0x0
	[0171.847] WbemLocator:IUnknown:AddRef (This=0x776358) returned 0x3
	[0171.847] WbemLocator:IUnknown:Release (This=0x776358) returned 0x2
	[0171.847] CoGetContextToken (in: pToken=0x19da60 | out: pToken=0x19da60) returned 0x0
	[0171.847] WbemLocator:IUnknown:AddRef (This=0x776358) returned 0x3
	[0171.847] WbemLocator:IUnknown:QueryInterface (in: This=0x776358, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae8 | out: ppvObject=0x19dae8*=0x749fa4) returned 0x0
	[0171.847] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x749fa4, pProxy=0x776358, pAuthnSvc=0x19db38, pAuthzSvc=0x19db34, pServerPrincName=0x19db2c, pAuthnLevel=0x19db30, pImpLevel=0x19db20, pAuthInfo=0x19db24, pCapabilites=0x19db28 | out: pAuthnSvc=0x19db38*=0xa, pAuthzSvc=0x19db34*=0x0, pServerPrincName=0x19db2c, pAuthnLevel=0x19db30*=0x6, pImpLevel=0x19db20*=0x2, pAuthInfo=0x19db24, pCapabilites=0x19db28*=0x1) returned 0x0
	[0171.847] WbemLocator:IUnknown:Release (This=0x749fa4) returned 0x3
	[0171.847] WbemLocator:IUnknown:QueryInterface (in: This=0x776358, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dadc | out: ppvObject=0x19dadc*=0x749fc8) returned 0x0
	[0171.847] WbemLocator:IUnknown:QueryInterface (in: This=0x776358, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dad8 | out: ppvObject=0x19dad8*=0x749fa4) returned 0x0
	[0171.847] WbemLocator:IClientSecurity:SetBlanket (This=0x749fa4, pProxy=0x776358, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0171.848] WbemLocator:IUnknown:Release (This=0x749fa4) returned 0x4
	[0171.848] WbemLocator:IUnknown:Release (This=0x749fc8) returned 0x3
	[0171.848] CoTaskMemFree (pv=0x747f00) 
	[0171.849] WbemLocator:IUnknown:Release (This=0x776358) returned 0x2
	[0171.849] SysStringLen (param_1=0x0) returned 0x0
	[0171.849] CoGetContextToken (in: pToken=0x19d9e8 | out: pToken=0x19d9e8) returned 0x0
	[0171.849] WbemLocator:IUnknown:AddRef (This=0x776358) returned 0x3
	[0171.849] IWbemServices:ExecQuery (in: This=0x776358, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x19dbf4 | out: ppEnum=0x19dbf4*=0x742640) returned 0x0
	[0171.904] IUnknown:QueryInterface (in: This=0x742640, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da58 | out: ppvObject=0x19da58*=0x742644) returned 0x0
	[0171.904] IClientSecurity:QueryBlanket (in: This=0x742644, pProxy=0x742640, pAuthnSvc=0x19daa8, pAuthzSvc=0x19daa4, pServerPrincName=0x19da9c, pAuthnLevel=0x19daa0, pImpLevel=0x19da90, pAuthInfo=0x19da94, pCapabilites=0x19da98 | out: pAuthnSvc=0x19daa8*=0xa, pAuthzSvc=0x19daa4*=0x0, pServerPrincName=0x19da9c, pAuthnLevel=0x19daa0*=0x6, pImpLevel=0x19da90*=0x2, pAuthInfo=0x19da94, pCapabilites=0x19da98*=0x1) returned 0x0
	[0171.904] IUnknown:Release (This=0x742644) returned 0x1
	[0171.904] IUnknown:QueryInterface (in: This=0x742640, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da4c | out: ppvObject=0x19da4c*=0x749ac8) returned 0x0
	[0171.905] IUnknown:QueryInterface (in: This=0x742640, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da48 | out: ppvObject=0x19da48*=0x742644) returned 0x0
	[0171.905] IClientSecurity:SetBlanket (This=0x742644, pProxy=0x742640, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0171.908] IUnknown:Release (This=0x742644) returned 0x2
	[0171.908] WbemLocator:IUnknown:Release (This=0x749ac8) returned 0x1
	[0171.908] CoTaskMemFree (pv=0x7481a0) 
	[0171.908] IUnknown:QueryInterface (in: This=0x742640, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d644 | out: ppvObject=0x19d644*=0x749ac8) returned 0x0
	[0171.909] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d600 | out: ppvObject=0x19d600*=0x0) returned 0x80004002
	[0171.909] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d41c | out: ppvObject=0x19d41c*=0x0) returned 0x80004002
	[0171.910] IUnknown:QueryInterface (in: This=0x742640, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d1f4 | out: ppvObject=0x19d1f4*=0x0) returned 0x80004002
	[0171.911] WbemLocator:IUnknown:AddRef (This=0x749ac8) returned 0x3
	[0171.911] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cf5c | out: ppvObject=0x19cf5c*=0x0) returned 0x80004002
	[0171.911] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cf0c | out: ppvObject=0x19cf0c*=0x0) returned 0x80004002
	[0171.911] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf18 | out: ppvObject=0x19cf18*=0x749a24) returned 0x0
	[0171.911] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749a24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cf20 | out: pCid=0x19cf20*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0171.911] WbemLocator:IUnknown:Release (This=0x749a24) returned 0x3
	[0171.911] CoGetContextToken (in: pToken=0x19cf78 | out: pToken=0x19cf78) returned 0x0
	[0171.911] CoGetContextToken (in: pToken=0x19d380 | out: pToken=0x19d380) returned 0x0
	[0171.912] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d410 | out: ppvObject=0x19d410*=0x749aac) returned 0x0
	[0171.912] WbemLocator:IRpcOptions:Query (in: This=0x749aac, pPrx=0x749ac8, dwProperty=2, pdwValue=0x19d438 | out: pdwValue=0x19d438) returned 0x80004002
	[0171.912] WbemLocator:IUnknown:Release (This=0x749aac) returned 0x3
	[0171.912] WbemLocator:IUnknown:Release (This=0x749ac8) returned 0x2
	[0171.912] CoGetContextToken (in: pToken=0x19d958 | out: pToken=0x19d958) returned 0x0
	[0171.912] CoGetContextToken (in: pToken=0x19d8b8 | out: pToken=0x19d8b8) returned 0x0
	[0171.912] WbemLocator:IUnknown:QueryInterface (in: This=0x749ac8, riid=0x19d988*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d984 | out: ppvObject=0x19d984*=0x742640) returned 0x0
	[0171.912] IUnknown:AddRef (This=0x742640) returned 0x4
	[0171.912] IUnknown:Release (This=0x742640) returned 0x3
	[0171.912] IUnknown:Release (This=0x742640) returned 0x2
	[0171.912] WbemLocator:IUnknown:Release (This=0x776358) returned 0x2
	[0171.912] SysStringLen (param_1=0x0) returned 0x0
	[0171.913] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd068, puCount=0x19dc40 | out: puCount=0x19dc40*=0x2) returned 0x0
	[0171.913] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc3c*=0x0, pszText=0x0 | out: puBuffLength=0x19dc3c*=0xf, pszText=0x0) returned 0x0
	[0171.913] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc3c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc3c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0171.913] CoGetContextToken (in: pToken=0x19da90 | out: pToken=0x19da90) returned 0x0
	[0171.913] IUnknown:AddRef (This=0x742640) returned 0x3
	[0171.913] IEnumWbemClassObject:Clone (in: This=0x742640, ppEnum=0x19dc4c | out: ppEnum=0x19dc4c*=0x742960) returned 0x0
	[0171.915] IUnknown:QueryInterface (in: This=0x742960, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db10 | out: ppvObject=0x19db10*=0x742964) returned 0x0
	[0171.915] IClientSecurity:QueryBlanket (in: This=0x742964, pProxy=0x742960, pAuthnSvc=0x19db60, pAuthzSvc=0x19db5c, pServerPrincName=0x19db54, pAuthnLevel=0x19db58, pImpLevel=0x19db48, pAuthInfo=0x19db4c, pCapabilites=0x19db50 | out: pAuthnSvc=0x19db60*=0xa, pAuthzSvc=0x19db5c*=0x0, pServerPrincName=0x19db54, pAuthnLevel=0x19db58*=0x6, pImpLevel=0x19db48*=0x2, pAuthInfo=0x19db4c, pCapabilites=0x19db50*=0x1) returned 0x0
	[0171.915] IUnknown:Release (This=0x742964) returned 0x1
	[0171.915] IUnknown:QueryInterface (in: This=0x742960, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db04 | out: ppvObject=0x19db04*=0x749bc8) returned 0x0
	[0171.915] IUnknown:QueryInterface (in: This=0x742960, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db00 | out: ppvObject=0x19db00*=0x742964) returned 0x0
	[0171.915] IClientSecurity:SetBlanket (This=0x742964, pProxy=0x742960, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0171.918] IUnknown:Release (This=0x742964) returned 0x2
	[0171.918] WbemLocator:IUnknown:Release (This=0x749bc8) returned 0x1
	[0171.918] CoTaskMemFree (pv=0x7481a0) 
	[0171.918] IUnknown:QueryInterface (in: This=0x742960, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d6ec | out: ppvObject=0x19d6ec*=0x749bc8) returned 0x0
	[0171.918] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d6a8 | out: ppvObject=0x19d6a8*=0x0) returned 0x80004002
	[0171.919] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d4c4 | out: ppvObject=0x19d4c4*=0x0) returned 0x80004002
	[0171.919] IUnknown:QueryInterface (in: This=0x742960, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d29c | out: ppvObject=0x19d29c*=0x0) returned 0x80004002
	[0171.920] WbemLocator:IUnknown:AddRef (This=0x749bc8) returned 0x3
	[0171.920] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19d004 | out: ppvObject=0x19d004*=0x0) returned 0x80004002
	[0171.920] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cfb4 | out: ppvObject=0x19cfb4*=0x0) returned 0x80004002
	[0171.920] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cfc0 | out: ppvObject=0x19cfc0*=0x749b24) returned 0x0
	[0171.920] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749b24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cfc8 | out: pCid=0x19cfc8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0171.921] WbemLocator:IUnknown:Release (This=0x749b24) returned 0x3
	[0171.921] CoGetContextToken (in: pToken=0x19d020 | out: pToken=0x19d020) returned 0x0
	[0171.921] CoGetContextToken (in: pToken=0x19d428 | out: pToken=0x19d428) returned 0x0
	[0171.921] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4b8 | out: ppvObject=0x19d4b8*=0x749bac) returned 0x0
	[0171.921] WbemLocator:IRpcOptions:Query (in: This=0x749bac, pPrx=0x749bc8, dwProperty=2, pdwValue=0x19d4e0 | out: pdwValue=0x19d4e0) returned 0x80004002
	[0171.921] WbemLocator:IUnknown:Release (This=0x749bac) returned 0x3
	[0171.921] WbemLocator:IUnknown:Release (This=0x749bc8) returned 0x2
	[0171.921] CoGetContextToken (in: pToken=0x19da00 | out: pToken=0x19da00) returned 0x0
	[0171.921] CoGetContextToken (in: pToken=0x19d960 | out: pToken=0x19d960) returned 0x0
	[0171.921] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x19da30*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19da2c | out: ppvObject=0x19da2c*=0x742960) returned 0x0
	[0171.921] IUnknown:AddRef (This=0x742960) returned 0x4
	[0171.921] IUnknown:Release (This=0x742960) returned 0x3
	[0171.921] IUnknown:Release (This=0x742960) returned 0x2
	[0171.921] IUnknown:Release (This=0x742640) returned 0x2
	[0171.922] SysStringLen (param_1=0x0) returned 0x0
	[0171.922] IEnumWbemClassObject:Reset (This=0x742960) returned 0x0
	[0171.923] CoTaskMemAlloc (cb=0x4) returned 0x783050
	[0171.923] IEnumWbemClassObject:Next (in: This=0x742960, lTimeout=-1, uCount=0x1, apObjects=0x783050, puReturned=0x28a2098 | out: apObjects=0x783050*=0x7924c0, puReturned=0x28a2098*=0x1) returned 0x0
	[0171.925] CoGetContextToken (in: pToken=0x19c544 | out: pToken=0x19c544) returned 0x0
	[0171.925] CoGetContextToken (in: pToken=0x19c504 | out: pToken=0x19c504) returned 0x0
	[0171.925] WbemLocator:IUnknown:Release (This=0x7488c8) returned 0x1
	[0171.925] IUnknown:Release (This=0x742bb8) returned 0x0
	[0172.093] CoGetContextToken (in: pToken=0x19c544 | out: pToken=0x19c544) returned 0x0
	[0172.093] CoGetContextToken (in: pToken=0x19c504 | out: pToken=0x19c504) returned 0x0
	[0172.093] WbemLocator:IUnknown:Release (This=0x74a4c8) returned 0x1
	[0172.093] IUnknown:Release (This=0x742898) returned 0x0
	[0173.101] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d2b0 | out: ppvObject=0x19d2b0*=0x7924c0) returned 0x0
	[0173.101] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d26c | out: ppvObject=0x19d26c*=0x0) returned 0x80004002
	[0173.101] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d08c | out: ppvObject=0x19d08c*=0x0) returned 0x80004002
	[0173.101] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ce64 | out: ppvObject=0x19ce64*=0x0) returned 0x80004002
	[0173.102] IUnknown:AddRef (This=0x7924c0) returned 0x3
	[0173.102] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cbcc | out: ppvObject=0x19cbcc*=0x0) returned 0x80004002
	[0173.102] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cb7c | out: ppvObject=0x19cb7c*=0x0) returned 0x80004002
	[0173.102] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb88 | out: ppvObject=0x19cb88*=0x7924c4) returned 0x0
	[0173.102] IMarshal:GetUnmarshalClass (in: This=0x7924c4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cb90 | out: pCid=0x19cb90*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0173.102] IUnknown:Release (This=0x7924c4) returned 0x3
	[0173.102] CoGetContextToken (in: pToken=0x19cbe8 | out: pToken=0x19cbe8) returned 0x0
	[0173.102] CoGetContextToken (in: pToken=0x19cff0 | out: pToken=0x19cff0) returned 0x0
	[0173.102] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d080 | out: ppvObject=0x19d080*=0x0) returned 0x80004002
	[0173.102] IUnknown:Release (This=0x7924c0) returned 0x2
	[0173.102] CoGetContextToken (in: pToken=0x19d5c0 | out: pToken=0x19d5c0) returned 0x0
	[0173.102] CoGetContextToken (in: pToken=0x19d520 | out: pToken=0x19d520) returned 0x0
	[0173.102] IUnknown:QueryInterface (in: This=0x7924c0, riid=0x19d5f0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19d5ec | out: ppvObject=0x19d5ec*=0x7924c0) returned 0x0
	[0173.102] IUnknown:AddRef (This=0x7924c0) returned 0x4
	[0173.102] IUnknown:Release (This=0x7924c0) returned 0x3
	[0173.103] IUnknown:Release (This=0x7924c0) returned 0x2
	[0173.103] CoTaskMemFree (pv=0x783050) 
	[0173.103] CoGetContextToken (in: pToken=0x19d928 | out: pToken=0x19d928) returned 0x0
	[0173.103] IUnknown:AddRef (This=0x7924c0) returned 0x3
	[0173.103] IWbemClassObject:Get (in: This=0x7924c0, wszName="__GENUS", lFlags=0, pVal=0x19dc3c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dcbc*=0, plFlavor=0x19dcb8*=0 | out: pVal=0x19dc3c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19dcbc*=3, plFlavor=0x19dcb8*=64) returned 0x0
	[0173.103] IWbemClassObject:Get (in: This=0x7924c0, wszName="__PATH", lFlags=0, pVal=0x19dc20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dca4*=0, plFlavor=0x19dca0*=0 | out: pVal=0x19dc20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x19dca4*=8, plFlavor=0x19dca0*=64) returned 0x0
	[0173.103] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0173.103] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0173.103] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7b4
	[0173.104] SetEvent (hEvent=0x2bc) returned 1
	[0173.104] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19dbf8*=0x7b4, lpdwindex=0x19da14 | out: lpdwindex=0x19da14) returned 0x0
	[0173.110] CoGetContextToken (in: pToken=0x19dac8 | out: pToken=0x19dac8) returned 0x0
	[0173.110] CoGetContextToken (in: pToken=0x19da28 | out: pToken=0x19da28) returned 0x0
	[0173.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcff8, riid=0x19daf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19daf4 | out: ppvObject=0x19daf4*=0x7bcff8) returned 0x0
	[0173.111] WbemDefPath:IUnknown:AddRef (This=0x7bcff8) returned 0x3
	[0173.111] WbemDefPath:IUnknown:Release (This=0x7bcff8) returned 0x2
	[0173.111] WbemDefPath:IWbemPath:SetText (This=0x7bcff8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0173.111] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd068, puCount=0x19dc78 | out: puCount=0x19dc78*=0x2) returned 0x0
	[0173.111] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc74*=0x0, pszText=0x0 | out: puBuffLength=0x19dc74*=0xf, pszText=0x0) returned 0x0
	[0173.111] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc74*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc74*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.111] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd068, puCount=0x19dc44 | out: puCount=0x19dc44*=0x2) returned 0x0
	[0173.111] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc40*=0x0, pszText=0x0 | out: puBuffLength=0x19dc40*=0xf, pszText=0x0) returned 0x0
	[0173.111] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=4, puBuffLength=0x19dc40*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc40*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.111] IWbemClassObject:Get (in: This=0x7924c0, wszName="Name", lFlags=0, pVal=0x19dc40*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a28e8*=0, plFlavor=0x28a28ec*=0 | out: pVal=0x19dc40*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x28a28e8*=8, plFlavor=0x28a28ec*=0) returned 0x0
	[0173.111] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0173.111] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0173.111] IWbemClassObject:Get (in: This=0x7924c0, wszName="Name", lFlags=0, pVal=0x19dc48*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a28e8*=8, plFlavor=0x28a28ec*=0 | out: pVal=0x19dc48*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x28a28e8*=8, plFlavor=0x28a28ec*=0) returned 0x0
	[0173.111] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0173.112] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0173.112] CoGetContextToken (in: pToken=0x19db78 | out: pToken=0x19db78) returned 0x0
	[0173.112] WbemLocator:IUnknown:Release (This=0x749bc8) returned 0x1
	[0173.112] IUnknown:Release (This=0x742960) returned 0x0
	[0173.120] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7b0
	[0173.120] SetEvent (hEvent=0x2bc) returned 1
	[0173.120] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19dc14*=0x7b0, lpdwindex=0x19da34 | out: lpdwindex=0x19da34) returned 0x0
	[0173.123] CoGetContextToken (in: pToken=0x19dae0 | out: pToken=0x19dae0) returned 0x0
	[0173.123] CoGetContextToken (in: pToken=0x19da40 | out: pToken=0x19da40) returned 0x0
	[0173.123] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd5a8, riid=0x19db10*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19db0c | out: ppvObject=0x19db0c*=0x7bd5a8) returned 0x0
	[0173.123] WbemDefPath:IUnknown:AddRef (This=0x7bd5a8) returned 0x3
	[0173.123] WbemDefPath:IUnknown:Release (This=0x7bd5a8) returned 0x2
	[0173.123] WbemDefPath:IWbemPath:SetText (This=0x7bd5a8, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0173.123] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd5a8, puCount=0x19dc90 | out: puCount=0x19dc90*=0x2) returned 0x0
	[0173.123] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc8c*=0x0, pszText=0x0 | out: puBuffLength=0x19dc8c*=0xf, pszText=0x0) returned 0x0
	[0173.124] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc8c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc8c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.124] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd5a8, puCount=0x19dc7c | out: puCount=0x19dc7c*=0x2) returned 0x0
	[0173.124] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc78*=0x0, pszText=0x0 | out: puBuffLength=0x19dc78*=0xf, pszText=0x0) returned 0x0
	[0173.124] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc78*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc78*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.137] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19db30*=0x794, lpdwindex=0x19d9e4 | out: lpdwindex=0x19d9e4) returned 0x0
	[0173.176] CoGetContextToken (in: pToken=0x19d8f0 | out: pToken=0x19d8f0) returned 0x0
	[0173.176] CoGetContextToken (in: pToken=0x19d898 | out: pToken=0x19d898) returned 0x0
	[0173.176] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d878 | out: ppvObject=0x19d878*=0x712148) returned 0x0
	[0173.177] CObjectContext::ContextCallback () returned 0x0
	[0173.181] IUnknown:Release (This=0x712148) returned 0x1
	[0173.181] CoUnmarshalInterface (in: pStm=0x743650, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d8e0 | out: ppv=0x19d8e0*=0x7494c8) returned 0x0
	[0173.182] CoMarshalInterface (pStm=0x743650, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7494c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0173.182] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d784 | out: ppvObject=0x19d784*=0x7494c8) returned 0x0
	[0173.183] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d740 | out: ppvObject=0x19d740*=0x0) returned 0x80004002
	[0173.191] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d55c | out: ppvObject=0x19d55c*=0x0) returned 0x80004002
	[0173.196] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d334 | out: ppvObject=0x19d334*=0x0) returned 0x80004002
	[0173.201] WbemLocator:IUnknown:AddRef (This=0x7494c8) returned 0x3
	[0173.201] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19d09c | out: ppvObject=0x19d09c*=0x0) returned 0x80004002
	[0173.201] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19d04c | out: ppvObject=0x19d04c*=0x0) returned 0x80004002
	[0173.201] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d058 | out: ppvObject=0x19d058*=0x749424) returned 0x0
	[0173.201] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749424, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19d060 | out: pCid=0x19d060*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.201] WbemLocator:IUnknown:Release (This=0x749424) returned 0x3
	[0173.201] CoGetContextToken (in: pToken=0x19d0b8 | out: pToken=0x19d0b8) returned 0x0
	[0173.202] CoGetContextToken (in: pToken=0x19d4c0 | out: pToken=0x19d4c0) returned 0x0
	[0173.202] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d550 | out: ppvObject=0x19d550*=0x7494ac) returned 0x0
	[0173.202] WbemLocator:IRpcOptions:Query (in: This=0x7494ac, pPrx=0x7494c8, dwProperty=2, pdwValue=0x19d578 | out: pdwValue=0x19d578) returned 0x0
	[0173.202] WbemLocator:IUnknown:Release (This=0x7494ac) returned 0x3
	[0173.202] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x2
	[0173.202] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x1
	[0173.202] CoGetContextToken (in: pToken=0x19d830 | out: pToken=0x19d830) returned 0x0
	[0173.202] WbemLocator:IUnknown:AddRef (This=0x7494c8) returned 0x2
	[0173.202] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae8 | out: ppvObject=0x19dae8*=0x7494a4) returned 0x0
	[0173.202] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7494a4, pProxy=0x7494c8, pAuthnSvc=0x19db38, pAuthzSvc=0x19db34, pServerPrincName=0x19db2c, pAuthnLevel=0x19db30, pImpLevel=0x19db20, pAuthInfo=0x19db24, pCapabilites=0x19db28 | out: pAuthnSvc=0x19db38*=0xa, pAuthzSvc=0x19db34*=0x0, pServerPrincName=0x19db2c, pAuthnLevel=0x19db30*=0x6, pImpLevel=0x19db20*=0x2, pAuthInfo=0x19db24, pCapabilites=0x19db28*=0x1) returned 0x0
	[0173.203] WbemLocator:IUnknown:Release (This=0x7494a4) returned 0x2
	[0173.203] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dadc | out: ppvObject=0x19dadc*=0x7494c8) returned 0x0
	[0173.203] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dad8 | out: ppvObject=0x19dad8*=0x7494a4) returned 0x0
	[0173.203] WbemLocator:IClientSecurity:SetBlanket (This=0x7494a4, pProxy=0x7494c8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.203] WbemLocator:IUnknown:Release (This=0x7494a4) returned 0x3
	[0173.203] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x2
	[0173.203] CoTaskMemFree (pv=0x7481a0) 
	[0173.203] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x1
	[0173.203] SysStringLen (param_1=0x0) returned 0x0
	[0173.203] CoGetContextToken (in: pToken=0x19daa0 | out: pToken=0x19daa0) returned 0x0
	[0173.203] CoGetContextToken (in: pToken=0x19da00 | out: pToken=0x19da00) returned 0x0
	[0173.203] WbemLocator:IUnknown:QueryInterface (in: This=0x7494c8, riid=0x19dad0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19dacc | out: ppvObject=0x19dacc*=0x55a5198) returned 0x0
	[0173.207] WbemLocator:IUnknown:AddRef (This=0x55a5198) returned 0x3
	[0173.207] WbemLocator:IUnknown:Release (This=0x55a5198) returned 0x2
	[0173.207] CoGetContextToken (in: pToken=0x19da60 | out: pToken=0x19da60) returned 0x0
	[0173.207] WbemLocator:IUnknown:AddRef (This=0x55a5198) returned 0x3
	[0173.207] WbemLocator:IUnknown:QueryInterface (in: This=0x55a5198, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae8 | out: ppvObject=0x19dae8*=0x7494a4) returned 0x0
	[0173.207] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7494a4, pProxy=0x55a5198, pAuthnSvc=0x19db38, pAuthzSvc=0x19db34, pServerPrincName=0x19db2c, pAuthnLevel=0x19db30, pImpLevel=0x19db20, pAuthInfo=0x19db24, pCapabilites=0x19db28 | out: pAuthnSvc=0x19db38*=0xa, pAuthzSvc=0x19db34*=0x0, pServerPrincName=0x19db2c, pAuthnLevel=0x19db30*=0x6, pImpLevel=0x19db20*=0x2, pAuthInfo=0x19db24, pCapabilites=0x19db28*=0x1) returned 0x0
	[0173.207] WbemLocator:IUnknown:Release (This=0x7494a4) returned 0x3
	[0173.207] WbemLocator:IUnknown:QueryInterface (in: This=0x55a5198, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dadc | out: ppvObject=0x19dadc*=0x7494c8) returned 0x0
	[0173.208] WbemLocator:IUnknown:QueryInterface (in: This=0x55a5198, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dad8 | out: ppvObject=0x19dad8*=0x7494a4) returned 0x0
	[0173.208] WbemLocator:IClientSecurity:SetBlanket (This=0x7494a4, pProxy=0x55a5198, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.208] WbemLocator:IUnknown:Release (This=0x7494a4) returned 0x4
	[0173.208] WbemLocator:IUnknown:Release (This=0x7494c8) returned 0x3
	[0173.208] CoTaskMemFree (pv=0x747f60) 
	[0173.208] WbemLocator:IUnknown:Release (This=0x55a5198) returned 0x2
	[0173.208] SysStringLen (param_1=0x0) returned 0x0
	[0173.208] CoGetContextToken (in: pToken=0x19d9d8 | out: pToken=0x19d9d8) returned 0x0
	[0173.208] WbemLocator:IUnknown:AddRef (This=0x55a5198) returned 0x3
	[0173.208] IWbemServices:ExecQuery (in: This=0x55a5198, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19dbf4 | out: ppEnum=0x19dbf4*=0x7431f8) returned 0x0
	[0173.214] IUnknown:QueryInterface (in: This=0x7431f8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da4c | out: ppvObject=0x19da4c*=0x7431fc) returned 0x0
	[0173.214] IClientSecurity:QueryBlanket (in: This=0x7431fc, pProxy=0x7431f8, pAuthnSvc=0x19da9c, pAuthzSvc=0x19da98, pServerPrincName=0x19da90, pAuthnLevel=0x19da94, pImpLevel=0x19da84, pAuthInfo=0x19da88, pCapabilites=0x19da8c | out: pAuthnSvc=0x19da9c*=0xa, pAuthzSvc=0x19da98*=0x0, pServerPrincName=0x19da90, pAuthnLevel=0x19da94*=0x6, pImpLevel=0x19da84*=0x2, pAuthInfo=0x19da88, pCapabilites=0x19da8c*=0x1) returned 0x0
	[0173.214] IUnknown:Release (This=0x7431fc) returned 0x1
	[0173.214] IUnknown:QueryInterface (in: This=0x7431f8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da40 | out: ppvObject=0x19da40*=0x7488c8) returned 0x0
	[0173.214] IUnknown:QueryInterface (in: This=0x7431f8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da3c | out: ppvObject=0x19da3c*=0x7431fc) returned 0x0
	[0173.215] IClientSecurity:SetBlanket (This=0x7431fc, pProxy=0x7431f8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.264] IUnknown:Release (This=0x7431fc) returned 0x2
	[0173.264] WbemLocator:IUnknown:Release (This=0x7488c8) returned 0x1
	[0173.264] CoTaskMemFree (pv=0x7482c0) 
	[0173.264] IUnknown:QueryInterface (in: This=0x7431f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d638 | out: ppvObject=0x19d638*=0x7488c8) returned 0x0
	[0173.279] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d5f4 | out: ppvObject=0x19d5f4*=0x0) returned 0x80004002
	[0173.291] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d414 | out: ppvObject=0x19d414*=0x0) returned 0x80004002
	[0173.296] IUnknown:QueryInterface (in: This=0x7431f8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d1ec | out: ppvObject=0x19d1ec*=0x0) returned 0x80004002
	[0173.304] WbemLocator:IUnknown:AddRef (This=0x7488c8) returned 0x3
	[0173.304] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cf54 | out: ppvObject=0x19cf54*=0x0) returned 0x80004002
	[0173.304] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cf04 | out: ppvObject=0x19cf04*=0x0) returned 0x80004002
	[0173.305] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf10 | out: ppvObject=0x19cf10*=0x748824) returned 0x0
	[0173.305] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748824, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cf18 | out: pCid=0x19cf18*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.305] WbemLocator:IUnknown:Release (This=0x748824) returned 0x3
	[0173.305] CoGetContextToken (in: pToken=0x19cf70 | out: pToken=0x19cf70) returned 0x0
	[0173.305] CoGetContextToken (in: pToken=0x19d378 | out: pToken=0x19d378) returned 0x0
	[0173.305] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d408 | out: ppvObject=0x19d408*=0x7488ac) returned 0x0
	[0173.305] WbemLocator:IRpcOptions:Query (in: This=0x7488ac, pPrx=0x7488c8, dwProperty=2, pdwValue=0x19d430 | out: pdwValue=0x19d430) returned 0x80004002
	[0173.305] WbemLocator:IUnknown:Release (This=0x7488ac) returned 0x3
	[0173.305] WbemLocator:IUnknown:Release (This=0x7488c8) returned 0x2
	[0173.305] CoGetContextToken (in: pToken=0x19d948 | out: pToken=0x19d948) returned 0x0
	[0173.305] CoGetContextToken (in: pToken=0x19d8a8 | out: pToken=0x19d8a8) returned 0x0
	[0173.333] WbemLocator:IUnknown:QueryInterface (in: This=0x7488c8, riid=0x19d978*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d974 | out: ppvObject=0x19d974*=0x7431f8) returned 0x0
	[0173.333] IUnknown:AddRef (This=0x7431f8) returned 0x4
	[0173.333] IUnknown:Release (This=0x7431f8) returned 0x3
	[0173.333] IUnknown:Release (This=0x7431f8) returned 0x2
	[0173.333] WbemLocator:IUnknown:Release (This=0x55a5198) returned 0x2
	[0173.334] SysStringLen (param_1=0x0) returned 0x0
	[0173.334] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd5a8, puCount=0x19dc40 | out: puCount=0x19dc40*=0x2) returned 0x0
	[0173.334] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc3c*=0x0, pszText=0x0 | out: puBuffLength=0x19dc3c*=0xf, pszText=0x0) returned 0x0
	[0173.334] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc3c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc3c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.334] CoGetContextToken (in: pToken=0x19da90 | out: pToken=0x19da90) returned 0x0
	[0173.334] IUnknown:AddRef (This=0x7431f8) returned 0x3
	[0173.334] IEnumWbemClassObject:Clone (in: This=0x7431f8, ppEnum=0x19dc4c | out: ppEnum=0x19dc4c*=0x7427d0) returned 0x0
	[0173.340] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db10 | out: ppvObject=0x19db10*=0x7427d4) returned 0x0
	[0173.340] IClientSecurity:QueryBlanket (in: This=0x7427d4, pProxy=0x7427d0, pAuthnSvc=0x19db60, pAuthzSvc=0x19db5c, pServerPrincName=0x19db54, pAuthnLevel=0x19db58, pImpLevel=0x19db48, pAuthInfo=0x19db4c, pCapabilites=0x19db50 | out: pAuthnSvc=0x19db60*=0xa, pAuthzSvc=0x19db5c*=0x0, pServerPrincName=0x19db54, pAuthnLevel=0x19db58*=0x6, pImpLevel=0x19db48*=0x2, pAuthInfo=0x19db4c, pCapabilites=0x19db50*=0x1) returned 0x0
	[0173.340] IUnknown:Release (This=0x7427d4) returned 0x1
	[0173.340] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db04 | out: ppvObject=0x19db04*=0x7498c8) returned 0x0
	[0173.340] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db00 | out: ppvObject=0x19db00*=0x7427d4) returned 0x0
	[0173.340] IClientSecurity:SetBlanket (This=0x7427d4, pProxy=0x7427d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.354] IUnknown:Release (This=0x7427d4) returned 0x2
	[0173.354] WbemLocator:IUnknown:Release (This=0x7498c8) returned 0x1
	[0173.354] CoTaskMemFree (pv=0x747de0) 
	[0173.354] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d6ec | out: ppvObject=0x19d6ec*=0x7498c8) returned 0x0
	[0173.355] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d6a8 | out: ppvObject=0x19d6a8*=0x0) returned 0x80004002
	[0173.360] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d4c4 | out: ppvObject=0x19d4c4*=0x0) returned 0x80004002
	[0173.403] IUnknown:QueryInterface (in: This=0x7427d0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d29c | out: ppvObject=0x19d29c*=0x0) returned 0x80004002
	[0173.414] WbemLocator:IUnknown:AddRef (This=0x7498c8) returned 0x3
	[0173.414] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19d004 | out: ppvObject=0x19d004*=0x0) returned 0x80004002
	[0173.414] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cfb4 | out: ppvObject=0x19cfb4*=0x0) returned 0x80004002
	[0173.414] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cfc0 | out: ppvObject=0x19cfc0*=0x749824) returned 0x0
	[0173.414] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749824, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cfc8 | out: pCid=0x19cfc8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.414] WbemLocator:IUnknown:Release (This=0x749824) returned 0x3
	[0173.414] CoGetContextToken (in: pToken=0x19d020 | out: pToken=0x19d020) returned 0x0
	[0173.415] CoGetContextToken (in: pToken=0x19d428 | out: pToken=0x19d428) returned 0x0
	[0173.415] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4b8 | out: ppvObject=0x19d4b8*=0x7498ac) returned 0x0
	[0173.415] WbemLocator:IRpcOptions:Query (in: This=0x7498ac, pPrx=0x7498c8, dwProperty=2, pdwValue=0x19d4e0 | out: pdwValue=0x19d4e0) returned 0x80004002
	[0173.415] WbemLocator:IUnknown:Release (This=0x7498ac) returned 0x3
	[0173.415] WbemLocator:IUnknown:Release (This=0x7498c8) returned 0x2
	[0173.415] CoGetContextToken (in: pToken=0x19da00 | out: pToken=0x19da00) returned 0x0
	[0173.415] CoGetContextToken (in: pToken=0x19d960 | out: pToken=0x19d960) returned 0x0
	[0173.415] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x19da30*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19da2c | out: ppvObject=0x19da2c*=0x7427d0) returned 0x0
	[0173.415] IUnknown:AddRef (This=0x7427d0) returned 0x4
	[0173.415] IUnknown:Release (This=0x7427d0) returned 0x3
	[0173.415] IUnknown:Release (This=0x7427d0) returned 0x2
	[0173.415] IUnknown:Release (This=0x7431f8) returned 0x2
	[0173.415] SysStringLen (param_1=0x0) returned 0x0
	[0173.415] IEnumWbemClassObject:Reset (This=0x7427d0) returned 0x0
	[0173.431] CoTaskMemAlloc (cb=0x4) returned 0x7832b0
	[0173.431] IEnumWbemClassObject:Next (in: This=0x7427d0, lTimeout=-1, uCount=0x1, apObjects=0x7832b0, puReturned=0x28a3a2c | out: apObjects=0x7832b0*=0x791ff8, puReturned=0x28a3a2c*=0x1) returned 0x0
	[0173.447] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d2b0 | out: ppvObject=0x19d2b0*=0x791ff8) returned 0x0
	[0173.447] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d26c | out: ppvObject=0x19d26c*=0x0) returned 0x80004002
	[0173.447] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d08c | out: ppvObject=0x19d08c*=0x0) returned 0x80004002
	[0173.447] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ce64 | out: ppvObject=0x19ce64*=0x0) returned 0x80004002
	[0173.448] IUnknown:AddRef (This=0x791ff8) returned 0x3
	[0173.448] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cbcc | out: ppvObject=0x19cbcc*=0x0) returned 0x80004002
	[0173.448] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cb7c | out: ppvObject=0x19cb7c*=0x0) returned 0x80004002
	[0173.448] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb88 | out: ppvObject=0x19cb88*=0x791ffc) returned 0x0
	[0173.448] IMarshal:GetUnmarshalClass (in: This=0x791ffc, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cb90 | out: pCid=0x19cb90*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0173.448] IUnknown:Release (This=0x791ffc) returned 0x3
	[0173.448] CoGetContextToken (in: pToken=0x19cbe8 | out: pToken=0x19cbe8) returned 0x0
	[0173.448] CoGetContextToken (in: pToken=0x19cff0 | out: pToken=0x19cff0) returned 0x0
	[0173.448] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d080 | out: ppvObject=0x19d080*=0x0) returned 0x80004002
	[0173.448] IUnknown:Release (This=0x791ff8) returned 0x2
	[0173.448] CoGetContextToken (in: pToken=0x19d5c0 | out: pToken=0x19d5c0) returned 0x0
	[0173.448] CoGetContextToken (in: pToken=0x19d520 | out: pToken=0x19d520) returned 0x0
	[0173.448] IUnknown:QueryInterface (in: This=0x791ff8, riid=0x19d5f0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19d5ec | out: ppvObject=0x19d5ec*=0x791ff8) returned 0x0
	[0173.449] IUnknown:AddRef (This=0x791ff8) returned 0x4
	[0173.449] IUnknown:Release (This=0x791ff8) returned 0x3
	[0173.449] IUnknown:Release (This=0x791ff8) returned 0x2
	[0173.449] CoTaskMemFree (pv=0x7832b0) 
	[0173.449] CoGetContextToken (in: pToken=0x19d928 | out: pToken=0x19d928) returned 0x0
	[0173.449] IUnknown:AddRef (This=0x791ff8) returned 0x3
	[0173.449] IWbemClassObject:Get (in: This=0x791ff8, wszName="__GENUS", lFlags=0, pVal=0x19dc3c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dcbc*=0, plFlavor=0x19dcb8*=0 | out: pVal=0x19dc3c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19dcbc*=3, plFlavor=0x19dcb8*=64) returned 0x0
	[0173.449] IWbemClassObject:Get (in: This=0x791ff8, wszName="__PATH", lFlags=0, pVal=0x19dc20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dca4*=0, plFlavor=0x19dca0*=0 | out: pVal=0x19dc20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19dca4*=8, plFlavor=0x19dca0*=64) returned 0x0
	[0173.449] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0173.450] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0173.450] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x790
	[0173.450] SetEvent (hEvent=0x2bc) returned 1
	[0173.450] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19dbf8*=0x790, lpdwindex=0x19da14 | out: lpdwindex=0x19da14) returned 0x0
	[0173.458] CoGetContextToken (in: pToken=0x19dac8 | out: pToken=0x19dac8) returned 0x0
	[0173.458] CoGetContextToken (in: pToken=0x19da28 | out: pToken=0x19da28) returned 0x0
	[0173.458] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd618, riid=0x19daf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19daf4 | out: ppvObject=0x19daf4*=0x7bd618) returned 0x0
	[0173.458] WbemDefPath:IUnknown:AddRef (This=0x7bd618) returned 0x3
	[0173.458] WbemDefPath:IUnknown:Release (This=0x7bd618) returned 0x2
	[0173.458] WbemDefPath:IWbemPath:SetText (This=0x7bd618, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0
	[0173.458] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd5a8, puCount=0x19dc78 | out: puCount=0x19dc78*=0x2) returned 0x0
	[0173.458] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc74*=0x0, pszText=0x0 | out: puBuffLength=0x19dc74*=0xf, pszText=0x0) returned 0x0
	[0173.458] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc74*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc74*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.458] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd5a8, puCount=0x19dc44 | out: puCount=0x19dc44*=0x2) returned 0x0
	[0173.458] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc40*=0x0, pszText=0x0 | out: puBuffLength=0x19dc40*=0xf, pszText=0x0) returned 0x0
	[0173.459] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=4, puBuffLength=0x19dc40*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc40*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.459] IWbemClassObject:Get (in: This=0x791ff8, wszName="Name", lFlags=0, pVal=0x19dc40*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a42a0*=0, plFlavor=0x28a42a4*=0 | out: pVal=0x19dc40*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x28a42a0*=8, plFlavor=0x28a42a4*=0) returned 0x0
	[0173.459] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0173.459] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0173.459] IWbemClassObject:Get (in: This=0x791ff8, wszName="Name", lFlags=0, pVal=0x19dc48*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a42a0*=8, plFlavor=0x28a42a4*=0 | out: pVal=0x19dc48*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x28a42a0*=8, plFlavor=0x28a42a4*=0) returned 0x0
	[0173.459] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0173.459] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0173.459] CoGetContextToken (in: pToken=0x19db78 | out: pToken=0x19db78) returned 0x0
	[0173.459] WbemLocator:IUnknown:Release (This=0x7498c8) returned 0x1
	[0173.459] IUnknown:Release (This=0x7427d0) returned 0x0
	[0173.617] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", nBufferLength=0x105, lpBuffer=0x19d84c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", lpFilePart=0x0) returned 0x44
	[0173.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dca8) returned 1
	[0173.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef"), fInfoLevelId=0x0, lpFileInformation=0x19dd24 | out: lpFileInformation=0x19dd24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xa29d722, ftCreationTime.dwHighDateTime=0x1d83d26, ftLastAccessTime.dwLowDateTime=0xa29d722, ftLastAccessTime.dwHighDateTime=0x1d83d26, ftLastWriteTime.dwLowDateTime=0xa29d722, ftLastWriteTime.dwHighDateTime=0x1d83d26, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0173.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dca4) returned 1
	[0173.690] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef\\msgid.dat", nBufferLength=0x105, lpBuffer=0x19ef78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef\\msgid.dat", lpFilePart=0x0) returned 0x4e
	[0173.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3d8) returned 1
	[0173.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef\\msgid.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef\\msgid.dat"), fInfoLevelId=0x0, lpFileInformation=0x19f454 | out: lpFileInformation=0x19f454*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0173.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3d4) returned 1
	[0173.696] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x78c
	[0173.696] SetEvent (hEvent=0x2bc) returned 1
	[0173.696] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19dc1c*=0x78c, lpdwindex=0x19da3c | out: lpdwindex=0x19da3c) returned 0x0
	[0173.700] CoGetContextToken (in: pToken=0x19dae8 | out: pToken=0x19dae8) returned 0x0
	[0173.700] CoGetContextToken (in: pToken=0x19da48 | out: pToken=0x19da48) returned 0x0
	[0173.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd688, riid=0x19db18*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19db14 | out: ppvObject=0x19db14*=0x7bd688) returned 0x0
	[0173.700] WbemDefPath:IUnknown:AddRef (This=0x7bd688) returned 0x3
	[0173.700] WbemDefPath:IUnknown:Release (This=0x7bd688) returned 0x2
	[0173.701] WbemDefPath:IWbemPath:SetText (This=0x7bd688, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0173.701] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd688, puCount=0x19dc98 | out: puCount=0x19dc98*=0x2) returned 0x0
	[0173.701] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc94*=0x0, pszText=0x0 | out: puBuffLength=0x19dc94*=0xf, pszText=0x0) returned 0x0
	[0173.701] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc94*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc94*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.701] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd688, puCount=0x19dc84 | out: puCount=0x19dc84*=0x2) returned 0x0
	[0173.701] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc80*=0x0, pszText=0x0 | out: puBuffLength=0x19dc80*=0xf, pszText=0x0) returned 0x0
	[0173.701] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc80*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc80*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.748] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19db38*=0x5c4, lpdwindex=0x19d9ec | out: lpdwindex=0x19d9ec) returned 0x0
	[0173.825] CoGetContextToken (in: pToken=0x19d8f8 | out: pToken=0x19d8f8) returned 0x0
	[0173.825] CoGetContextToken (in: pToken=0x19d8a0 | out: pToken=0x19d8a0) returned 0x0
	[0173.825] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d880 | out: ppvObject=0x19d880*=0x712148) returned 0x0
	[0173.825] CObjectContext::ContextCallback () returned 0x0
	[0173.828] IUnknown:Release (This=0x712148) returned 0x1
	[0173.836] CoUnmarshalInterface (in: pStm=0x743570, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d8e8 | out: ppv=0x19d8e8*=0x748cc8) returned 0x0
	[0173.836] CoMarshalInterface (pStm=0x743570, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x748cc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0173.836] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d78c | out: ppvObject=0x19d78c*=0x748cc8) returned 0x0
	[0173.837] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d748 | out: ppvObject=0x19d748*=0x0) returned 0x80004002
	[0173.837] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d564 | out: ppvObject=0x19d564*=0x0) returned 0x80004002
	[0173.837] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d33c | out: ppvObject=0x19d33c*=0x0) returned 0x80004002
	[0173.838] WbemLocator:IUnknown:AddRef (This=0x748cc8) returned 0x3
	[0173.838] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19d0a4 | out: ppvObject=0x19d0a4*=0x0) returned 0x80004002
	[0173.838] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19d054 | out: ppvObject=0x19d054*=0x0) returned 0x80004002
	[0173.838] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d060 | out: ppvObject=0x19d060*=0x748c24) returned 0x0
	[0173.838] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748c24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19d068 | out: pCid=0x19d068*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.838] WbemLocator:IUnknown:Release (This=0x748c24) returned 0x3
	[0173.838] CoGetContextToken (in: pToken=0x19d0c0 | out: pToken=0x19d0c0) returned 0x0
	[0173.838] CoGetContextToken (in: pToken=0x19d4c8 | out: pToken=0x19d4c8) returned 0x0
	[0173.839] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d558 | out: ppvObject=0x19d558*=0x748cac) returned 0x0
	[0173.839] WbemLocator:IRpcOptions:Query (in: This=0x748cac, pPrx=0x748cc8, dwProperty=2, pdwValue=0x19d580 | out: pdwValue=0x19d580) returned 0x0
	[0173.839] WbemLocator:IUnknown:Release (This=0x748cac) returned 0x3
	[0173.839] WbemLocator:IUnknown:Release (This=0x748cc8) returned 0x2
	[0173.839] WbemLocator:IUnknown:Release (This=0x748cc8) returned 0x1
	[0173.839] CoGetContextToken (in: pToken=0x19d838 | out: pToken=0x19d838) returned 0x0
	[0173.839] WbemLocator:IUnknown:AddRef (This=0x748cc8) returned 0x2
	[0173.839] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19daf0 | out: ppvObject=0x19daf0*=0x748ca4) returned 0x0
	[0173.839] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x748ca4, pProxy=0x748cc8, pAuthnSvc=0x19db40, pAuthzSvc=0x19db3c, pServerPrincName=0x19db34, pAuthnLevel=0x19db38, pImpLevel=0x19db28, pAuthInfo=0x19db2c, pCapabilites=0x19db30 | out: pAuthnSvc=0x19db40*=0xa, pAuthzSvc=0x19db3c*=0x0, pServerPrincName=0x19db34, pAuthnLevel=0x19db38*=0x6, pImpLevel=0x19db28*=0x2, pAuthInfo=0x19db2c, pCapabilites=0x19db30*=0x1) returned 0x0
	[0173.839] WbemLocator:IUnknown:Release (This=0x748ca4) returned 0x2
	[0173.839] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae4 | out: ppvObject=0x19dae4*=0x748cc8) returned 0x0
	[0173.839] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae0 | out: ppvObject=0x19dae0*=0x748ca4) returned 0x0
	[0173.840] WbemLocator:IClientSecurity:SetBlanket (This=0x748ca4, pProxy=0x748cc8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.840] WbemLocator:IUnknown:Release (This=0x748ca4) returned 0x3
	[0173.840] WbemLocator:IUnknown:Release (This=0x748cc8) returned 0x2
	[0173.840] CoTaskMemFree (pv=0x747de0) 
	[0173.840] WbemLocator:IUnknown:Release (This=0x748cc8) returned 0x1
	[0173.840] SysStringLen (param_1=0x0) returned 0x0
	[0173.840] CoGetContextToken (in: pToken=0x19daa8 | out: pToken=0x19daa8) returned 0x0
	[0173.840] CoGetContextToken (in: pToken=0x19da08 | out: pToken=0x19da08) returned 0x0
	[0173.840] WbemLocator:IUnknown:QueryInterface (in: This=0x748cc8, riid=0x19dad8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19dad4 | out: ppvObject=0x19dad4*=0x55a52d8) returned 0x0
	[0173.841] WbemLocator:IUnknown:AddRef (This=0x55a52d8) returned 0x3
	[0173.841] WbemLocator:IUnknown:Release (This=0x55a52d8) returned 0x2
	[0173.841] CoGetContextToken (in: pToken=0x19da68 | out: pToken=0x19da68) returned 0x0
	[0173.841] WbemLocator:IUnknown:AddRef (This=0x55a52d8) returned 0x3
	[0173.841] WbemLocator:IUnknown:QueryInterface (in: This=0x55a52d8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19daf0 | out: ppvObject=0x19daf0*=0x748ca4) returned 0x0
	[0173.842] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x748ca4, pProxy=0x55a52d8, pAuthnSvc=0x19db40, pAuthzSvc=0x19db3c, pServerPrincName=0x19db34, pAuthnLevel=0x19db38, pImpLevel=0x19db28, pAuthInfo=0x19db2c, pCapabilites=0x19db30 | out: pAuthnSvc=0x19db40*=0xa, pAuthzSvc=0x19db3c*=0x0, pServerPrincName=0x19db34, pAuthnLevel=0x19db38*=0x6, pImpLevel=0x19db28*=0x2, pAuthInfo=0x19db2c, pCapabilites=0x19db30*=0x1) returned 0x0
	[0173.842] WbemLocator:IUnknown:Release (This=0x748ca4) returned 0x3
	[0173.842] WbemLocator:IUnknown:QueryInterface (in: This=0x55a52d8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae4 | out: ppvObject=0x19dae4*=0x748cc8) returned 0x0
	[0173.842] WbemLocator:IUnknown:QueryInterface (in: This=0x55a52d8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae0 | out: ppvObject=0x19dae0*=0x748ca4) returned 0x0
	[0173.842] WbemLocator:IClientSecurity:SetBlanket (This=0x748ca4, pProxy=0x55a52d8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.842] WbemLocator:IUnknown:Release (This=0x748ca4) returned 0x4
	[0173.842] WbemLocator:IUnknown:Release (This=0x748cc8) returned 0x3
	[0173.842] CoTaskMemFree (pv=0x7480b0) 
	[0173.842] WbemLocator:IUnknown:Release (This=0x55a52d8) returned 0x2
	[0173.842] SysStringLen (param_1=0x0) returned 0x0
	[0173.842] CoGetContextToken (in: pToken=0x19d9f0 | out: pToken=0x19d9f0) returned 0x0
	[0173.842] WbemLocator:IUnknown:AddRef (This=0x55a52d8) returned 0x3
	[0173.842] IWbemServices:ExecQuery (in: This=0x55a52d8, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x19dbfc | out: ppEnum=0x19dbfc*=0x742578) returned 0x0
	[0173.872] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da60 | out: ppvObject=0x19da60*=0x74257c) returned 0x0
	[0173.873] IClientSecurity:QueryBlanket (in: This=0x74257c, pProxy=0x742578, pAuthnSvc=0x19dab0, pAuthzSvc=0x19daac, pServerPrincName=0x19daa4, pAuthnLevel=0x19daa8, pImpLevel=0x19da98, pAuthInfo=0x19da9c, pCapabilites=0x19daa0 | out: pAuthnSvc=0x19dab0*=0xa, pAuthzSvc=0x19daac*=0x0, pServerPrincName=0x19daa4, pAuthnLevel=0x19daa8*=0x6, pImpLevel=0x19da98*=0x2, pAuthInfo=0x19da9c, pCapabilites=0x19daa0*=0x1) returned 0x0
	[0173.873] IUnknown:Release (This=0x74257c) returned 0x1
	[0173.873] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da54 | out: ppvObject=0x19da54*=0x748ac8) returned 0x0
	[0173.873] IUnknown:QueryInterface (in: This=0x742578, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da50 | out: ppvObject=0x19da50*=0x74257c) returned 0x0
	[0173.873] IClientSecurity:SetBlanket (This=0x74257c, pProxy=0x742578, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.875] IUnknown:Release (This=0x74257c) returned 0x2
	[0173.875] WbemLocator:IUnknown:Release (This=0x748ac8) returned 0x1
	[0173.875] CoTaskMemFree (pv=0x748410) 
	[0173.875] IUnknown:QueryInterface (in: This=0x742578, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d64c | out: ppvObject=0x19d64c*=0x748ac8) returned 0x0
	[0173.876] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d608 | out: ppvObject=0x19d608*=0x0) returned 0x80004002
	[0173.876] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d424 | out: ppvObject=0x19d424*=0x0) returned 0x80004002
	[0173.877] IUnknown:QueryInterface (in: This=0x742578, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d1fc | out: ppvObject=0x19d1fc*=0x0) returned 0x80004002
	[0173.877] WbemLocator:IUnknown:AddRef (This=0x748ac8) returned 0x3
	[0173.877] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cf64 | out: ppvObject=0x19cf64*=0x0) returned 0x80004002
	[0173.877] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cf14 | out: ppvObject=0x19cf14*=0x0) returned 0x80004002
	[0173.877] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf20 | out: ppvObject=0x19cf20*=0x748a24) returned 0x0
	[0173.877] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748a24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cf28 | out: pCid=0x19cf28*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.878] WbemLocator:IUnknown:Release (This=0x748a24) returned 0x3
	[0173.878] CoGetContextToken (in: pToken=0x19cf80 | out: pToken=0x19cf80) returned 0x0
	[0173.878] CoGetContextToken (in: pToken=0x19d388 | out: pToken=0x19d388) returned 0x0
	[0173.878] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d418 | out: ppvObject=0x19d418*=0x748aac) returned 0x0
	[0173.878] WbemLocator:IRpcOptions:Query (in: This=0x748aac, pPrx=0x748ac8, dwProperty=2, pdwValue=0x19d440 | out: pdwValue=0x19d440) returned 0x80004002
	[0173.878] WbemLocator:IUnknown:Release (This=0x748aac) returned 0x3
	[0173.878] WbemLocator:IUnknown:Release (This=0x748ac8) returned 0x2
	[0173.878] CoGetContextToken (in: pToken=0x19d960 | out: pToken=0x19d960) returned 0x0
	[0173.878] CoGetContextToken (in: pToken=0x19d8c0 | out: pToken=0x19d8c0) returned 0x0
	[0173.878] WbemLocator:IUnknown:QueryInterface (in: This=0x748ac8, riid=0x19d990*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d98c | out: ppvObject=0x19d98c*=0x742578) returned 0x0
	[0173.878] IUnknown:AddRef (This=0x742578) returned 0x4
	[0173.878] IUnknown:Release (This=0x742578) returned 0x3
	[0173.878] IUnknown:Release (This=0x742578) returned 0x2
	[0173.878] WbemLocator:IUnknown:Release (This=0x55a52d8) returned 0x2
	[0173.878] SysStringLen (param_1=0x0) returned 0x0
	[0173.878] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd688, puCount=0x19dc48 | out: puCount=0x19dc48*=0x2) returned 0x0
	[0173.878] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc44*=0x0, pszText=0x0 | out: puBuffLength=0x19dc44*=0xf, pszText=0x0) returned 0x0
	[0173.879] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc44*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc44*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.879] CoGetContextToken (in: pToken=0x19da98 | out: pToken=0x19da98) returned 0x0
	[0173.879] IUnknown:AddRef (This=0x742578) returned 0x3
	[0173.879] IEnumWbemClassObject:Clone (in: This=0x742578, ppEnum=0x19dc54 | out: ppEnum=0x19dc54*=0x742e10) returned 0x0
	[0173.881] IUnknown:QueryInterface (in: This=0x742e10, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db18 | out: ppvObject=0x19db18*=0x742e14) returned 0x0
	[0173.881] IClientSecurity:QueryBlanket (in: This=0x742e14, pProxy=0x742e10, pAuthnSvc=0x19db68, pAuthzSvc=0x19db64, pServerPrincName=0x19db5c, pAuthnLevel=0x19db60, pImpLevel=0x19db50, pAuthInfo=0x19db54, pCapabilites=0x19db58 | out: pAuthnSvc=0x19db68*=0xa, pAuthzSvc=0x19db64*=0x0, pServerPrincName=0x19db5c, pAuthnLevel=0x19db60*=0x6, pImpLevel=0x19db50*=0x2, pAuthInfo=0x19db54, pCapabilites=0x19db58*=0x1) returned 0x0
	[0173.881] IUnknown:Release (This=0x742e14) returned 0x1
	[0173.881] IUnknown:QueryInterface (in: This=0x742e10, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db0c | out: ppvObject=0x19db0c*=0x74a0c8) returned 0x0
	[0173.881] IUnknown:QueryInterface (in: This=0x742e10, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db08 | out: ppvObject=0x19db08*=0x742e14) returned 0x0
	[0173.881] IClientSecurity:SetBlanket (This=0x742e14, pProxy=0x742e10, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.883] IUnknown:Release (This=0x742e14) returned 0x2
	[0173.883] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x1
	[0173.883] CoTaskMemFree (pv=0x748410) 
	[0173.883] IUnknown:QueryInterface (in: This=0x742e10, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d6f4 | out: ppvObject=0x19d6f4*=0x74a0c8) returned 0x0
	[0173.883] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d6b0 | out: ppvObject=0x19d6b0*=0x0) returned 0x80004002
	[0173.884] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d4cc | out: ppvObject=0x19d4cc*=0x0) returned 0x80004002
	[0173.884] IUnknown:QueryInterface (in: This=0x742e10, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d2a4 | out: ppvObject=0x19d2a4*=0x0) returned 0x80004002
	[0173.885] WbemLocator:IUnknown:AddRef (This=0x74a0c8) returned 0x3
	[0173.885] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19d00c | out: ppvObject=0x19d00c*=0x0) returned 0x80004002
	[0173.885] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cfbc | out: ppvObject=0x19cfbc*=0x0) returned 0x80004002
	[0173.885] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cfc8 | out: ppvObject=0x19cfc8*=0x74a024) returned 0x0
	[0173.885] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74a024, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cfd0 | out: pCid=0x19cfd0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.885] WbemLocator:IUnknown:Release (This=0x74a024) returned 0x3
	[0173.885] CoGetContextToken (in: pToken=0x19d028 | out: pToken=0x19d028) returned 0x0
	[0173.886] CoGetContextToken (in: pToken=0x19d430 | out: pToken=0x19d430) returned 0x0
	[0173.886] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4c0 | out: ppvObject=0x19d4c0*=0x74a0ac) returned 0x0
	[0173.887] WbemLocator:IRpcOptions:Query (in: This=0x74a0ac, pPrx=0x74a0c8, dwProperty=2, pdwValue=0x19d4e8 | out: pdwValue=0x19d4e8) returned 0x80004002
	[0173.887] WbemLocator:IUnknown:Release (This=0x74a0ac) returned 0x3
	[0173.887] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x2
	[0173.887] CoGetContextToken (in: pToken=0x19da08 | out: pToken=0x19da08) returned 0x0
	[0173.887] CoGetContextToken (in: pToken=0x19d968 | out: pToken=0x19d968) returned 0x0
	[0173.887] WbemLocator:IUnknown:QueryInterface (in: This=0x74a0c8, riid=0x19da38*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19da34 | out: ppvObject=0x19da34*=0x742e10) returned 0x0
	[0173.887] IUnknown:AddRef (This=0x742e10) returned 0x4
	[0173.887] IUnknown:Release (This=0x742e10) returned 0x3
	[0173.887] IUnknown:Release (This=0x742e10) returned 0x2
	[0173.887] IUnknown:Release (This=0x742578) returned 0x2
	[0173.887] SysStringLen (param_1=0x0) returned 0x0
	[0173.887] IEnumWbemClassObject:Reset (This=0x742e10) returned 0x0
	[0173.888] CoTaskMemAlloc (cb=0x4) returned 0x7832e0
	[0173.888] IEnumWbemClassObject:Next (in: This=0x742e10, lTimeout=-1, uCount=0x1, apObjects=0x7832e0, puReturned=0x28a5f30 | out: apObjects=0x7832e0*=0x7911a0, puReturned=0x28a5f30*=0x1) returned 0x0
	[0175.068] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d2b8 | out: ppvObject=0x19d2b8*=0x7911a0) returned 0x0
	[0175.069] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d274 | out: ppvObject=0x19d274*=0x0) returned 0x80004002
	[0175.069] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d094 | out: ppvObject=0x19d094*=0x0) returned 0x80004002
	[0175.069] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ce6c | out: ppvObject=0x19ce6c*=0x0) returned 0x80004002
	[0175.069] IUnknown:AddRef (This=0x7911a0) returned 0x3
	[0175.069] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cbd4 | out: ppvObject=0x19cbd4*=0x0) returned 0x80004002
	[0175.070] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cb84 | out: ppvObject=0x19cb84*=0x0) returned 0x80004002
	[0175.070] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb90 | out: ppvObject=0x19cb90*=0x7911a4) returned 0x0
	[0175.070] IMarshal:GetUnmarshalClass (in: This=0x7911a4, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cb98 | out: pCid=0x19cb98*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0175.070] IUnknown:Release (This=0x7911a4) returned 0x3
	[0175.070] CoGetContextToken (in: pToken=0x19cbf0 | out: pToken=0x19cbf0) returned 0x0
	[0175.070] CoGetContextToken (in: pToken=0x19cff8 | out: pToken=0x19cff8) returned 0x0
	[0175.070] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d088 | out: ppvObject=0x19d088*=0x0) returned 0x80004002
	[0175.070] IUnknown:Release (This=0x7911a0) returned 0x2
	[0175.071] CoGetContextToken (in: pToken=0x19d5c8 | out: pToken=0x19d5c8) returned 0x0
	[0175.071] CoGetContextToken (in: pToken=0x19d528 | out: pToken=0x19d528) returned 0x0
	[0175.071] IUnknown:QueryInterface (in: This=0x7911a0, riid=0x19d5f8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19d5f4 | out: ppvObject=0x19d5f4*=0x7911a0) returned 0x0
	[0175.071] IUnknown:AddRef (This=0x7911a0) returned 0x4
	[0175.071] IUnknown:Release (This=0x7911a0) returned 0x3
	[0175.071] IUnknown:Release (This=0x7911a0) returned 0x2
	[0175.071] CoTaskMemFree (pv=0x7832e0) 
	[0175.071] CoGetContextToken (in: pToken=0x19d930 | out: pToken=0x19d930) returned 0x0
	[0175.071] IUnknown:AddRef (This=0x7911a0) returned 0x3
	[0175.072] IWbemClassObject:Get (in: This=0x7911a0, wszName="__GENUS", lFlags=0, pVal=0x19dc44*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dcc4*=0, plFlavor=0x19dcc0*=0 | out: pVal=0x19dc44*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19dcc4*=3, plFlavor=0x19dcc0*=64) returned 0x0
	[0175.072] IWbemClassObject:Get (in: This=0x7911a0, wszName="__PATH", lFlags=0, pVal=0x19dc28*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dcac*=0, plFlavor=0x19dca8*=0 | out: pVal=0x19dc28*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x19dcac*=8, plFlavor=0x19dca8*=64) returned 0x0
	[0175.072] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0175.072] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0175.073] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5d4
	[0175.073] SetEvent (hEvent=0x2bc) returned 1
	[0175.074] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19dc00*=0x5d4, lpdwindex=0x19da1c | out: lpdwindex=0x19da1c) returned 0x0
	[0175.085] CoGetContextToken (in: pToken=0x19dad0 | out: pToken=0x19dad0) returned 0x0
	[0175.085] CoGetContextToken (in: pToken=0x19da30 | out: pToken=0x19da30) returned 0x0
	[0175.086] WbemDefPath:IUnknown:QueryInterface (in: This=0x795ef8, riid=0x19db00*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19dafc | out: ppvObject=0x19dafc*=0x795ef8) returned 0x0
	[0175.086] WbemDefPath:IUnknown:AddRef (This=0x795ef8) returned 0x3
	[0175.086] WbemDefPath:IUnknown:Release (This=0x795ef8) returned 0x2
	[0175.086] WbemDefPath:IWbemPath:SetText (This=0x795ef8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0175.086] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd688, puCount=0x19dc80 | out: puCount=0x19dc80*=0x2) returned 0x0
	[0175.086] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc7c*=0x0, pszText=0x0 | out: puBuffLength=0x19dc7c*=0xf, pszText=0x0) returned 0x0
	[0175.086] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc7c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc7c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0175.087] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd688, puCount=0x19dc4c | out: puCount=0x19dc4c*=0x2) returned 0x0
	[0175.087] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc48*=0x0, pszText=0x0 | out: puBuffLength=0x19dc48*=0xf, pszText=0x0) returned 0x0
	[0175.087] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=4, puBuffLength=0x19dc48*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc48*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0175.087] IWbemClassObject:Get (in: This=0x7911a0, wszName="Name", lFlags=0, pVal=0x19dc48*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a6780*=0, plFlavor=0x28a6784*=0 | out: pVal=0x19dc48*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x28a6780*=8, plFlavor=0x28a6784*=0) returned 0x0
	[0175.087] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0175.087] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0175.087] IWbemClassObject:Get (in: This=0x7911a0, wszName="Name", lFlags=0, pVal=0x19dc50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a6780*=8, plFlavor=0x28a6784*=0 | out: pVal=0x19dc50*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x28a6780*=8, plFlavor=0x28a6784*=0) returned 0x0
	[0175.087] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0175.087] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0175.087] CoGetContextToken (in: pToken=0x19db80 | out: pToken=0x19db80) returned 0x0
	[0175.087] WbemLocator:IUnknown:Release (This=0x74a0c8) returned 0x1
	[0175.087] IUnknown:Release (This=0x742e10) returned 0x0
	[0175.114] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5b4
	[0175.114] SetEvent (hEvent=0x2bc) returned 1
	[0175.114] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19dc1c*=0x5b4, lpdwindex=0x19da3c | out: lpdwindex=0x19da3c) returned 0x0
	[0175.117] CoGetContextToken (in: pToken=0x19dae8 | out: pToken=0x19dae8) returned 0x0
	[0175.118] CoGetContextToken (in: pToken=0x19da48 | out: pToken=0x19da48) returned 0x0
	[0175.118] WbemDefPath:IUnknown:QueryInterface (in: This=0x796128, riid=0x19db18*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19db14 | out: ppvObject=0x19db14*=0x796128) returned 0x0
	[0175.118] WbemDefPath:IUnknown:AddRef (This=0x796128) returned 0x3
	[0175.118] WbemDefPath:IUnknown:Release (This=0x796128) returned 0x2
	[0175.118] WbemDefPath:IWbemPath:SetText (This=0x796128, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0175.118] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x796128, puCount=0x19dc98 | out: puCount=0x19dc98*=0x2) returned 0x0
	[0175.118] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc94*=0x0, pszText=0x0 | out: puBuffLength=0x19dc94*=0xf, pszText=0x0) returned 0x0
	[0175.118] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc94*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc94*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0175.118] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x796128, puCount=0x19dc84 | out: puCount=0x19dc84*=0x2) returned 0x0
	[0175.118] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc80*=0x0, pszText=0x0 | out: puBuffLength=0x19dc80*=0xf, pszText=0x0) returned 0x0
	[0175.118] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc80*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc80*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0175.131] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19db38*=0x598, lpdwindex=0x19d9ec | out: lpdwindex=0x19d9ec) returned 0x0
	[0175.171] CoGetContextToken (in: pToken=0x19d8f8 | out: pToken=0x19d8f8) returned 0x0
	[0175.171] CoGetContextToken (in: pToken=0x19d8a0 | out: pToken=0x19d8a0) returned 0x0
	[0175.171] IUnknown:QueryInterface (in: This=0x712138, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d880 | out: ppvObject=0x19d880*=0x712148) returned 0x0
	[0175.171] CObjectContext::ContextCallback () returned 0x0
	[0175.175] IUnknown:Release (This=0x712148) returned 0x1
	[0175.175] CoUnmarshalInterface (in: pStm=0x7435f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d8e8 | out: ppv=0x19d8e8*=0x748dc8) returned 0x0
	[0175.176] CoMarshalInterface (pStm=0x7435f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x748dc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0175.176] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d78c | out: ppvObject=0x19d78c*=0x748dc8) returned 0x0
	[0175.177] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d748 | out: ppvObject=0x19d748*=0x0) returned 0x80004002
	[0175.177] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d564 | out: ppvObject=0x19d564*=0x0) returned 0x80004002
	[0175.178] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d33c | out: ppvObject=0x19d33c*=0x0) returned 0x80004002
	[0175.179] WbemLocator:IUnknown:AddRef (This=0x748dc8) returned 0x3
	[0175.179] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19d0a4 | out: ppvObject=0x19d0a4*=0x0) returned 0x80004002
	[0175.179] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19d054 | out: ppvObject=0x19d054*=0x0) returned 0x80004002
	[0175.179] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d060 | out: ppvObject=0x19d060*=0x748d24) returned 0x0
	[0175.179] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x748d24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19d068 | out: pCid=0x19d068*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0175.179] WbemLocator:IUnknown:Release (This=0x748d24) returned 0x3
	[0175.179] CoGetContextToken (in: pToken=0x19d0c0 | out: pToken=0x19d0c0) returned 0x0
	[0175.179] CoGetContextToken (in: pToken=0x19d4c8 | out: pToken=0x19d4c8) returned 0x0
	[0175.179] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d558 | out: ppvObject=0x19d558*=0x748dac) returned 0x0
	[0175.179] WbemLocator:IRpcOptions:Query (in: This=0x748dac, pPrx=0x748dc8, dwProperty=2, pdwValue=0x19d580 | out: pdwValue=0x19d580) returned 0x0
	[0175.179] WbemLocator:IUnknown:Release (This=0x748dac) returned 0x3
	[0175.179] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x2
	[0175.179] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x1
	[0175.180] CoGetContextToken (in: pToken=0x19d838 | out: pToken=0x19d838) returned 0x0
	[0175.180] WbemLocator:IUnknown:AddRef (This=0x748dc8) returned 0x2
	[0175.180] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19daf0 | out: ppvObject=0x19daf0*=0x748da4) returned 0x0
	[0175.180] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x748da4, pProxy=0x748dc8, pAuthnSvc=0x19db40, pAuthzSvc=0x19db3c, pServerPrincName=0x19db34, pAuthnLevel=0x19db38, pImpLevel=0x19db28, pAuthInfo=0x19db2c, pCapabilites=0x19db30 | out: pAuthnSvc=0x19db40*=0xa, pAuthzSvc=0x19db3c*=0x0, pServerPrincName=0x19db34, pAuthnLevel=0x19db38*=0x6, pImpLevel=0x19db28*=0x2, pAuthInfo=0x19db2c, pCapabilites=0x19db30*=0x1) returned 0x0
	[0175.180] WbemLocator:IUnknown:Release (This=0x748da4) returned 0x2
	[0175.180] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae4 | out: ppvObject=0x19dae4*=0x748dc8) returned 0x0
	[0175.180] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae0 | out: ppvObject=0x19dae0*=0x748da4) returned 0x0
	[0175.180] WbemLocator:IClientSecurity:SetBlanket (This=0x748da4, pProxy=0x748dc8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0175.180] WbemLocator:IUnknown:Release (This=0x748da4) returned 0x3
	[0175.180] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x2
	[0175.180] CoTaskMemFree (pv=0x71c170) 
	[0175.181] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x1
	[0175.181] SysStringLen (param_1=0x0) returned 0x0
	[0175.181] CoGetContextToken (in: pToken=0x19daa8 | out: pToken=0x19daa8) returned 0x0
	[0175.181] CoGetContextToken (in: pToken=0x19da08 | out: pToken=0x19da08) returned 0x0
	[0175.181] WbemLocator:IUnknown:QueryInterface (in: This=0x748dc8, riid=0x19dad8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19dad4 | out: ppvObject=0x19dad4*=0x55a4dd8) returned 0x0
	[0175.181] WbemLocator:IUnknown:AddRef (This=0x55a4dd8) returned 0x3
	[0175.181] WbemLocator:IUnknown:Release (This=0x55a4dd8) returned 0x2
	[0175.181] CoGetContextToken (in: pToken=0x19da68 | out: pToken=0x19da68) returned 0x0
	[0175.181] WbemLocator:IUnknown:AddRef (This=0x55a4dd8) returned 0x3
	[0175.182] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4dd8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19daf0 | out: ppvObject=0x19daf0*=0x748da4) returned 0x0
	[0175.182] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x748da4, pProxy=0x55a4dd8, pAuthnSvc=0x19db40, pAuthzSvc=0x19db3c, pServerPrincName=0x19db34, pAuthnLevel=0x19db38, pImpLevel=0x19db28, pAuthInfo=0x19db2c, pCapabilites=0x19db30 | out: pAuthnSvc=0x19db40*=0xa, pAuthzSvc=0x19db3c*=0x0, pServerPrincName=0x19db34, pAuthnLevel=0x19db38*=0x6, pImpLevel=0x19db28*=0x2, pAuthInfo=0x19db2c, pCapabilites=0x19db30*=0x1) returned 0x0
	[0175.182] WbemLocator:IUnknown:Release (This=0x748da4) returned 0x3
	[0175.182] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4dd8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae4 | out: ppvObject=0x19dae4*=0x748dc8) returned 0x0
	[0175.182] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4dd8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae0 | out: ppvObject=0x19dae0*=0x748da4) returned 0x0
	[0175.182] WbemLocator:IClientSecurity:SetBlanket (This=0x748da4, pProxy=0x55a4dd8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0175.182] WbemLocator:IUnknown:Release (This=0x748da4) returned 0x4
	[0175.182] WbemLocator:IUnknown:Release (This=0x748dc8) returned 0x3
	[0175.183] CoTaskMemFree (pv=0x748470) 
	[0175.183] WbemLocator:IUnknown:Release (This=0x55a4dd8) returned 0x2
	[0175.183] SysStringLen (param_1=0x0) returned 0x0
	[0175.183] CoGetContextToken (in: pToken=0x19d9e0 | out: pToken=0x19d9e0) returned 0x0
	[0175.183] WbemLocator:IUnknown:AddRef (This=0x55a4dd8) returned 0x3
	[0175.183] IWbemServices:ExecQuery (in: This=0x55a4dd8, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19dbfc | out: ppEnum=0x19dbfc*=0x743130) returned 0x0
	[0175.242] IUnknown:QueryInterface (in: This=0x743130, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da54 | out: ppvObject=0x19da54*=0x743134) returned 0x0
	[0175.242] IClientSecurity:QueryBlanket (in: This=0x743134, pProxy=0x743130, pAuthnSvc=0x19daa4, pAuthzSvc=0x19daa0, pServerPrincName=0x19da98, pAuthnLevel=0x19da9c, pImpLevel=0x19da8c, pAuthInfo=0x19da90, pCapabilites=0x19da94 | out: pAuthnSvc=0x19daa4*=0xa, pAuthzSvc=0x19daa0*=0x0, pServerPrincName=0x19da98, pAuthnLevel=0x19da9c*=0x6, pImpLevel=0x19da8c*=0x2, pAuthInfo=0x19da90, pCapabilites=0x19da94*=0x1) returned 0x0
	[0175.242] IUnknown:Release (This=0x743134) returned 0x1
	[0175.242] IUnknown:QueryInterface (in: This=0x743130, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da48 | out: ppvObject=0x19da48*=0x74a2c8) returned 0x0
	[0175.242] IUnknown:QueryInterface (in: This=0x743130, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da44 | out: ppvObject=0x19da44*=0x743134) returned 0x0
	[0175.243] IClientSecurity:SetBlanket (This=0x743134, pProxy=0x743130, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0175.256] IUnknown:Release (This=0x743134) returned 0x2
	[0175.256] WbemLocator:IUnknown:Release (This=0x74a2c8) returned 0x1
	[0175.256] CoTaskMemFree (pv=0x7480b0) 
	[0175.256] IUnknown:QueryInterface (in: This=0x743130, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d640 | out: ppvObject=0x19d640*=0x74a2c8) returned 0x0
	[0175.257] WbemLocator:IUnknown:QueryInterface (in: This=0x74a2c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d5fc | out: ppvObject=0x19d5fc*=0x0) returned 0x80004002
	[0175.260] WbemLocator:IUnknown:QueryInterface (in: This=0x74a2c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d41c | out: ppvObject=0x19d41c*=0x0) returned 0x80004002
	[0175.262] IUnknown:QueryInterface (in: This=0x743130, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d1f4 | out: ppvObject=0x19d1f4*=0x0) returned 0x80004002
	[0175.265] WbemLocator:IUnknown:AddRef (This=0x74a2c8) returned 0x3
	[0175.265] WbemLocator:IUnknown:QueryInterface (in: This=0x74a2c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cf5c | out: ppvObject=0x19cf5c*=0x0) returned 0x80004002
	[0175.265] WbemLocator:IUnknown:QueryInterface (in: This=0x74a2c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cf0c | out: ppvObject=0x19cf0c*=0x0) returned 0x80004002
	[0175.265] WbemLocator:IUnknown:QueryInterface (in: This=0x74a2c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf18 | out: ppvObject=0x19cf18*=0x74a224) returned 0x0
	[0175.265] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74a224, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cf20 | out: pCid=0x19cf20*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0175.265] WbemLocator:IUnknown:Release (This=0x74a224) returned 0x3
	[0175.265] CoGetContextToken (in: pToken=0x19cf78 | out: pToken=0x19cf78) returned 0x0
	[0175.265] CoGetContextToken (in: pToken=0x19d380 | out: pToken=0x19d380) returned 0x0
	[0175.265] WbemLocator:IUnknown:QueryInterface (in: This=0x74a2c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d410 | out: ppvObject=0x19d410*=0x74a2ac) returned 0x0
	[0175.266] WbemLocator:IRpcOptions:Query (in: This=0x74a2ac, pPrx=0x74a2c8, dwProperty=2, pdwValue=0x19d438 | out: pdwValue=0x19d438) returned 0x80004002
	[0175.266] WbemLocator:IUnknown:Release (This=0x74a2ac) returned 0x3
	[0175.266] WbemLocator:IUnknown:Release (This=0x74a2c8) returned 0x2
	[0175.266] CoGetContextToken (in: pToken=0x19d950 | out: pToken=0x19d950) returned 0x0
	[0175.266] CoGetContextToken (in: pToken=0x19d8b0 | out: pToken=0x19d8b0) returned 0x0
	[0175.266] WbemLocator:IUnknown:QueryInterface (in: This=0x74a2c8, riid=0x19d980*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d97c | out: ppvObject=0x19d97c*=0x743130) returned 0x0
	[0175.266] IUnknown:AddRef (This=0x743130) returned 0x4
	[0175.266] IUnknown:Release (This=0x743130) returned 0x3
	[0175.266] IUnknown:Release (This=0x743130) returned 0x2
	[0175.266] WbemLocator:IUnknown:Release (This=0x55a4dd8) returned 0x2
	[0175.266] SysStringLen (param_1=0x0) returned 0x0
	[0175.266] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x796128, puCount=0x19dc48 | out: puCount=0x19dc48*=0x2) returned 0x0
	[0175.266] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc44*=0x0, pszText=0x0 | out: puBuffLength=0x19dc44*=0xf, pszText=0x0) returned 0x0
	[0175.266] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc44*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc44*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0175.266] CoGetContextToken (in: pToken=0x19da98 | out: pToken=0x19da98) returned 0x0
	[0175.267] IUnknown:AddRef (This=0x743130) returned 0x3
	[0175.267] IEnumWbemClassObject:Clone (in: This=0x743130, ppEnum=0x19dc54 | out: ppEnum=0x19dc54*=0x742708) returned 0x0
	[0175.271] IUnknown:QueryInterface (in: This=0x742708, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db18 | out: ppvObject=0x19db18*=0x74270c) returned 0x0
	[0175.272] IClientSecurity:QueryBlanket (in: This=0x74270c, pProxy=0x742708, pAuthnSvc=0x19db68, pAuthzSvc=0x19db64, pServerPrincName=0x19db5c, pAuthnLevel=0x19db60, pImpLevel=0x19db50, pAuthInfo=0x19db54, pCapabilites=0x19db58 | out: pAuthnSvc=0x19db68*=0xa, pAuthzSvc=0x19db64*=0x0, pServerPrincName=0x19db5c, pAuthnLevel=0x19db60*=0x6, pImpLevel=0x19db50*=0x2, pAuthInfo=0x19db54, pCapabilites=0x19db58*=0x1) returned 0x0
	[0175.272] IUnknown:Release (This=0x74270c) returned 0x1
	[0175.272] IUnknown:QueryInterface (in: This=0x742708, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db0c | out: ppvObject=0x19db0c*=0x7490c8) returned 0x0
	[0175.272] IUnknown:QueryInterface (in: This=0x742708, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19db08 | out: ppvObject=0x19db08*=0x74270c) returned 0x0
	[0175.272] IClientSecurity:SetBlanket (This=0x74270c, pProxy=0x742708, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0175.283] IUnknown:Release (This=0x74270c) returned 0x2
	[0175.283] WbemLocator:IUnknown:Release (This=0x7490c8) returned 0x1
	[0175.283] CoTaskMemFree (pv=0x71c170) 
	[0175.284] IUnknown:QueryInterface (in: This=0x742708, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d6f4 | out: ppvObject=0x19d6f4*=0x7490c8) returned 0x0
	[0175.284] WbemLocator:IUnknown:QueryInterface (in: This=0x7490c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d6b0 | out: ppvObject=0x19d6b0*=0x0) returned 0x80004002
	[0175.288] WbemLocator:IUnknown:QueryInterface (in: This=0x7490c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d4cc | out: ppvObject=0x19d4cc*=0x0) returned 0x80004002
	[0175.295] IUnknown:QueryInterface (in: This=0x742708, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d2a4 | out: ppvObject=0x19d2a4*=0x0) returned 0x80004002
	[0175.338] WbemLocator:IUnknown:AddRef (This=0x7490c8) returned 0x3
	[0175.339] WbemLocator:IUnknown:QueryInterface (in: This=0x7490c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19d00c | out: ppvObject=0x19d00c*=0x0) returned 0x80004002
	[0175.339] WbemLocator:IUnknown:QueryInterface (in: This=0x7490c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cfbc | out: ppvObject=0x19cfbc*=0x0) returned 0x80004002
	[0175.339] WbemLocator:IUnknown:QueryInterface (in: This=0x7490c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cfc8 | out: ppvObject=0x19cfc8*=0x749024) returned 0x0
	[0175.339] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749024, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cfd0 | out: pCid=0x19cfd0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0175.339] WbemLocator:IUnknown:Release (This=0x749024) returned 0x3
	[0175.339] CoGetContextToken (in: pToken=0x19d028 | out: pToken=0x19d028) returned 0x0
	[0175.339] CoGetContextToken (in: pToken=0x19d430 | out: pToken=0x19d430) returned 0x0
	[0175.339] WbemLocator:IUnknown:QueryInterface (in: This=0x7490c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d4c0 | out: ppvObject=0x19d4c0*=0x7490ac) returned 0x0
	[0175.340] WbemLocator:IRpcOptions:Query (in: This=0x7490ac, pPrx=0x7490c8, dwProperty=2, pdwValue=0x19d4e8 | out: pdwValue=0x19d4e8) returned 0x80004002
	[0175.340] WbemLocator:IUnknown:Release (This=0x7490ac) returned 0x3
	[0175.340] WbemLocator:IUnknown:Release (This=0x7490c8) returned 0x2
	[0175.340] CoGetContextToken (in: pToken=0x19da08 | out: pToken=0x19da08) returned 0x0
	[0175.340] CoGetContextToken (in: pToken=0x19d968 | out: pToken=0x19d968) returned 0x0
	[0175.340] WbemLocator:IUnknown:QueryInterface (in: This=0x7490c8, riid=0x19da38*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19da34 | out: ppvObject=0x19da34*=0x742708) returned 0x0
	[0175.340] IUnknown:AddRef (This=0x742708) returned 0x4
	[0175.340] IUnknown:Release (This=0x742708) returned 0x3
	[0175.340] IUnknown:Release (This=0x742708) returned 0x2
	[0175.340] IUnknown:Release (This=0x743130) returned 0x2
	[0175.340] SysStringLen (param_1=0x0) returned 0x0
	[0175.340] IEnumWbemClassObject:Reset (This=0x742708) returned 0x0
	[0175.346] CoTaskMemAlloc (cb=0x4) returned 0x754968
	[0175.346] IEnumWbemClassObject:Next (in: This=0x742708, lTimeout=-1, uCount=0x1, apObjects=0x754968, puReturned=0x28a78c4 | out: apObjects=0x754968*=0x792658, puReturned=0x28a78c4*=0x1) returned 0x0
	[0175.432] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d2b8 | out: ppvObject=0x19d2b8*=0x792658) returned 0x0
	[0175.432] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d274 | out: ppvObject=0x19d274*=0x0) returned 0x80004002
	[0175.432] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d094 | out: ppvObject=0x19d094*=0x0) returned 0x80004002
	[0175.432] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ce6c | out: ppvObject=0x19ce6c*=0x0) returned 0x80004002
	[0175.432] IUnknown:AddRef (This=0x792658) returned 0x3
	[0175.432] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cbd4 | out: ppvObject=0x19cbd4*=0x0) returned 0x80004002
	[0175.432] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cb84 | out: ppvObject=0x19cb84*=0x0) returned 0x80004002
	[0175.433] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb90 | out: ppvObject=0x19cb90*=0x79265c) returned 0x0
	[0175.433] IMarshal:GetUnmarshalClass (in: This=0x79265c, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cb98 | out: pCid=0x19cb98*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0175.433] IUnknown:Release (This=0x79265c) returned 0x3
	[0175.433] CoGetContextToken (in: pToken=0x19cbf0 | out: pToken=0x19cbf0) returned 0x0
	[0175.433] CoGetContextToken (in: pToken=0x19cff8 | out: pToken=0x19cff8) returned 0x0
	[0175.436] IUnknown:QueryInterface (in: This=0x792658, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d088 | out: ppvObject=0x19d088*=0x0) returned 0x80004002
	[0175.436] IUnknown:Release (This=0x792658) returned 0x2
	[0175.436] CoGetContextToken (in: pToken=0x19d5c8 | out: pToken=0x19d5c8) returned 0x0
	[0175.436] CoGetContextToken (in: pToken=0x19d528 | out: pToken=0x19d528) returned 0x0
	[0175.436] IUnknown:QueryInterface (in: This=0x792658, riid=0x19d5f8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19d5f4 | out: ppvObject=0x19d5f4*=0x792658) returned 0x0
	[0175.436] IUnknown:AddRef (This=0x792658) returned 0x4
	[0175.436] IUnknown:Release (This=0x792658) returned 0x3
	[0175.436] IUnknown:Release (This=0x792658) returned 0x2
	[0175.436] CoTaskMemFree (pv=0x754968) 
	[0175.437] CoGetContextToken (in: pToken=0x19d930 | out: pToken=0x19d930) returned 0x0
	[0175.437] IUnknown:AddRef (This=0x792658) returned 0x3
	[0175.437] IWbemClassObject:Get (in: This=0x792658, wszName="__GENUS", lFlags=0, pVal=0x19dc44*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dcc4*=0, plFlavor=0x19dcc0*=0 | out: pVal=0x19dc44*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19dcc4*=3, plFlavor=0x19dcc0*=64) returned 0x0
	[0175.437] IWbemClassObject:Get (in: This=0x792658, wszName="__PATH", lFlags=0, pVal=0x19dc28*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dcac*=0, plFlavor=0x19dca8*=0 | out: pVal=0x19dc28*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19dcac*=8, plFlavor=0x19dca8*=64) returned 0x0
	[0175.437] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0175.437] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0175.437] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x594
	[0175.438] SetEvent (hEvent=0x2bc) returned 1
	[0175.438] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x19dc00*=0x594, lpdwindex=0x19da1c | out: lpdwindex=0x19da1c) returned 0x0
	[0175.449] CoGetContextToken (in: pToken=0x19dad0 | out: pToken=0x19dad0) returned 0x0
	[0175.449] CoGetContextToken (in: pToken=0x19da30 | out: pToken=0x19da30) returned 0x0
	[0175.449] WbemDefPath:IUnknown:QueryInterface (in: This=0x796198, riid=0x19db00*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19dafc | out: ppvObject=0x19dafc*=0x796198) returned 0x0
	[0175.450] WbemDefPath:IUnknown:AddRef (This=0x796198) returned 0x3
	[0175.450] WbemDefPath:IUnknown:Release (This=0x796198) returned 0x2
	[0175.450] WbemDefPath:IWbemPath:SetText (This=0x796198, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0
	[0175.450] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x796128, puCount=0x19dc80 | out: puCount=0x19dc80*=0x2) returned 0x0
	[0175.450] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc7c*=0x0, pszText=0x0 | out: puBuffLength=0x19dc7c*=0xf, pszText=0x0) returned 0x0
	[0175.450] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc7c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc7c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0175.450] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x796128, puCount=0x19dc4c | out: puCount=0x19dc4c*=0x2) returned 0x0
	[0175.450] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc48*=0x0, pszText=0x0 | out: puBuffLength=0x19dc48*=0xf, pszText=0x0) returned 0x0
	[0175.450] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=4, puBuffLength=0x19dc48*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc48*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0175.450] IWbemClassObject:Get (in: This=0x792658, wszName="Name", lFlags=0, pVal=0x19dc48*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a8138*=0, plFlavor=0x28a813c*=0 | out: pVal=0x19dc48*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x28a8138*=8, plFlavor=0x28a813c*=0) returned 0x0
	[0175.451] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0175.451] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0175.451] IWbemClassObject:Get (in: This=0x792658, wszName="Name", lFlags=0, pVal=0x19dc50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28a8138*=8, plFlavor=0x28a813c*=0 | out: pVal=0x19dc50*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="NVIDIA GeForce GTX 1080 Ti", varVal2=0x0), pType=0x28a8138*=8, plFlavor=0x28a813c*=0) returned 0x0
	[0175.451] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0175.451] SysStringByteLen (bstr="NVIDIA GeForce GTX 1080 Ti") returned 0x34
	[0175.451] CoGetContextToken (in: pToken=0x19db80 | out: pToken=0x19db80) returned 0x0
	[0175.451] WbemLocator:IUnknown:Release (This=0x7490c8) returned 0x1
	[0175.451] IUnknown:Release (This=0x742708) returned 0x0
	[0175.472] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", nBufferLength=0x105, lpBuffer=0x19d854, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef", lpFilePart=0x0) returned 0x44
	[0175.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dcb0) returned 1
	[0175.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\2f89e0a0b985a2e55d1e4557151ce6ef" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\2f89e0a0b985a2e55d1e4557151ce6ef"), fInfoLevelId=0x0, lpFileInformation=0x19dd2c | out: lpFileInformation=0x19dd2c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xa29d722, ftCreationTime.dwHighDateTime=0x1d83d26, ftLastAccessTime.dwLowDateTime=0xa29d722, ftLastAccessTime.dwHighDateTime=0x1d83d26, ftLastWriteTime.dwLowDateTime=0xa29d722, ftLastWriteTime.dwHighDateTime=0x1d83d26, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dcac) returned 1
	[0175.489] QueryPerformanceCounter (in: lpPerformanceCount=0x19f3f0 | out: lpPerformanceCount=0x19f3f0*=1221778207536) returned 1
	[0175.489] SetEvent (hEvent=0x420) returned 1
	[0175.490] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f204*=0x4b8, lpdwindex=0x19f024 | out: lpdwindex=0x19f024) returned 0x80010115
	[0175.490] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f1e4*=0x4a8, lpdwindex=0x19f004 | out: lpdwindex=0x19f004) returned 0x80010115
	[0175.491] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f1e4*=0x4b0, lpdwindex=0x19f004 | out: lpdwindex=0x19f004) returned 0x80010115
	[0175.491] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f238*=0x4d8, lpdwindex=0x19f054 | out: lpdwindex=0x19f054) returned 0x80010115
	[0175.491] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f238*=0x4e0, lpdwindex=0x19f054 | out: lpdwindex=0x19f054) returned 0x80010115
	[0175.498] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f238*=0x4e8, lpdwindex=0x19f054 | out: lpdwindex=0x19f054) returned 0x80010115
	[0175.500] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x590
	[0175.501] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x58c
	[0175.501] GetAddrInfoW (in: pNodeName="api.telegram.org", pServiceName=0x0, pHints=0x19f138*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x19f0e0 | out: ppResult=0x19f0e0*=0x765fd8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="api.telegram.org", ai_addr=0x55a0950*(sa_family=2, sin_port=0x0, sin_addr="149.154.167.220"), ai_next=0x0)) returned 0
	[0175.896] FreeAddrInfoW (pAddrInfo=0x765fd8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="api.telegram.org", ai_addr=0x55a0950*(sa_family=2, sin_port=0x0, sin_addr="149.154.167.220"), ai_next=0x0)) 
	[0175.897] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f080*=0x580, lpdwindex=0x19ee9c | out: lpdwindex=0x19ee9c) returned 0x80010115
	[0175.897] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19f080*=0x588, lpdwindex=0x19ee9c | out: lpdwindex=0x19ee9c) returned 0x80010115
	[0175.898] WSAConnect (in: s=0x590, name=0x28ba9f4*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0175.922] closesocket (s=0x58c) returned 0
	[0176.043] EnumerateSecurityPackagesW (in: pcPackages=0x19f088, ppPackageInfo=0x19f01c | out: pcPackages=0x19f088, ppPackageInfo=0x19f01c) returned 0x0
	[0176.059] FreeContextBuffer (in: pvContextBuffer=0x7c8598 | out: pvContextBuffer=0x7c8598) returned 0x0
	[0176.068] GetCurrentProcess () returned 0xffffffff
	[0176.068] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ee68 | out: TokenHandle=0x19ee68*=0x2dc) returned 1
	[0176.070] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x28baf78, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x19eebc, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x28bc470, ptsExpiry=0x19ee40 | out: phCredential=0x28bc470, ptsExpiry=0x19ee40) returned 0x0
	[0177.272] InitializeSecurityContextW (in: phCredential=0x19ee80, phContext=0x0, pTargetName=0x28baa48, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x28bc664, pOutput=0x28bc5fc, pfContextAttr=0x28baf4c, ptsExpiry=0x19ee78 | out: phNewContext=0x28bc664, pOutput=0x28bc5fc, pfContextAttr=0x28baf4c, ptsExpiry=0x19ee78) returned 0x90312
	[0177.274] FreeContextBuffer (in: pvContextBuffer=0x768238 | out: pvContextBuffer=0x768238) returned 0x0
	[0177.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0177.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="GetCurrentPackageId", cchWideChar=19, lpMultiByteStr=0x19eec8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentPackageIdA`Ï\x9ej­\x19\x91A «Tlhö\x19", lpUsedDefaultChar=0x0) returned 19
	[0177.372] GetProcAddress (hModule=0x75600000, lpProcName="GetCurrentPackageId") returned 0x7553ded0
	[0177.373] GetCurrentPackageId () returned 0x3d54
	[0177.375] send (s=0x590, buf=0x28bc678*, len=184, flags=0) returned 184
	[0177.379] recv (in: s=0x590, buf=0x28bc678, len=5, flags=0 | out: buf=0x28bc678*) returned 5
	[0177.403] recv (in: s=0x590, buf=0x28bc67d, len=69, flags=0 | out: buf=0x28bc67d*) returned 69
	[0177.404] InitializeSecurityContextW (in: phCredential=0x19ede4, phContext=0x19ee70, pTargetName=0x28baa48, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x28bca20, Reserved2=0x0, phNewContext=0x28bc664, pOutput=0x28bca34, pfContextAttr=0x28baf4c, ptsExpiry=0x19eddc | out: phNewContext=0x28bc664, pOutput=0x28bca34, pfContextAttr=0x28baf4c, ptsExpiry=0x19eddc) returned 0x90312
	[0177.406] recv (in: s=0x590, buf=0x28bcac4, len=5, flags=0 | out: buf=0x28bcac4*) returned 5
	[0177.406] recv (in: s=0x590, buf=0x28bcadd, len=5166, flags=0 | out: buf=0x28bcadd*) returned 5166
	[0177.406] InitializeSecurityContextW (in: phCredential=0x19ed4c, phContext=0x19edd8, pTargetName=0x28baa48, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x28bdf7c, Reserved2=0x0, phNewContext=0x28bc664, pOutput=0x28bdf90, pfContextAttr=0x28baf4c, ptsExpiry=0x19ed44 | out: phNewContext=0x28bc664, pOutput=0x28bdf90, pfContextAttr=0x28baf4c, ptsExpiry=0x19ed44) returned 0x90312
	[0177.411] recv (in: s=0x590, buf=0x28be020, len=5, flags=0 | out: buf=0x28be020*) returned 5
	[0177.411] recv (in: s=0x590, buf=0x28be039, len=333, flags=0 | out: buf=0x28be039*) returned 333
	[0177.411] InitializeSecurityContextW (in: phCredential=0x19ecb4, phContext=0x19ed40, pTargetName=0x28baa48, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x28be1f8, Reserved2=0x0, phNewContext=0x28bc664, pOutput=0x28be20c, pfContextAttr=0x28baf4c, ptsExpiry=0x19ecac | out: phNewContext=0x28bc664, pOutput=0x28be20c, pfContextAttr=0x28baf4c, ptsExpiry=0x19ecac) returned 0x90312
	[0177.411] recv (in: s=0x590, buf=0x28be29c, len=5, flags=0 | out: buf=0x28be29c*) returned 5
	[0177.412] recv (in: s=0x590, buf=0x28be2b5, len=4, flags=0 | out: buf=0x28be2b5*) returned 4
	[0177.412] InitializeSecurityContextW (in: phCredential=0x19ec1c, phContext=0x19eca8, pTargetName=0x28baa48, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x28be32c, Reserved2=0x0, phNewContext=0x28bc664, pOutput=0x28be340, pfContextAttr=0x28baf4c, ptsExpiry=0x19ec14 | out: phNewContext=0x28bc664, pOutput=0x28be340, pfContextAttr=0x28baf4c, ptsExpiry=0x19ec14) returned 0x90312
	[0177.492] FreeContextBuffer (in: pvContextBuffer=0x719ac0 | out: pvContextBuffer=0x719ac0) returned 0x0
	[0177.492] send (s=0x590, buf=0x28be3bc*, len=126, flags=0) returned 126
	[0177.493] recv (in: s=0x590, buf=0x28be3bc, len=5, flags=0 | out: buf=0x28be3bc*) returned 5
	[0177.518] recv (in: s=0x590, buf=0x28be461, len=218, flags=0 | out: buf=0x28be461*) returned 218
	[0177.518] InitializeSecurityContextW (in: phCredential=0x19eb84, phContext=0x19ec10, pTargetName=0x28baa48, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x28be5ac, Reserved2=0x0, phNewContext=0x28bc664, pOutput=0x28be5c0, pfContextAttr=0x28baf4c, ptsExpiry=0x19eb7c | out: phNewContext=0x28bc664, pOutput=0x28be5c0, pfContextAttr=0x28baf4c, ptsExpiry=0x19eb7c) returned 0x90312
	[0177.519] recv (in: s=0x590, buf=0x28be650, len=5, flags=0 | out: buf=0x28be650*) returned 5
	[0177.519] recv (in: s=0x590, buf=0x28be669, len=1, flags=0 | out: buf=0x28be669*) returned 1
	[0177.519] InitializeSecurityContextW (in: phCredential=0x19eaec, phContext=0x19eb78, pTargetName=0x28baa48, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x28be6dc, Reserved2=0x0, phNewContext=0x28bc664, pOutput=0x28be6f0, pfContextAttr=0x28baf4c, ptsExpiry=0x19eae4 | out: phNewContext=0x28bc664, pOutput=0x28be6f0, pfContextAttr=0x28baf4c, ptsExpiry=0x19eae4) returned 0x90312
	[0177.520] recv (in: s=0x590, buf=0x28be780, len=5, flags=0 | out: buf=0x28be780*) returned 5
	[0177.520] recv (in: s=0x590, buf=0x28be799, len=40, flags=0 | out: buf=0x28be799*) returned 40
	[0177.520] InitializeSecurityContextW (in: phCredential=0x19ea54, phContext=0x19eae0, pTargetName=0x28baa48, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x28be834, Reserved2=0x0, phNewContext=0x28bc664, pOutput=0x28be848, pfContextAttr=0x28baf4c, ptsExpiry=0x19ea4c | out: phNewContext=0x28bc664, pOutput=0x28be848, pfContextAttr=0x28baf4c, ptsExpiry=0x19ea4c) returned 0x0
	[0178.215] QueryContextAttributesW (in: phContext=0x28bc664, ulAttribute=0x4, pBuffer=0x28be8f4 | out: pBuffer=0x28be8f4) returned 0x0
	[0178.215] QueryContextAttributesW (in: phContext=0x28bc664, ulAttribute=0x5a, pBuffer=0x28be94c | out: pBuffer=0x28be94c) returned 0x0
	[0178.224] QueryContextAttributesW (in: phContext=0x28bc664, ulAttribute=0x53, pBuffer=0x28bec00 | out: pBuffer=0x28bec00) returned 0x0
	[0178.230] CertDuplicateCertificateContext (pCertContext=0x55a4d28) returned 0x55a4d28
	[0178.231] CertDuplicateStore (hCertStore=0x721870) returned 0x721870
	[0178.231] CertEnumCertificatesInStore (hCertStore=0x721870, pPrevCertContext=0x0) returned 0x55a4fa8
	[0178.232] CertDuplicateCertificateContext (pCertContext=0x55a4fa8) returned 0x55a4fa8
	[0178.232] CertEnumCertificatesInStore (hCertStore=0x721870, pPrevCertContext=0x55a4fa8) returned 0x55a4f08
	[0178.232] CertDuplicateCertificateContext (pCertContext=0x55a4f08) returned 0x55a4f08
	[0178.232] CertEnumCertificatesInStore (hCertStore=0x721870, pPrevCertContext=0x55a4f08) returned 0x55a4d78
	[0178.232] CertDuplicateCertificateContext (pCertContext=0x55a4d78) returned 0x55a4d78
	[0178.232] CertEnumCertificatesInStore (hCertStore=0x721870, pPrevCertContext=0x55a4d78) returned 0x55a4d28
	[0178.232] CertDuplicateCertificateContext (pCertContext=0x55a4d28) returned 0x55a4d28
	[0178.232] CertEnumCertificatesInStore (hCertStore=0x721870, pPrevCertContext=0x55a4d28) returned 0x0
	[0178.233] CertCloseStore (hCertStore=0x721870, dwFlags=0x0) returned 1
	[0178.233] CertFreeCertificateContext (pCertContext=0x55a4d28) returned 1
	[0178.255] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x721618
	[0178.258] CertAddCRLLinkToStore (in: hCertStore=0x721618, pCrlContext=0x55a4fa8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0178.260] CertAddCRLLinkToStore (in: hCertStore=0x721618, pCrlContext=0x55a4f08, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0178.260] CertAddCRLLinkToStore (in: hCertStore=0x721618, pCrlContext=0x55a4d78, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0178.261] CertAddCRLLinkToStore (in: hCertStore=0x721618, pCrlContext=0x55a4d28, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0178.268] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x55a4d28, pTime=0x19ea60, hAdditionalStore=0x721618, pChainPara=0x19e9a0, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x19e994 | out: ppChainContext=0x19e994) returned 1
	[0178.279] CertDuplicateCertificateChain (pChainContext=0x7854b0) returned 0x7854b0
	[0178.280] CertDuplicateCertificateContext (pCertContext=0x55a4d28) returned 0x55a4d28
	[0178.280] CertDuplicateCertificateContext (pCertContext=0x55a5458) returned 0x55a5458
	[0178.280] CertDuplicateCertificateContext (pCertContext=0x55a5368) returned 0x55a5368
	[0178.280] CertDuplicateCertificateContext (pCertContext=0x55a3658) returned 0x55a3658
	[0178.281] CertFreeCertificateChain (pChainContext=0x7854b0) 
	[0178.281] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x7854b0, pPolicyPara=0x19eb40, pPolicyStatus=0x19eb2c | out: pPolicyStatus=0x19eb2c) returned 1
	[0178.282] SetLastError (dwErrCode=0x0) 
	[0178.284] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x7854b0, pPolicyPara=0x19ebac, pPolicyStatus=0x19eb54 | out: pPolicyStatus=0x19eb54) returned 1
	[0178.295] CertFreeCertificateChain (pChainContext=0x7854b0) 
	[0178.295] CertFreeCertificateContext (pCertContext=0x55a4d28) returned 1
	[0178.297] CoTaskMemAlloc (cb=0x210) returned 0x785438
	[0178.297] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x785438, nSize=0x106 | out: lpBuffer="") returned 0x0
	[0178.297] CoTaskMemFree (pv=0x785438) 
	[0178.297] CoTaskMemAlloc (cb=0x210) returned 0x785438
	[0178.297] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x785438, nSize=0x106 | out: lpBuffer="") returned 0x0
	[0178.297] CoTaskMemFree (pv=0x785438) 
	[0178.297] CoTaskMemAlloc (cb=0x210) returned 0x785438
	[0178.298] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x785438, nSize=0x106 | out: lpBuffer="") returned 0x0
	[0178.298] CoTaskMemFree (pv=0x785438) 
	[0178.298] CoTaskMemAlloc (cb=0x210) returned 0x785438
	[0178.298] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x785438, nSize=0x106 | out: lpBuffer="") returned 0x0
	[0178.298] CoTaskMemFree (pv=0x785438) 
	[0178.299] EncryptMessage (in: phContext=0x28bc664, fQOP=0x0, pMessage=0x28c7308, MessageSeqNo=0x0 | out: pMessage=0x28c7308) returned 0x0
	[0178.299] send (s=0x590, buf=0x28c5de0*, len=150, flags=0) returned 150
	[0178.300] setsockopt (s=0x590, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0178.301] recv (in: s=0x590, buf=0x28d35a0, len=5, flags=0 | out: buf=0x28d35a0*) returned 5
	[0178.318] recv (in: s=0x590, buf=0x28d35a5, len=434, flags=0 | out: buf=0x28d35a5*) returned 434
	[0178.318] DecryptMessage (in: phContext=0x28bc664, pMessage=0x28d7660, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x28d7660, pfQOP=0x0) returned 0x0
	[0178.338] setsockopt (s=0x590, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0

Thread:
	id = 9
	os_tid = 0xce8


Thread:
	id = 10
	os_tid = 0xd24


Thread:
	id = 11
	os_tid = 0x464

	[0119.499] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0119.499] RoInitialize () returned 0x1
	[0119.499] RoUninitialize () returned 0x0
	[0171.568] CoGetContextToken (in: pToken=0xeffc30 | out: pToken=0xeffc30) returned 0x0
	[0171.568] CoGetContextToken (in: pToken=0xeffbb8 | out: pToken=0xeffbb8) returned 0x0
	[0171.568] WbemLocator:IUnknown:Release (This=0x72df70) returned 0x1
	[0171.568] WbemLocator:IUnknown:Release (This=0x72df70) returned 0x0
	[0171.568] CoGetContextToken (in: pToken=0xeffbb8 | out: pToken=0xeffbb8) returned 0x0
	[0171.568] WbemLocator:IUnknown:Release (This=0x702c40) returned 0x1
	[0171.568] WbemLocator:IUnknown:Release (This=0x702c40) returned 0x0
	[0171.568] CoGetContextToken (in: pToken=0xeffbb8 | out: pToken=0xeffbb8) returned 0x0
	[0171.568] WbemLocator:IUnknown:Release (This=0x754808) returned 0x1
	[0171.568] WbemLocator:IUnknown:Release (This=0x754808) returned 0x0
	[0171.568] CoGetContextToken (in: pToken=0xeffbb8 | out: pToken=0xeffbb8) returned 0x0
	[0171.568] WbemLocator:IUnknown:Release (This=0x754818) returned 0x1
	[0171.568] WbemLocator:IUnknown:Release (This=0x754818) returned 0x0
	[0171.568] CoGetContextToken (in: pToken=0xeffbb8 | out: pToken=0xeffbb8) returned 0x0
	[0171.568] WbemLocator:IUnknown:Release (This=0x754958) returned 0x1
	[0171.568] WbemLocator:IUnknown:Release (This=0x754958) returned 0x0
	[0171.568] CoGetContextToken (in: pToken=0xeffbb8 | out: pToken=0xeffbb8) returned 0x0
	[0171.568] WbemLocator:IUnknown:Release (This=0x782fe0) returned 0x1
	[0171.568] WbemLocator:IUnknown:Release (This=0x782fe0) returned 0x0
	[0171.568] CoGetContextToken (in: pToken=0xeffbb8 | out: pToken=0xeffbb8) returned 0x0
	[0171.568] WbemLocator:IUnknown:Release (This=0x783020) returned 0x1
	[0171.568] WbemLocator:IUnknown:Release (This=0x783020) returned 0x0
	[0171.569] CoGetContextToken (in: pToken=0xeffc30 | out: pToken=0xeffc30) returned 0x0
	[0171.569] IUnknown:QueryInterface (in: This=0x712080, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xeffbd8 | out: ppvObject=0xeffbd8*=0x712090) returned 0x0
	[0171.569] CObjectContext::ContextCallback () returned 0x0
	[0171.756] IUnknown:Release (This=0x712090) returned 0x1
	[0171.760] IUnknown:Release (This=0x7202c8) returned 0x0
	[0171.760] CoGetContextToken (in: pToken=0xeffa50 | out: pToken=0xeffa50) returned 0x0
	[0171.760] IUnknown:QueryInterface (in: This=0x712080, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xeff9f8 | out: ppvObject=0xeff9f8*=0x712090) returned 0x0
	[0171.761] CObjectContext::ContextCallback () returned 0x0
	[0171.789] IUnknown:Release (This=0x712090) returned 0x1
	[0171.789] CoGetContextToken (in: pToken=0xeffa50 | out: pToken=0xeffa50) returned 0x0
	[0171.789] IUnknown:QueryInterface (in: This=0x712080, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xeff9f8 | out: ppvObject=0xeff9f8*=0x712090) returned 0x0
	[0171.790] CObjectContext::ContextCallback () returned 0x0
	[0171.807] IUnknown:Release (This=0x712090) returned 0x1
	[0171.807] IUnknown:Release (This=0x720df0) returned 0x0
	[0171.808] IUnknown:Release (This=0x7ccb40) returned 0x0
	[0171.808] IUnknown:Release (This=0x7cd008) returned 0x0
	[0171.808] CoGetContextToken (in: pToken=0xeffa50 | out: pToken=0xeffa50) returned 0x0
	[0171.808] IUnknown:QueryInterface (in: This=0x712080, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xeff9f8 | out: ppvObject=0xeff9f8*=0x712090) returned 0x0
	[0171.809] CObjectContext::ContextCallback () returned 0x0
	[0171.821] IUnknown:Release (This=0x712090) returned 0x1
	[0171.821] IUnknown:Release (This=0x7cc810) returned 0x0
	[0171.822] IUnknown:Release (This=0x7cc1b0) returned 0x0
	[0171.822] IUnknown:Release (This=0x7cbb50) returned 0x0
	[0171.822] IUnknown:Release (This=0x7cd1a0) returned 0x0
	[0171.822] IUnknown:Release (This=0x7cc018) returned 0x0
	[0171.822] IUnknown:Release (This=0x7cc678) returned 0x0
	[0171.822] IUnknown:Release (This=0x7cb9b8) returned 0x0
	[0171.823] IUnknown:Release (This=0x7cd800) returned 0x0
	[0171.823] IUnknown:Release (This=0x7cbce8) returned 0x0
	[0171.823] IUnknown:Release (This=0x7b92c8) returned 0x0
	[0171.823] IUnknown:Release (This=0x7baab0) returned 0x0
	[0171.823] IUnknown:Release (This=0x7b9130) returned 0x0
	[0171.823] IUnknown:Release (This=0x7ba918) returned 0x0
	[0171.824] IUnknown:Release (This=0x7ba450) returned 0x0
	[0171.827] IUnknown:Release (This=0x7ba2b8) returned 0x0
	[0171.828] IUnknown:Release (This=0x7ba5e8) returned 0x0
	[0171.828] IUnknown:Release (This=0x7bac48) returned 0x0
	[0171.829] IUnknown:Release (This=0x720ac0) returned 0x0
	[0171.829] IUnknown:Release (This=0x7ba780) returned 0x0
	[0171.829] CoGetContextToken (in: pToken=0xeffa50 | out: pToken=0xeffa50) returned 0x0
	[0171.829] IUnknown:QueryInterface (in: This=0x712080, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xeff9f8 | out: ppvObject=0xeff9f8*=0x712090) returned 0x0
	[0171.830] CObjectContext::ContextCallback () returned 0x0
	[0171.839] IUnknown:Release (This=0x712090) returned 0x1
	[0171.839] IUnknown:Release (This=0x7205f8) returned 0x0
	[0171.839] CoGetContextToken (in: pToken=0xeffa50 | out: pToken=0xeffa50) returned 0x0
	[0171.839] IUnknown:QueryInterface (in: This=0x712080, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xeff9f8 | out: ppvObject=0xeff9f8*=0x712090) returned 0x0
	[0171.840] CObjectContext::ContextCallback () returned 0x0
	[0172.075] IUnknown:Release (This=0x712090) returned 0x1
	[0172.076] IUnknown:Release (This=0x7ba120) returned 0x0
	[0172.076] IUnknown:Release (This=0x7b9460) returned 0x0
	[0172.076] IUnknown:Release (This=0x7b9f88) returned 0x0
	[0172.076] IUnknown:Release (This=0x7b8f98) returned 0x0
	[0172.077] IUnknown:Release (This=0x7b95f8) returned 0x0
	[0172.077] IUnknown:Release (This=0x7b9df0) returned 0x0
	[0172.077] IUnknown:Release (This=0x7b9c58) returned 0x0
	[0172.077] IUnknown:Release (This=0x7b9ac0) returned 0x0
	[0172.077] IUnknown:Release (This=0x7b9790) returned 0x0
	[0172.077] IUnknown:Release (This=0x7b9928) returned 0x0
	[0172.078] IUnknown:Release (This=0x7b8e00) returned 0x0
	[0172.078] IUnknown:Release (This=0x7aa860) returned 0x0
	[0172.078] IUnknown:Release (This=0x7aa6c8) returned 0x0
	[0172.078] IUnknown:Release (This=0x7aa398) returned 0x0
	[0172.078] IUnknown:Release (This=0x7ab9e8) returned 0x0
	[0172.079] IUnknown:Release (This=0x7aad28) returned 0x0
	[0172.079] IUnknown:Release (This=0x7ab850) returned 0x0
	[0172.079] IUnknown:Release (This=0x7aab90) returned 0x0
	[0172.079] IUnknown:Release (This=0x7ab1f0) returned 0x0
	[0172.079] IUnknown:Release (This=0x7ab058) returned 0x0
	[0172.079] IUnknown:Release (This=0x7abeb0) returned 0x0
	[0172.080] IUnknown:Release (This=0x7aa200) returned 0x0
	[0172.080] IUnknown:Release (This=0x7abd18) returned 0x0
	[0172.080] IUnknown:Release (This=0x7ab6b8) returned 0x0
	[0172.080] IUnknown:Release (This=0x7aaec0) returned 0x0
	[0172.080] IUnknown:Release (This=0x7ab388) returned 0x0
	[0172.080] IUnknown:Release (This=0x7aa530) returned 0x0
	[0172.081] IUnknown:Release (This=0x7abb80) returned 0x0
	[0172.081] IUnknown:Release (This=0x7aa068) returned 0x0
	[0172.081] IUnknown:Release (This=0x7ab520) returned 0x0
	[0172.081] IUnknown:Release (This=0x7aa9f8) returned 0x0
	[0172.081] IUnknown:Release (This=0x79ba48) returned 0x0
	[0172.081] IUnknown:Release (This=0x79b8b0) returned 0x0
	[0172.082] IUnknown:Release (This=0x79b580) returned 0x0
	[0172.082] IUnknown:Release (This=0x79bbe0) returned 0x0
	[0172.082] IUnknown:Release (This=0x79b3e8) returned 0x0
	[0172.082] IUnknown:Release (This=0x79b250) returned 0x0
	[0172.082] IUnknown:Release (This=0x79c240) returned 0x0
	[0172.082] IUnknown:Release (This=0x79af20) returned 0x0
	[0172.083] IUnknown:Release (This=0x79abf0) returned 0x0
	[0172.083] IUnknown:Release (This=0x79c3d8) returned 0x0
	[0172.083] IUnknown:Release (This=0x79c708) returned 0x0
	[0172.083] IUnknown:Release (This=0x79b718) returned 0x0
	[0172.083] IUnknown:Release (This=0x79aa58) returned 0x0
	[0172.083] IUnknown:Release (This=0x79ad88) returned 0x0
	[0172.084] IUnknown:Release (This=0x79c570) returned 0x0
	[0172.084] IUnknown:Release (This=0x79c8a0) returned 0x0
	[0172.084] IUnknown:Release (This=0x79c0a8) returned 0x0
	[0172.084] IUnknown:Release (This=0x79bf10) returned 0x0
	[0172.084] IUnknown:Release (This=0x79bd78) returned 0x0
	[0172.085] IUnknown:Release (This=0x79b0b8) returned 0x0
	[0172.085] IUnknown:Release (This=0x791cc8) returned 0x0
	[0172.085] IUnknown:Release (This=0x791998) returned 0x0
	[0172.085] IUnknown:Release (This=0x7914d0) returned 0x0
	[0172.086] IUnknown:Release (This=0x791338) returned 0x0
	[0172.086] IUnknown:Release (This=0x7911a0) returned 0x0
	[0172.086] IUnknown:Release (This=0x790e70) returned 0x0
	[0172.086] IUnknown:Release (This=0x790cd8) returned 0x0
	[0172.086] IUnknown:Release (This=0x790b40) returned 0x0
	[0172.087] IUnknown:Release (This=0x791800) returned 0x0
	[0172.087] IUnknown:Release (This=0x7909a8) returned 0x0
	[0172.087] IUnknown:Release (This=0x791ff8) returned 0x0
	[0172.087] IUnknown:Release (This=0x791b30) returned 0x0
	[0172.087] IUnknown:Release (This=0x791668) returned 0x0
	[0172.087] IUnknown:Release (This=0x791008) returned 0x0
	[0172.088] IUnknown:Release (This=0x790810) returned 0x0
	[0172.088] IUnknown:Release (This=0x7924c0) returned 0x0
	[0172.088] IUnknown:Release (This=0x792328) returned 0x0
	[0172.088] IUnknown:Release (This=0x792190) returned 0x0
	[0172.088] IUnknown:Release (This=0x792658) returned 0x0
	[0172.088] IUnknown:Release (This=0x775218) returned 0x0
	[0172.089] IUnknown:Release (This=0x775080) returned 0x0
	[0172.089] IUnknown:Release (This=0x774ee8) returned 0x0
	[0172.089] IUnknown:Release (This=0x775d40) returned 0x0
	[0172.089] IUnknown:Release (This=0x774888) returned 0x0
	[0172.089] IUnknown:Release (This=0x774d50) returned 0x0
	[0172.089] IUnknown:Release (This=0x7753b0) returned 0x0
	[0172.090] IUnknown:Release (This=0x7746f0) returned 0x0
	[0172.090] IUnknown:Release (This=0x774bb8) returned 0x0
	[0172.090] IUnknown:Release (This=0x7743c0) returned 0x0
	[0172.090] IUnknown:Release (This=0x774a20) returned 0x0
	[0172.090] IUnknown:Release (This=0x775ba8) returned 0x0
	[0172.090] IUnknown:Release (This=0x775ed8) returned 0x0
	[0172.090] IUnknown:Release (This=0x775878) returned 0x0
	[0172.091] IUnknown:Release (This=0x775548) returned 0x0
	[0172.091] IUnknown:Release (This=0x775a10) returned 0x0
	[0172.091] IUnknown:Release (This=0x774228) returned 0x0
	[0172.091] IUnknown:Release (This=0x7756e0) returned 0x0
	[0172.092] CoGetContextToken (in: pToken=0xeffa50 | out: pToken=0xeffa50) returned 0x0
	[0172.092] IUnknown:QueryInterface (in: This=0x712080, riid=0x6c608724*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xeff9f8 | out: ppvObject=0xeff9f8*=0x712090) returned 0x0
	[0172.092] CObjectContext::ContextCallback () returned 0x0
	[0172.100] IUnknown:Release (This=0x712090) returned 0x1
	[0172.103] CloseHandle (hObject=0x640) returned 1
	[0172.103] CloseHandle (hObject=0x73c) returned 1
	[0172.103] CloseHandle (hObject=0x3e8) returned 1
	[0172.103] CloseHandle (hObject=0x788) returned 1
	[0172.103] CloseHandle (hObject=0x63c) returned 1
	[0172.104] CloseHandle (hObject=0x3e0) returned 1
	[0172.104] CloseHandle (hObject=0x6b4) returned 1
	[0172.104] CloseHandle (hObject=0x704) returned 1
	[0172.104] CloseHandle (hObject=0x638) returned 1
	[0172.105] CloseHandle (hObject=0x3c8) returned 1
	[0172.105] CloseHandle (hObject=0x6b0) returned 1
	[0172.105] CloseHandle (hObject=0x1f8) returned 1
	[0172.105] CloseHandle (hObject=0x634) returned 1
	[0172.105] CloseHandle (hObject=0x738) returned 1
	[0172.105] CloseHandle (hObject=0x700) returned 1
	[0172.105] CloseHandle (hObject=0x630) returned 1
	[0172.106] CloseHandle (hObject=0x2b8) returned 1
	[0172.106] CloseHandle (hObject=0x6ac) returned 1
	[0172.106] CloseHandle (hObject=0x75c) returned 1
	[0172.106] CloseHandle (hObject=0x62c) returned 1
	[0172.106] CloseHandle (hObject=0x774) returned 1
	[0172.106] CloseHandle (hObject=0x6a8) returned 1
	[0172.107] CloseHandle (hObject=0x628) returned 1
	[0172.107] CloseHandle (hObject=0x6fc) returned 1
	[0172.107] CloseHandle (hObject=0x734) returned 1
	[0172.107] CloseHandle (hObject=0x624) returned 1
	[0172.107] CloseHandle (hObject=0x6a4) returned 1
	[0172.107] CloseHandle (hObject=0x784) returned 1
	[0172.107] CloseHandle (hObject=0x620) returned 1
	[0172.108] CloseHandle (hObject=0x6f8) returned 1
	[0172.108] CloseHandle (hObject=0x6a0) returned 1
	[0172.108] CloseHandle (hObject=0x61c) returned 1
	[0172.108] CloseHandle (hObject=0x758) returned 1
	[0172.108] CloseHandle (hObject=0x730) returned 1
	[0172.108] CloseHandle (hObject=0x618) returned 1
	[0172.109] CloseHandle (hObject=0x69c) returned 1
	[0172.109] CloseHandle (hObject=0x6f4) returned 1
	[0172.109] CloseHandle (hObject=0x614) returned 1
	[0172.109] CloseHandle (hObject=0x7a0) returned 1
	[0172.109] CloseHandle (hObject=0x698) returned 1
	[0172.109] CloseHandle (hObject=0x610) returned 1
	[0172.109] CloseHandle (hObject=0x770) returned 1
	[0172.109] CloseHandle (hObject=0x6f0) returned 1
	[0172.110] CloseHandle (hObject=0x60c) returned 1
	[0172.110] CloseHandle (hObject=0x694) returned 1
	[0172.110] CloseHandle (hObject=0x72c) returned 1
	[0172.110] CloseHandle (hObject=0x604) returned 1
	[0172.110] CloseHandle (hObject=0x754) returned 1
	[0172.110] CloseHandle (hObject=0x690) returned 1
	[0172.111] CloseHandle (hObject=0x5fc) returned 1
	[0172.111] CloseHandle (hObject=0x6ec) returned 1
	[0172.111] CloseHandle (hObject=0x7bc) returned 1
	[0172.111] CloseHandle (hObject=0x5f8) returned 1
	[0172.111] CloseHandle (hObject=0x68c) returned 1
	[0172.111] CloseHandle (hObject=0x728) returned 1
	[0172.111] CloseHandle (hObject=0x5f4) returned 1
	[0172.112] CloseHandle (hObject=0x6e8) returned 1
	[0172.112] CloseHandle (hObject=0x688) returned 1
	[0172.112] CloseHandle (hObject=0x5f0) returned 1
	[0172.112] CloseHandle (hObject=0x780) returned 1
	[0172.112] CloseHandle (hObject=0x750) returned 1
	[0172.112] CloseHandle (hObject=0x5ec) returned 1
	[0172.112] CloseHandle (hObject=0x684) returned 1
	[0172.113] CloseHandle (hObject=0x6e4) returned 1
	[0172.113] CloseHandle (hObject=0x5e8) returned 1
	[0172.113] CloseHandle (hObject=0x724) returned 1
	[0172.113] CloseHandle (hObject=0x680) returned 1
	[0172.113] CloseHandle (hObject=0x5e4) returned 1
	[0172.113] CloseHandle (hObject=0x76c) returned 1
	[0172.114] CloseHandle (hObject=0x6e0) returned 1
	[0172.114] CloseHandle (hObject=0x5e0) returned 1
	[0172.114] CloseHandle (hObject=0x67c) returned 1
	[0172.114] CloseHandle (hObject=0x5dc) returned 1
	[0172.114] CloseHandle (hObject=0x57c) returned 1
	[0172.115] CloseHandle (hObject=0x720) returned 1
	[0172.115] CloseHandle (hObject=0x5bc) returned 1
	[0172.115] CloseHandle (hObject=0x678) returned 1
	[0172.115] CloseHandle (hObject=0x5d8) returned 1
	[0172.115] CloseHandle (hObject=0x6dc) returned 1
	[0172.115] CloseHandle (hObject=0x74c) returned 1
	[0172.116] CloseHandle (hObject=0x5a4) returned 1
	[0172.116] CloseHandle (hObject=0x674) returned 1
	[0172.116] CloseHandle (hObject=0x5a0) returned 1
	[0172.116] CloseHandle (hObject=0x6d8) returned 1
	[0172.117] CloseHandle (hObject=0x670) returned 1
	[0172.117] CloseHandle (hObject=0x55c) returned 1
	[0172.117] CloseHandle (hObject=0x71c) returned 1
	[0172.120] CloseHandle (hObject=0x6b8) returned 1
	[0172.120] CloseHandle (hObject=0x768) returned 1
	[0172.120] CloseHandle (hObject=0x66c) returned 1
	[0172.120] CloseHandle (hObject=0x6d4) returned 1
	[0172.120] CloseHandle (hObject=0x748) returned 1
	[0172.120] CloseHandle (hObject=0x668) returned 1
	[0172.121] CloseHandle (hObject=0x718) returned 1
	[0172.121] CloseHandle (hObject=0x404) returned 1
	[0172.121] CloseHandle (hObject=0x6d0) returned 1
	[0172.121] CloseHandle (hObject=0x53c) returned 1
	[0172.121] CloseHandle (hObject=0x664) returned 1
	[0172.121] CloseHandle (hObject=0x538) returned 1
	[0172.122] CloseHandle (hObject=0x77c) returned 1
	[0172.122] CloseHandle (hObject=0x7a4) returned 1
	[0172.122] CloseHandle (hObject=0x660) returned 1
	[0172.122] CloseHandle (hObject=0x6cc) returned 1
	[0172.122] CloseHandle (hObject=0x714) returned 1
	[0172.123] CloseHandle (hObject=0x454) returned 1
	[0172.123] CloseHandle (hObject=0x65c) returned 1
	[0172.123] CloseHandle (hObject=0x450) returned 1
	[0172.123] CloseHandle (hObject=0x744) returned 1
	[0172.123] CloseHandle (hObject=0x44c) returned 1
	[0172.123] CloseHandle (hObject=0x6c8) returned 1
	[0172.123] CloseHandle (hObject=0x448) returned 1
	[0172.124] CloseHandle (hObject=0x658) returned 1
	[0172.124] CloseHandle (hObject=0x444) returned 1
	[0172.124] CloseHandle (hObject=0x764) returned 1
	[0172.124] CloseHandle (hObject=0x438) returned 1
	[0172.124] CloseHandle (hObject=0x710) returned 1
	[0172.124] CloseHandle (hObject=0x434) returned 1
	[0172.124] CloseHandle (hObject=0x654) returned 1
	[0172.124] CloseHandle (hObject=0x430) returned 1
	[0172.125] CloseHandle (hObject=0x6c4) returned 1
	[0172.125] CloseHandle (hObject=0x42c) returned 1
	[0172.125] CloseHandle (hObject=0x650) returned 1
	[0172.125] CloseHandle (hObject=0x428) returned 1
	[0172.125] CloseHandle (hObject=0x740) returned 1
	[0172.126] CloseHandle (hObject=0x6c0) returned 1
	[0172.126] CloseHandle (hObject=0x41c) returned 1
	[0172.126] CloseHandle (hObject=0x64c) returned 1
	[0172.126] CloseHandle (hObject=0x418) returned 1
	[0172.126] CloseHandle (hObject=0x70c) returned 1
	[0172.126] CloseHandle (hObject=0x414) returned 1
	[0172.127] CloseHandle (hObject=0x778) returned 1
	[0172.127] CloseHandle (hObject=0x410) returned 1
	[0172.127] CloseHandle (hObject=0x648) returned 1
	[0172.127] CloseHandle (hObject=0x6bc) returned 1
	[0172.127] CloseHandle (hObject=0x760) returned 1
	[0172.127] CloseHandle (hObject=0x40c) returned 1
	[0172.127] CloseHandle (hObject=0x644) returned 1
	[0172.127] CloseHandle (hObject=0x408) returned 1
	[0172.128] CloseHandle (hObject=0x708) returned 1

Thread:
	id = 12
	os_tid = 0xcdc

	[0131.825] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0131.826] RoInitialize () returned 0x1
	[0131.826] RoUninitialize () returned 0x0
	[0131.908] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x139f5b4 | out: lpiid=0x139f5b4) returned 0x0
	[0131.920] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x72df60) returned 0x0
	[0133.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x72df60, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0133.782] WbemDefPath:IClassFactory:CreateInstance (in: This=0x72df60, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x72bc20) returned 0x0
	[0133.783] WbemDefPath:IUnknown:Release (This=0x72df60) returned 0x0
	[0133.784] WbemDefPath:IUnknown:QueryInterface (in: This=0x72bc20, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x72bc20) returned 0x0
	[0133.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x72bc20, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0133.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x72bc20, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0133.791] WbemDefPath:IUnknown:AddRef (This=0x72bc20) returned 0x3
	[0133.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x72bc20, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0133.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x72bc20, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0133.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x72bc20, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x730800) returned 0x0
	[0133.792] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x730800, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0133.792] WbemDefPath:IUnknown:Release (This=0x730800) returned 0x3
	[0133.792] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0133.794] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0133.794] WbemDefPath:IUnknown:QueryInterface (in: This=0x72bc20, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0133.795] WbemDefPath:IUnknown:Release (This=0x72bc20) returned 0x2
	[0133.795] WbemDefPath:IUnknown:Release (This=0x72bc20) returned 0x1
	[0133.795] SetEvent (hEvent=0x2b8) returned 1
	[0153.966] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x702ab0) returned 0x0
	[0153.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x702ab0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0153.968] WbemDefPath:IClassFactory:CreateInstance (in: This=0x702ab0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x73ee48) returned 0x0
	[0153.968] WbemDefPath:IUnknown:Release (This=0x702ab0) returned 0x0
	[0153.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x73ee48, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x73ee48) returned 0x0
	[0153.969] WbemDefPath:IUnknown:QueryInterface (in: This=0x73ee48, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0153.969] WbemDefPath:IUnknown:QueryInterface (in: This=0x73ee48, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0153.969] WbemDefPath:IUnknown:AddRef (This=0x73ee48) returned 0x3
	[0153.969] WbemDefPath:IUnknown:QueryInterface (in: This=0x73ee48, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0153.969] WbemDefPath:IUnknown:QueryInterface (in: This=0x73ee48, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0153.969] WbemDefPath:IUnknown:QueryInterface (in: This=0x73ee48, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x745078) returned 0x0
	[0153.969] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x745078, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0153.969] WbemDefPath:IUnknown:Release (This=0x745078) returned 0x3
	[0153.969] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0153.970] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0153.970] WbemDefPath:IUnknown:QueryInterface (in: This=0x73ee48, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0153.970] WbemDefPath:IUnknown:Release (This=0x73ee48) returned 0x2
	[0153.970] WbemDefPath:IUnknown:Release (This=0x73ee48) returned 0x1
	[0153.970] SetEvent (hEvent=0x1f8) returned 1
	[0154.046] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x702ab0) returned 0x0
	[0154.046] WbemDefPath:IUnknown:QueryInterface (in: This=0x702ab0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0154.046] WbemDefPath:IClassFactory:CreateInstance (in: This=0x702ab0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x751c08) returned 0x0
	[0154.047] WbemDefPath:IUnknown:Release (This=0x702ab0) returned 0x0
	[0154.047] WbemDefPath:IUnknown:QueryInterface (in: This=0x751c08, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x751c08) returned 0x0
	[0154.047] WbemDefPath:IUnknown:QueryInterface (in: This=0x751c08, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0154.047] WbemDefPath:IUnknown:QueryInterface (in: This=0x751c08, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0154.047] WbemDefPath:IUnknown:AddRef (This=0x751c08) returned 0x3
	[0154.047] WbemDefPath:IUnknown:QueryInterface (in: This=0x751c08, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0154.047] WbemDefPath:IUnknown:QueryInterface (in: This=0x751c08, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0154.047] WbemDefPath:IUnknown:QueryInterface (in: This=0x751c08, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7450a8) returned 0x0
	[0154.047] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7450a8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0154.047] WbemDefPath:IUnknown:Release (This=0x7450a8) returned 0x3
	[0154.047] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0154.048] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0154.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x751c08, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0154.048] WbemDefPath:IUnknown:Release (This=0x751c08) returned 0x2
	[0154.048] WbemDefPath:IUnknown:Release (This=0x751c08) returned 0x1
	[0154.048] SetEvent (hEvent=0x3c8) returned 1
	[0154.461] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x754768) returned 0x0
	[0154.461] WbemDefPath:IUnknown:QueryInterface (in: This=0x754768, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0154.461] WbemDefPath:IClassFactory:CreateInstance (in: This=0x754768, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x751ce8) returned 0x0
	[0154.461] WbemDefPath:IUnknown:Release (This=0x754768) returned 0x0
	[0154.461] WbemDefPath:IUnknown:QueryInterface (in: This=0x751ce8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x751ce8) returned 0x0
	[0154.462] WbemDefPath:IUnknown:QueryInterface (in: This=0x751ce8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0154.462] WbemDefPath:IUnknown:QueryInterface (in: This=0x751ce8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0154.462] WbemDefPath:IUnknown:AddRef (This=0x751ce8) returned 0x3
	[0154.462] WbemDefPath:IUnknown:QueryInterface (in: This=0x751ce8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0154.462] WbemDefPath:IUnknown:QueryInterface (in: This=0x751ce8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0154.462] WbemDefPath:IUnknown:QueryInterface (in: This=0x751ce8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x706d00) returned 0x0
	[0154.462] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x706d00, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0154.462] WbemDefPath:IUnknown:Release (This=0x706d00) returned 0x3
	[0154.462] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0154.462] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0154.462] WbemDefPath:IUnknown:QueryInterface (in: This=0x751ce8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0154.462] WbemDefPath:IUnknown:Release (This=0x751ce8) returned 0x2
	[0154.462] WbemDefPath:IUnknown:Release (This=0x751ce8) returned 0x1
	[0154.462] SetEvent (hEvent=0x3e0) returned 1
	[0161.901] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x754858) returned 0x0
	[0161.903] WbemDefPath:IUnknown:QueryInterface (in: This=0x754858, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0161.903] WbemDefPath:IClassFactory:CreateInstance (in: This=0x754858, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x763d78) returned 0x0
	[0161.903] WbemDefPath:IUnknown:Release (This=0x754858) returned 0x0
	[0161.904] WbemDefPath:IUnknown:QueryInterface (in: This=0x763d78, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x763d78) returned 0x0
	[0161.904] WbemDefPath:IUnknown:QueryInterface (in: This=0x763d78, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0161.904] WbemDefPath:IUnknown:QueryInterface (in: This=0x763d78, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0161.904] WbemDefPath:IUnknown:AddRef (This=0x763d78) returned 0x3
	[0161.904] WbemDefPath:IUnknown:QueryInterface (in: This=0x763d78, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0161.904] WbemDefPath:IUnknown:QueryInterface (in: This=0x763d78, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0161.904] WbemDefPath:IUnknown:QueryInterface (in: This=0x763d78, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x76e570) returned 0x0
	[0161.904] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x76e570, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0161.905] WbemDefPath:IUnknown:Release (This=0x76e570) returned 0x3
	[0161.905] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0161.905] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0161.905] WbemDefPath:IUnknown:QueryInterface (in: This=0x763d78, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0161.905] WbemDefPath:IUnknown:Release (This=0x763d78) returned 0x2
	[0161.905] WbemDefPath:IUnknown:Release (This=0x763d78) returned 0x1
	[0161.905] SetEvent (hEvent=0x55c) returned 1
	[0162.398] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x754978) returned 0x0
	[0162.399] WbemDefPath:IUnknown:QueryInterface (in: This=0x754978, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0162.399] WbemDefPath:IClassFactory:CreateInstance (in: This=0x754978, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x764398) returned 0x0
	[0162.399] WbemDefPath:IUnknown:Release (This=0x754978) returned 0x0
	[0162.399] WbemDefPath:IUnknown:QueryInterface (in: This=0x764398, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x764398) returned 0x0
	[0162.399] WbemDefPath:IUnknown:QueryInterface (in: This=0x764398, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0162.399] WbemDefPath:IUnknown:QueryInterface (in: This=0x764398, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0162.399] WbemDefPath:IUnknown:AddRef (This=0x764398) returned 0x3
	[0162.399] WbemDefPath:IUnknown:QueryInterface (in: This=0x764398, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0162.399] WbemDefPath:IUnknown:QueryInterface (in: This=0x764398, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0162.399] WbemDefPath:IUnknown:QueryInterface (in: This=0x764398, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x76e858) returned 0x0
	[0162.400] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x76e858, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.400] WbemDefPath:IUnknown:Release (This=0x76e858) returned 0x3
	[0162.400] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0162.400] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0162.400] WbemDefPath:IUnknown:QueryInterface (in: This=0x764398, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0162.400] WbemDefPath:IUnknown:Release (This=0x764398) returned 0x2
	[0162.400] WbemDefPath:IUnknown:Release (This=0x764398) returned 0x1
	[0162.400] SetEvent (hEvent=0x5a0) returned 1
	[0162.425] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7547b8) returned 0x0
	[0162.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x7547b8, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0162.426] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7547b8, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7640f8) returned 0x0
	[0162.426] WbemDefPath:IUnknown:Release (This=0x7547b8) returned 0x0
	[0162.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x7640f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7640f8) returned 0x0
	[0162.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x7640f8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0162.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x7640f8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0162.426] WbemDefPath:IUnknown:AddRef (This=0x7640f8) returned 0x3
	[0162.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x7640f8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0162.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x7640f8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0162.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x7640f8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x76e468) returned 0x0
	[0162.427] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x76e468, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.427] WbemDefPath:IUnknown:Release (This=0x76e468) returned 0x3
	[0162.427] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0162.427] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0162.427] WbemDefPath:IUnknown:QueryInterface (in: This=0x7640f8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0162.427] WbemDefPath:IUnknown:Release (This=0x7640f8) returned 0x2
	[0162.427] WbemDefPath:IUnknown:Release (This=0x7640f8) returned 0x1
	[0162.427] SetEvent (hEvent=0x5a4) returned 1
	[0162.663] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x754938) returned 0x0
	[0162.663] WbemDefPath:IUnknown:QueryInterface (in: This=0x754938, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0162.663] WbemDefPath:IClassFactory:CreateInstance (in: This=0x754938, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x764088) returned 0x0
	[0162.664] WbemDefPath:IUnknown:Release (This=0x754938) returned 0x0
	[0162.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x764088, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x764088) returned 0x0
	[0162.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x764088, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0162.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x764088, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0162.664] WbemDefPath:IUnknown:AddRef (This=0x764088) returned 0x3
	[0162.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x764088, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0162.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x764088, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0162.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x764088, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x76e198) returned 0x0
	[0162.664] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x76e198, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.664] WbemDefPath:IUnknown:Release (This=0x76e198) returned 0x3
	[0162.664] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0162.664] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0162.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x764088, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0162.665] WbemDefPath:IUnknown:Release (This=0x764088) returned 0x2
	[0162.665] WbemDefPath:IUnknown:Release (This=0x764088) returned 0x1
	[0162.665] SetEvent (hEvent=0x5bc) returned 1
	[0163.637] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7548c8) returned 0x0
	[0163.638] WbemDefPath:IUnknown:QueryInterface (in: This=0x7548c8, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0163.638] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7548c8, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x764168) returned 0x0
	[0163.638] WbemDefPath:IUnknown:Release (This=0x7548c8) returned 0x0
	[0163.638] WbemDefPath:IUnknown:QueryInterface (in: This=0x764168, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x764168) returned 0x0
	[0163.638] WbemDefPath:IUnknown:QueryInterface (in: This=0x764168, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0163.638] WbemDefPath:IUnknown:QueryInterface (in: This=0x764168, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0163.638] WbemDefPath:IUnknown:AddRef (This=0x764168) returned 0x3
	[0163.639] WbemDefPath:IUnknown:QueryInterface (in: This=0x764168, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0163.639] WbemDefPath:IUnknown:QueryInterface (in: This=0x764168, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0163.639] WbemDefPath:IUnknown:QueryInterface (in: This=0x764168, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x788bc8) returned 0x0
	[0163.639] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x788bc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.639] WbemDefPath:IUnknown:Release (This=0x788bc8) returned 0x3
	[0163.639] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0163.639] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0163.639] WbemDefPath:IUnknown:QueryInterface (in: This=0x764168, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0163.640] WbemDefPath:IUnknown:Release (This=0x764168) returned 0x2
	[0163.640] WbemDefPath:IUnknown:Release (This=0x764168) returned 0x1
	[0163.640] SetEvent (hEvent=0x5d8) returned 1
	[0163.710] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x754858) returned 0x0
	[0163.711] WbemDefPath:IUnknown:QueryInterface (in: This=0x754858, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0163.711] WbemDefPath:IClassFactory:CreateInstance (in: This=0x754858, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7642b8) returned 0x0
	[0163.711] WbemDefPath:IUnknown:Release (This=0x754858) returned 0x0
	[0163.711] WbemDefPath:IUnknown:QueryInterface (in: This=0x7642b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7642b8) returned 0x0
	[0163.711] WbemDefPath:IUnknown:QueryInterface (in: This=0x7642b8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0163.711] WbemDefPath:IUnknown:QueryInterface (in: This=0x7642b8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0163.712] WbemDefPath:IUnknown:AddRef (This=0x7642b8) returned 0x3
	[0163.712] WbemDefPath:IUnknown:QueryInterface (in: This=0x7642b8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0163.712] WbemDefPath:IUnknown:QueryInterface (in: This=0x7642b8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0163.712] WbemDefPath:IUnknown:QueryInterface (in: This=0x7642b8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x788ec8) returned 0x0
	[0163.712] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x788ec8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.712] WbemDefPath:IUnknown:Release (This=0x788ec8) returned 0x3
	[0163.712] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0163.712] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0163.712] WbemDefPath:IUnknown:QueryInterface (in: This=0x7642b8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0163.712] WbemDefPath:IUnknown:Release (This=0x7642b8) returned 0x2
	[0163.712] WbemDefPath:IUnknown:Release (This=0x7642b8) returned 0x1
	[0163.712] SetEvent (hEvent=0x5dc) returned 1
	[0163.779] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7548c8) returned 0x0
	[0163.779] WbemDefPath:IUnknown:QueryInterface (in: This=0x7548c8, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0163.779] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7548c8, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x763fa8) returned 0x0
	[0163.780] WbemDefPath:IUnknown:Release (This=0x7548c8) returned 0x0
	[0163.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x763fa8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x763fa8) returned 0x0
	[0163.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x763fa8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0163.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x763fa8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0163.780] WbemDefPath:IUnknown:AddRef (This=0x763fa8) returned 0x3
	[0163.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x763fa8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0163.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x763fa8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0163.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x763fa8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x788730) returned 0x0
	[0163.780] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x788730, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.780] WbemDefPath:IUnknown:Release (This=0x788730) returned 0x3
	[0163.780] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0163.781] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0163.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x763fa8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0163.781] WbemDefPath:IUnknown:Release (This=0x763fa8) returned 0x2
	[0163.781] WbemDefPath:IUnknown:Release (This=0x763fa8) returned 0x1
	[0163.781] SetEvent (hEvent=0x5e0) returned 1
	[0163.805] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7548c8) returned 0x0
	[0163.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x7548c8, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0163.806] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7548c8, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x764408) returned 0x0
	[0163.806] WbemDefPath:IUnknown:Release (This=0x7548c8) returned 0x0
	[0163.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x764408, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x764408) returned 0x0
	[0163.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x764408, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0163.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x764408, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0163.806] WbemDefPath:IUnknown:AddRef (This=0x764408) returned 0x3
	[0163.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x764408, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0163.806] WbemDefPath:IUnknown:QueryInterface (in: This=0x764408, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0163.807] WbemDefPath:IUnknown:QueryInterface (in: This=0x764408, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x788820) returned 0x0
	[0163.807] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x788820, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.807] WbemDefPath:IUnknown:Release (This=0x788820) returned 0x3
	[0163.807] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0163.807] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0163.807] WbemDefPath:IUnknown:QueryInterface (in: This=0x764408, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0163.807] WbemDefPath:IUnknown:Release (This=0x764408) returned 0x2
	[0163.807] WbemDefPath:IUnknown:Release (This=0x764408) returned 0x1
	[0163.807] SetEvent (hEvent=0x5e4) returned 1
	[0163.891] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7548d8) returned 0x0
	[0163.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x7548d8, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0163.892] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7548d8, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x764018) returned 0x0
	[0163.892] WbemDefPath:IUnknown:Release (This=0x7548d8) returned 0x0
	[0163.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x764018, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x764018) returned 0x0
	[0163.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x764018, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0163.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x764018, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0163.892] WbemDefPath:IUnknown:AddRef (This=0x764018) returned 0x3
	[0163.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x764018, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0163.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x764018, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0163.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x764018, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x78aff0) returned 0x0
	[0163.893] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x78aff0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.893] WbemDefPath:IUnknown:Release (This=0x78aff0) returned 0x3
	[0163.893] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0163.893] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0163.893] WbemDefPath:IUnknown:QueryInterface (in: This=0x764018, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0163.893] WbemDefPath:IUnknown:Release (This=0x764018) returned 0x2
	[0163.893] WbemDefPath:IUnknown:Release (This=0x764018) returned 0x1
	[0163.893] SetEvent (hEvent=0x5e8) returned 1
	[0163.912] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7548d8) returned 0x0
	[0163.912] WbemDefPath:IUnknown:QueryInterface (in: This=0x7548d8, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0163.912] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7548d8, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7641d8) returned 0x0
	[0163.912] WbemDefPath:IUnknown:Release (This=0x7548d8) returned 0x0
	[0163.912] WbemDefPath:IUnknown:QueryInterface (in: This=0x7641d8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7641d8) returned 0x0
	[0163.913] WbemDefPath:IUnknown:QueryInterface (in: This=0x7641d8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0163.913] WbemDefPath:IUnknown:QueryInterface (in: This=0x7641d8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0163.913] WbemDefPath:IUnknown:AddRef (This=0x7641d8) returned 0x3
	[0163.913] WbemDefPath:IUnknown:QueryInterface (in: This=0x7641d8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0163.913] WbemDefPath:IUnknown:QueryInterface (in: This=0x7641d8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0163.913] WbemDefPath:IUnknown:QueryInterface (in: This=0x7641d8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x78b2a8) returned 0x0
	[0163.913] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x78b2a8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.913] WbemDefPath:IUnknown:Release (This=0x78b2a8) returned 0x3
	[0163.913] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0163.913] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0163.913] WbemDefPath:IUnknown:QueryInterface (in: This=0x7641d8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0163.913] WbemDefPath:IUnknown:Release (This=0x7641d8) returned 0x2
	[0163.913] WbemDefPath:IUnknown:Release (This=0x7641d8) returned 0x1
	[0163.913] SetEvent (hEvent=0x5ec) returned 1
	[0163.925] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x72e170) returned 0x0
	[0163.925] WbemDefPath:IUnknown:QueryInterface (in: This=0x72e170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0163.925] WbemDefPath:IClassFactory:CreateInstance (in: This=0x72e170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x764248) returned 0x0
	[0163.926] WbemDefPath:IUnknown:Release (This=0x72e170) returned 0x0
	[0163.926] WbemDefPath:IUnknown:QueryInterface (in: This=0x764248, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x764248) returned 0x0
	[0163.926] WbemDefPath:IUnknown:QueryInterface (in: This=0x764248, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0163.926] WbemDefPath:IUnknown:QueryInterface (in: This=0x764248, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0163.926] WbemDefPath:IUnknown:AddRef (This=0x764248) returned 0x3
	[0163.926] WbemDefPath:IUnknown:QueryInterface (in: This=0x764248, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0163.926] WbemDefPath:IUnknown:QueryInterface (in: This=0x764248, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0163.926] WbemDefPath:IUnknown:QueryInterface (in: This=0x764248, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x78b4b8) returned 0x0
	[0163.926] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x78b4b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.926] WbemDefPath:IUnknown:Release (This=0x78b4b8) returned 0x3
	[0163.926] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0163.927] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0163.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x764248, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0163.927] WbemDefPath:IUnknown:Release (This=0x764248) returned 0x2
	[0163.927] WbemDefPath:IUnknown:Release (This=0x764248) returned 0x1
	[0163.927] SetEvent (hEvent=0x5f0) returned 1
	[0164.227] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7546b8) returned 0x0
	[0164.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x7546b8, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0164.228] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7546b8, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x764478) returned 0x0
	[0164.228] WbemDefPath:IUnknown:Release (This=0x7546b8) returned 0x0
	[0164.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x764478, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x764478) returned 0x0
	[0164.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x764478, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0164.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x764478, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0164.228] WbemDefPath:IUnknown:AddRef (This=0x764478) returned 0x3
	[0164.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x764478, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0164.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x764478, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0164.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x764478, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x78b560) returned 0x0
	[0164.228] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x78b560, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0164.228] WbemDefPath:IUnknown:Release (This=0x78b560) returned 0x3
	[0164.228] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0164.229] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0164.229] WbemDefPath:IUnknown:QueryInterface (in: This=0x764478, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0164.229] WbemDefPath:IUnknown:Release (This=0x764478) returned 0x2
	[0164.229] WbemDefPath:IUnknown:Release (This=0x764478) returned 0x1
	[0164.229] SetEvent (hEvent=0x5f4) returned 1
	[0164.316] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783030) returned 0x0
	[0164.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0164.316] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x764328) returned 0x0
	[0164.317] WbemDefPath:IUnknown:Release (This=0x783030) returned 0x0
	[0164.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x764328, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x764328) returned 0x0
	[0164.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x764328, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0164.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x764328, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0164.317] WbemDefPath:IUnknown:AddRef (This=0x764328) returned 0x3
	[0164.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x764328, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0164.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x764328, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0164.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x764328, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x78b6f8) returned 0x0
	[0164.317] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x78b6f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0164.318] WbemDefPath:IUnknown:Release (This=0x78b6f8) returned 0x3
	[0164.318] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0164.318] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0164.318] WbemDefPath:IUnknown:QueryInterface (in: This=0x764328, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0164.318] WbemDefPath:IUnknown:Release (This=0x764328) returned 0x2
	[0164.318] WbemDefPath:IUnknown:Release (This=0x764328) returned 0x1
	[0164.318] SetEvent (hEvent=0x5f8) returned 1
	[0164.395] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783070) returned 0x0
	[0164.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x783070, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0164.396] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783070, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c0d0) returned 0x0
	[0164.396] WbemDefPath:IUnknown:Release (This=0x783070) returned 0x0
	[0164.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c0d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c0d0) returned 0x0
	[0164.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c0d0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0164.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c0d0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0164.396] WbemDefPath:IUnknown:AddRef (This=0x78c0d0) returned 0x3
	[0164.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c0d0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0164.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c0d0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0164.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c0d0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x783cb0) returned 0x0
	[0164.396] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x783cb0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0164.396] WbemDefPath:IUnknown:Release (This=0x783cb0) returned 0x3
	[0164.396] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0164.397] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0164.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c0d0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0164.397] WbemDefPath:IUnknown:Release (This=0x78c0d0) returned 0x2
	[0164.397] WbemDefPath:IUnknown:Release (This=0x78c0d0) returned 0x1
	[0164.397] SetEvent (hEvent=0x5fc) returned 1
	[0165.084] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fb0) returned 0x0
	[0165.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fb0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.085] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fb0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c370) returned 0x0
	[0165.085] WbemDefPath:IUnknown:Release (This=0x782fb0) returned 0x0
	[0165.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c370, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c370) returned 0x0
	[0165.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c370, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c370, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.085] WbemDefPath:IUnknown:AddRef (This=0x78c370) returned 0x3
	[0165.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c370, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c370, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c370, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x783f80) returned 0x0
	[0165.085] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x783f80, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.085] WbemDefPath:IUnknown:Release (This=0x783f80) returned 0x3
	[0165.085] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.085] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c370, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.086] WbemDefPath:IUnknown:Release (This=0x78c370) returned 0x2
	[0165.086] WbemDefPath:IUnknown:Release (This=0x78c370) returned 0x1
	[0165.086] SetEvent (hEvent=0x604) returned 1
	[0165.100] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783040) returned 0x0
	[0165.100] WbemDefPath:IUnknown:QueryInterface (in: This=0x783040, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.101] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783040, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cc30) returned 0x0
	[0165.101] WbemDefPath:IUnknown:Release (This=0x783040) returned 0x0
	[0165.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cc30, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cc30) returned 0x0
	[0165.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cc30, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cc30, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.101] WbemDefPath:IUnknown:AddRef (This=0x78cc30) returned 0x3
	[0165.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cc30, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cc30, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cc30, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x784220) returned 0x0
	[0165.101] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x784220, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.101] WbemDefPath:IUnknown:Release (This=0x784220) returned 0x3
	[0165.101] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.102] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.102] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cc30, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.102] WbemDefPath:IUnknown:Release (This=0x78cc30) returned 0x2
	[0165.102] WbemDefPath:IUnknown:Release (This=0x78cc30) returned 0x1
	[0165.102] SetEvent (hEvent=0x60c) returned 1
	[0165.114] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783000) returned 0x0
	[0165.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x783000, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.115] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783000, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c290) returned 0x0
	[0165.115] WbemDefPath:IUnknown:Release (This=0x783000) returned 0x0
	[0165.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c290, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c290) returned 0x0
	[0165.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c290, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c290, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.115] WbemDefPath:IUnknown:AddRef (This=0x78c290) returned 0x3
	[0165.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c290, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c290, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c290, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7841f0) returned 0x0
	[0165.115] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7841f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.115] WbemDefPath:IUnknown:Release (This=0x7841f0) returned 0x3
	[0165.115] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.116] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c290, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.116] WbemDefPath:IUnknown:Release (This=0x78c290) returned 0x2
	[0165.116] WbemDefPath:IUnknown:Release (This=0x78c290) returned 0x1
	[0165.116] SetEvent (hEvent=0x610) returned 1
	[0165.141] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0165.142] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.142] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c6f0) returned 0x0
	[0165.142] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0165.142] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c6f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c6f0) returned 0x0
	[0165.142] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c6f0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.142] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c6f0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.142] WbemDefPath:IUnknown:AddRef (This=0x78c6f0) returned 0x3
	[0165.142] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c6f0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.142] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c6f0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.142] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c6f0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x784298) returned 0x0
	[0165.142] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x784298, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.142] WbemDefPath:IUnknown:Release (This=0x784298) returned 0x3
	[0165.142] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.143] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.143] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c6f0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.143] WbemDefPath:IUnknown:Release (This=0x78c6f0) returned 0x2
	[0165.143] WbemDefPath:IUnknown:Release (This=0x78c6f0) returned 0x1
	[0165.143] SetEvent (hEvent=0x614) returned 1
	[0165.327] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fd0) returned 0x0
	[0165.327] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fd0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.327] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fd0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c3e0) returned 0x0
	[0165.327] WbemDefPath:IUnknown:Release (This=0x782fd0) returned 0x0
	[0165.327] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c3e0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c3e0) returned 0x0
	[0165.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c3e0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c3e0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.328] WbemDefPath:IUnknown:AddRef (This=0x78c3e0) returned 0x3
	[0165.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c3e0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c3e0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c3e0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7834a0) returned 0x0
	[0165.328] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7834a0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.328] WbemDefPath:IUnknown:Release (This=0x7834a0) returned 0x3
	[0165.328] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.328] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c3e0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.328] WbemDefPath:IUnknown:Release (This=0x78c3e0) returned 0x2
	[0165.328] WbemDefPath:IUnknown:Release (This=0x78c3e0) returned 0x1
	[0165.328] SetEvent (hEvent=0x618) returned 1
	[0165.348] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0165.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.349] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c990) returned 0x0
	[0165.349] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0165.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c990, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c990) returned 0x0
	[0165.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c990, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c990, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.349] WbemDefPath:IUnknown:AddRef (This=0x78c990) returned 0x3
	[0165.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c990, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c990, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c990, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7838d8) returned 0x0
	[0165.349] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7838d8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.349] WbemDefPath:IUnknown:Release (This=0x7838d8) returned 0x3
	[0165.349] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.349] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c990, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.350] WbemDefPath:IUnknown:Release (This=0x78c990) returned 0x2
	[0165.350] WbemDefPath:IUnknown:Release (This=0x78c990) returned 0x1
	[0165.350] SetEvent (hEvent=0x61c) returned 1
	[0165.384] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783100) returned 0x0
	[0165.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x783100, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.384] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783100, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c680) returned 0x0
	[0165.384] WbemDefPath:IUnknown:Release (This=0x783100) returned 0x0
	[0165.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c680, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c680) returned 0x0
	[0165.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c680, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c680, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.385] WbemDefPath:IUnknown:AddRef (This=0x78c680) returned 0x3
	[0165.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c680, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c680, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c680, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x783770) returned 0x0
	[0165.385] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x783770, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.385] WbemDefPath:IUnknown:Release (This=0x783770) returned 0x3
	[0165.385] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.385] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c680, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.385] WbemDefPath:IUnknown:Release (This=0x78c680) returned 0x2
	[0165.385] WbemDefPath:IUnknown:Release (This=0x78c680) returned 0x1
	[0165.385] SetEvent (hEvent=0x620) returned 1
	[0165.414] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0165.414] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.414] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78ca70) returned 0x0
	[0165.414] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0165.414] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca70, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78ca70) returned 0x0
	[0165.414] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca70, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.414] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca70, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.415] WbemDefPath:IUnknown:AddRef (This=0x78ca70) returned 0x3
	[0165.415] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca70, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.415] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca70, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.415] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca70, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7839b0) returned 0x0
	[0165.415] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7839b0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.415] WbemDefPath:IUnknown:Release (This=0x7839b0) returned 0x3
	[0165.415] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.415] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.415] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca70, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.415] WbemDefPath:IUnknown:Release (This=0x78ca70) returned 0x2
	[0165.415] WbemDefPath:IUnknown:Release (This=0x78ca70) returned 0x1
	[0165.415] SetEvent (hEvent=0x624) returned 1
	[0165.505] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782ff0) returned 0x0
	[0165.506] WbemDefPath:IUnknown:QueryInterface (in: This=0x782ff0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.506] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782ff0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cd10) returned 0x0
	[0165.507] WbemDefPath:IUnknown:Release (This=0x782ff0) returned 0x0
	[0165.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd10, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cd10) returned 0x0
	[0165.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd10, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd10, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.507] WbemDefPath:IUnknown:AddRef (This=0x78cd10) returned 0x3
	[0165.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd10, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd10, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd10, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x783bd8) returned 0x0
	[0165.507] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x783bd8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.508] WbemDefPath:IUnknown:Release (This=0x783bd8) returned 0x3
	[0165.508] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.508] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.508] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd10, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.508] WbemDefPath:IUnknown:Release (This=0x78cd10) returned 0x2
	[0165.508] WbemDefPath:IUnknown:Release (This=0x78cd10) returned 0x1
	[0165.508] SetEvent (hEvent=0x628) returned 1
	[0165.530] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782f90) returned 0x0
	[0165.530] WbemDefPath:IUnknown:QueryInterface (in: This=0x782f90, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.530] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782f90, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c140) returned 0x0
	[0165.531] WbemDefPath:IUnknown:Release (This=0x782f90) returned 0x0
	[0165.531] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c140, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c140) returned 0x0
	[0165.531] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c140, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.531] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c140, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.531] WbemDefPath:IUnknown:AddRef (This=0x78c140) returned 0x3
	[0165.531] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c140, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.531] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c140, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.531] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c140, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x793988) returned 0x0
	[0165.531] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x793988, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.531] WbemDefPath:IUnknown:Release (This=0x793988) returned 0x3
	[0165.531] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.532] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c140, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.532] WbemDefPath:IUnknown:Release (This=0x78c140) returned 0x2
	[0165.532] WbemDefPath:IUnknown:Release (This=0x78c140) returned 0x1
	[0165.532] SetEvent (hEvent=0x62c) returned 1
	[0165.622] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783160) returned 0x0
	[0165.622] WbemDefPath:IUnknown:QueryInterface (in: This=0x783160, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.622] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783160, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78ca00) returned 0x0
	[0165.623] WbemDefPath:IUnknown:Release (This=0x783160) returned 0x0
	[0165.623] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca00, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78ca00) returned 0x0
	[0165.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca00, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca00, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.624] WbemDefPath:IUnknown:AddRef (This=0x78ca00) returned 0x3
	[0165.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca00, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca00, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca00, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x793718) returned 0x0
	[0165.624] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x793718, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.624] WbemDefPath:IUnknown:Release (This=0x793718) returned 0x3
	[0165.624] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.624] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ca00, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.625] WbemDefPath:IUnknown:Release (This=0x78ca00) returned 0x2
	[0165.625] WbemDefPath:IUnknown:Release (This=0x78ca00) returned 0x1
	[0165.625] SetEvent (hEvent=0x630) returned 1
	[0165.668] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fc0) returned 0x0
	[0165.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fc0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.668] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fc0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c450) returned 0x0
	[0165.668] WbemDefPath:IUnknown:Release (This=0x782fc0) returned 0x0
	[0165.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c450, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c450) returned 0x0
	[0165.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c450, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c450, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.669] WbemDefPath:IUnknown:AddRef (This=0x78c450) returned 0x3
	[0165.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c450, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c450, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c450, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x792d40) returned 0x0
	[0165.669] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x792d40, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.669] WbemDefPath:IUnknown:Release (This=0x792d40) returned 0x3
	[0165.669] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.669] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c450, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.670] WbemDefPath:IUnknown:Release (This=0x78c450) returned 0x2
	[0165.670] WbemDefPath:IUnknown:Release (This=0x78c450) returned 0x1
	[0165.670] SetEvent (hEvent=0x634) returned 1
	[0165.705] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783160) returned 0x0
	[0165.705] WbemDefPath:IUnknown:QueryInterface (in: This=0x783160, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.705] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783160, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c760) returned 0x0
	[0165.705] WbemDefPath:IUnknown:Release (This=0x783160) returned 0x0
	[0165.705] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c760, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c760) returned 0x0
	[0165.705] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c760, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c760, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.706] WbemDefPath:IUnknown:AddRef (This=0x78c760) returned 0x3
	[0165.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c760, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c760, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c760, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x792b90) returned 0x0
	[0165.706] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x792b90, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.706] WbemDefPath:IUnknown:Release (This=0x792b90) returned 0x3
	[0165.706] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.706] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c760, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.706] WbemDefPath:IUnknown:Release (This=0x78c760) returned 0x2
	[0165.706] WbemDefPath:IUnknown:Release (This=0x78c760) returned 0x1
	[0165.706] SetEvent (hEvent=0x638) returned 1
	[0165.734] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783160) returned 0x0
	[0165.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x783160, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.735] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783160, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cae0) returned 0x0
	[0165.735] WbemDefPath:IUnknown:Release (This=0x783160) returned 0x0
	[0165.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cae0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cae0) returned 0x0
	[0165.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cae0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cae0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.736] WbemDefPath:IUnknown:AddRef (This=0x78cae0) returned 0x3
	[0165.736] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cae0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.736] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cae0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.736] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cae0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x792f08) returned 0x0
	[0165.736] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x792f08, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.736] WbemDefPath:IUnknown:Release (This=0x792f08) returned 0x3
	[0165.736] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.736] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.736] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cae0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.736] WbemDefPath:IUnknown:Release (This=0x78cae0) returned 0x2
	[0165.736] WbemDefPath:IUnknown:Release (This=0x78cae0) returned 0x1
	[0165.736] SetEvent (hEvent=0x63c) returned 1
	[0165.788] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783050) returned 0x0
	[0165.789] WbemDefPath:IUnknown:QueryInterface (in: This=0x783050, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.789] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783050, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c920) returned 0x0
	[0165.789] WbemDefPath:IUnknown:Release (This=0x783050) returned 0x0
	[0165.789] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c920, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c920) returned 0x0
	[0165.789] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c920, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.789] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c920, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.790] WbemDefPath:IUnknown:AddRef (This=0x78c920) returned 0x3
	[0165.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c920, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c920, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c920, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x792f50) returned 0x0
	[0165.790] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x792f50, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.790] WbemDefPath:IUnknown:Release (This=0x792f50) returned 0x3
	[0165.790] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.790] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c920, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.790] WbemDefPath:IUnknown:Release (This=0x78c920) returned 0x2
	[0165.790] WbemDefPath:IUnknown:Release (This=0x78c920) returned 0x1
	[0165.790] SetEvent (hEvent=0x640) returned 1
	[0165.816] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0165.816] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0165.817] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cca0) returned 0x0
	[0165.817] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0165.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cca0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cca0) returned 0x0
	[0165.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cca0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0165.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cca0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0165.817] WbemDefPath:IUnknown:AddRef (This=0x78cca0) returned 0x3
	[0165.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cca0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0165.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cca0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0165.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cca0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x793370) returned 0x0
	[0165.817] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x793370, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0165.817] WbemDefPath:IUnknown:Release (This=0x793370) returned 0x3
	[0165.817] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0165.818] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0165.818] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cca0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0165.818] WbemDefPath:IUnknown:Release (This=0x78cca0) returned 0x2
	[0165.818] WbemDefPath:IUnknown:Release (This=0x78cca0) returned 0x1
	[0165.818] SetEvent (hEvent=0x644) returned 1
	[0166.087] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783030) returned 0x0
	[0166.087] WbemDefPath:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.087] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c300) returned 0x0
	[0166.087] WbemDefPath:IUnknown:Release (This=0x783030) returned 0x0
	[0166.087] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c300, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c300) returned 0x0
	[0166.088] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c300, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.088] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c300, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.088] WbemDefPath:IUnknown:AddRef (This=0x78c300) returned 0x3
	[0166.088] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c300, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.088] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c300, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.088] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c300, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x793328) returned 0x0
	[0166.088] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x793328, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.088] WbemDefPath:IUnknown:Release (This=0x793328) returned 0x3
	[0166.088] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.088] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.088] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c300, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.088] WbemDefPath:IUnknown:Release (This=0x78c300) returned 0x2
	[0166.088] WbemDefPath:IUnknown:Release (This=0x78c300) returned 0x1
	[0166.088] SetEvent (hEvent=0x648) returned 1
	[0166.111] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783020) returned 0x0
	[0166.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.111] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783020, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cd80) returned 0x0
	[0166.111] WbemDefPath:IUnknown:Release (This=0x783020) returned 0x0
	[0166.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd80, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cd80) returned 0x0
	[0166.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd80, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd80, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.112] WbemDefPath:IUnknown:AddRef (This=0x78cd80) returned 0x3
	[0166.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd80, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd80, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd80, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x793598) returned 0x0
	[0166.112] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x793598, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.112] WbemDefPath:IUnknown:Release (This=0x793598) returned 0x3
	[0166.112] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.112] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cd80, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.113] WbemDefPath:IUnknown:Release (This=0x78cd80) returned 0x2
	[0166.113] WbemDefPath:IUnknown:Release (This=0x78cd80) returned 0x1
	[0166.113] SetEvent (hEvent=0x64c) returned 1
	[0166.143] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783160) returned 0x0
	[0166.144] WbemDefPath:IUnknown:QueryInterface (in: This=0x783160, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.144] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783160, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c7d0) returned 0x0
	[0166.145] WbemDefPath:IUnknown:Release (This=0x783160) returned 0x0
	[0166.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c7d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c7d0) returned 0x0
	[0166.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c7d0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c7d0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.145] WbemDefPath:IUnknown:AddRef (This=0x78c7d0) returned 0x3
	[0166.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c7d0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c7d0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c7d0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x798798) returned 0x0
	[0166.145] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x798798, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.145] WbemDefPath:IUnknown:Release (This=0x798798) returned 0x3
	[0166.145] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.145] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c7d0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.145] WbemDefPath:IUnknown:Release (This=0x78c7d0) returned 0x2
	[0166.146] WbemDefPath:IUnknown:Release (This=0x78c7d0) returned 0x1
	[0166.146] SetEvent (hEvent=0x650) returned 1
	[0166.225] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783160) returned 0x0
	[0166.225] WbemDefPath:IUnknown:QueryInterface (in: This=0x783160, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.225] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783160, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78bff0) returned 0x0
	[0166.226] WbemDefPath:IUnknown:Release (This=0x783160) returned 0x0
	[0166.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x78bff0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78bff0) returned 0x0
	[0166.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x78bff0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x78bff0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.226] WbemDefPath:IUnknown:AddRef (This=0x78bff0) returned 0x3
	[0166.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x78bff0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x78bff0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x78bff0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x797ac0) returned 0x0
	[0166.226] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x797ac0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.226] WbemDefPath:IUnknown:Release (This=0x797ac0) returned 0x3
	[0166.227] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.227] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x78bff0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.227] WbemDefPath:IUnknown:Release (This=0x78bff0) returned 0x2
	[0166.227] WbemDefPath:IUnknown:Release (This=0x78bff0) returned 0x1
	[0166.227] SetEvent (hEvent=0x654) returned 1
	[0166.245] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fc0) returned 0x0
	[0166.245] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fc0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.245] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fc0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cb50) returned 0x0
	[0166.246] WbemDefPath:IUnknown:Release (This=0x782fc0) returned 0x0
	[0166.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cb50, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cb50) returned 0x0
	[0166.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cb50, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cb50, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.246] WbemDefPath:IUnknown:AddRef (This=0x78cb50) returned 0x3
	[0166.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cb50, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cb50, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cb50, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x797a18) returned 0x0
	[0166.246] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x797a18, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.247] WbemDefPath:IUnknown:Release (This=0x797a18) returned 0x3
	[0166.247] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.247] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.247] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cb50, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.247] WbemDefPath:IUnknown:Release (This=0x78cb50) returned 0x2
	[0166.247] WbemDefPath:IUnknown:Release (This=0x78cb50) returned 0x1
	[0166.247] SetEvent (hEvent=0x658) returned 1
	[0166.385] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783000) returned 0x0
	[0166.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x783000, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.385] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783000, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c8b0) returned 0x0
	[0166.386] WbemDefPath:IUnknown:Release (This=0x783000) returned 0x0
	[0166.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c8b0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c8b0) returned 0x0
	[0166.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c8b0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c8b0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.386] WbemDefPath:IUnknown:AddRef (This=0x78c8b0) returned 0x3
	[0166.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c8b0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c8b0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c8b0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x797d60) returned 0x0
	[0166.388] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x797d60, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.388] WbemDefPath:IUnknown:Release (This=0x797d60) returned 0x3
	[0166.388] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.388] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.388] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c8b0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.388] WbemDefPath:IUnknown:Release (This=0x78c8b0) returned 0x2
	[0166.388] WbemDefPath:IUnknown:Release (This=0x78c8b0) returned 0x1
	[0166.388] SetEvent (hEvent=0x65c) returned 1
	[0166.401] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0166.401] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.401] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c840) returned 0x0
	[0166.401] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0166.401] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c840, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c840) returned 0x0
	[0166.401] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c840, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.401] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c840, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.401] WbemDefPath:IUnknown:AddRef (This=0x78c840) returned 0x3
	[0166.402] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c840, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.402] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c840, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.402] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c840, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x797ef8) returned 0x0
	[0166.402] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x797ef8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.402] WbemDefPath:IUnknown:Release (This=0x797ef8) returned 0x3
	[0166.402] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.402] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.402] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c840, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.402] WbemDefPath:IUnknown:Release (This=0x78c840) returned 0x2
	[0166.402] WbemDefPath:IUnknown:Release (This=0x78c840) returned 0x1
	[0166.402] SetEvent (hEvent=0x660) returned 1
	[0166.409] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782f90) returned 0x0
	[0166.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x782f90, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.409] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782f90, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c060) returned 0x0
	[0166.409] WbemDefPath:IUnknown:Release (This=0x782f90) returned 0x0
	[0166.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c060, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c060) returned 0x0
	[0166.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c060, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c060, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.410] WbemDefPath:IUnknown:AddRef (This=0x78c060) returned 0x3
	[0166.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c060, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c060, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c060, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x797f88) returned 0x0
	[0166.410] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x797f88, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.410] WbemDefPath:IUnknown:Release (This=0x797f88) returned 0x3
	[0166.410] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.410] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c060, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.410] WbemDefPath:IUnknown:Release (This=0x78c060) returned 0x2
	[0166.410] WbemDefPath:IUnknown:Release (This=0x78c060) returned 0x1
	[0166.410] SetEvent (hEvent=0x664) returned 1
	[0166.520] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783030) returned 0x0
	[0166.521] WbemDefPath:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.521] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c1b0) returned 0x0
	[0166.521] WbemDefPath:IUnknown:Release (This=0x783030) returned 0x0
	[0166.521] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c1b0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c1b0) returned 0x0
	[0166.521] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c1b0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.521] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c1b0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.521] WbemDefPath:IUnknown:AddRef (This=0x78c1b0) returned 0x3
	[0166.521] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c1b0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.521] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c1b0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.522] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c1b0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7983a8) returned 0x0
	[0166.522] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7983a8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.522] WbemDefPath:IUnknown:Release (This=0x7983a8) returned 0x3
	[0166.522] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.522] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.522] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c1b0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.522] WbemDefPath:IUnknown:Release (This=0x78c1b0) returned 0x2
	[0166.522] WbemDefPath:IUnknown:Release (This=0x78c1b0) returned 0x1
	[0166.522] SetEvent (hEvent=0x668) returned 1
	[0166.571] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783060) returned 0x0
	[0166.571] WbemDefPath:IUnknown:QueryInterface (in: This=0x783060, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.571] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783060, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cbc0) returned 0x0
	[0166.571] WbemDefPath:IUnknown:Release (This=0x783060) returned 0x0
	[0166.571] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cbc0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cbc0) returned 0x0
	[0166.572] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cbc0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.572] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cbc0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.572] WbemDefPath:IUnknown:AddRef (This=0x78cbc0) returned 0x3
	[0166.572] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cbc0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.572] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cbc0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.572] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cbc0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7982a0) returned 0x0
	[0166.572] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7982a0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.572] WbemDefPath:IUnknown:Release (This=0x7982a0) returned 0x3
	[0166.572] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.572] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.572] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cbc0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.572] WbemDefPath:IUnknown:Release (This=0x78cbc0) returned 0x2
	[0166.572] WbemDefPath:IUnknown:Release (This=0x78cbc0) returned 0x1
	[0166.572] SetEvent (hEvent=0x66c) returned 1
	[0166.809] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fc0) returned 0x0
	[0166.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fc0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.809] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fc0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c220) returned 0x0
	[0166.809] WbemDefPath:IUnknown:Release (This=0x782fc0) returned 0x0
	[0166.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c220, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c220) returned 0x0
	[0166.810] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c220, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.810] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c220, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.810] WbemDefPath:IUnknown:AddRef (This=0x78c220) returned 0x3
	[0166.810] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c220, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.810] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c220, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.810] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c220, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7984e0) returned 0x0
	[0166.810] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7984e0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.810] WbemDefPath:IUnknown:Release (This=0x7984e0) returned 0x3
	[0166.810] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.810] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.810] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c220, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.810] WbemDefPath:IUnknown:Release (This=0x78c220) returned 0x2
	[0166.810] WbemDefPath:IUnknown:Release (This=0x78c220) returned 0x1
	[0166.811] SetEvent (hEvent=0x670) returned 1
	[0166.829] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783050) returned 0x0
	[0166.829] WbemDefPath:IUnknown:QueryInterface (in: This=0x783050, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.829] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783050, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c4c0) returned 0x0
	[0166.829] WbemDefPath:IUnknown:Release (This=0x783050) returned 0x0
	[0166.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c4c0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c4c0) returned 0x0
	[0166.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c4c0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c4c0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.830] WbemDefPath:IUnknown:AddRef (This=0x78c4c0) returned 0x3
	[0166.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c4c0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c4c0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c4c0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x798450) returned 0x0
	[0166.830] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x798450, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.830] WbemDefPath:IUnknown:Release (This=0x798450) returned 0x3
	[0166.830] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.830] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c4c0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.830] WbemDefPath:IUnknown:Release (This=0x78c4c0) returned 0x2
	[0166.830] WbemDefPath:IUnknown:Release (This=0x78c4c0) returned 0x1
	[0166.831] SetEvent (hEvent=0x674) returned 1
	[0166.845] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783160) returned 0x0
	[0166.845] WbemDefPath:IUnknown:QueryInterface (in: This=0x783160, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.845] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783160, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c530) returned 0x0
	[0166.845] WbemDefPath:IUnknown:Release (This=0x783160) returned 0x0
	[0166.845] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c530, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c530) returned 0x0
	[0166.845] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c530, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.845] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c530, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.846] WbemDefPath:IUnknown:AddRef (This=0x78c530) returned 0x3
	[0166.846] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c530, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.846] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c530, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.846] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c530, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x79f718) returned 0x0
	[0166.846] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x79f718, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.846] WbemDefPath:IUnknown:Release (This=0x79f718) returned 0x3
	[0166.846] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.846] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.846] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c530, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.846] WbemDefPath:IUnknown:Release (This=0x78c530) returned 0x2
	[0166.846] WbemDefPath:IUnknown:Release (This=0x78c530) returned 0x1
	[0166.846] SetEvent (hEvent=0x678) returned 1
	[0166.860] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0166.861] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.861] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c5a0) returned 0x0
	[0166.861] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0166.861] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c5a0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c5a0) returned 0x0
	[0166.861] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c5a0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.861] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c5a0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.861] WbemDefPath:IUnknown:AddRef (This=0x78c5a0) returned 0x3
	[0166.861] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c5a0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.861] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c5a0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.861] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c5a0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x79f910) returned 0x0
	[0166.861] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x79f910, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.861] WbemDefPath:IUnknown:Release (This=0x79f910) returned 0x3
	[0166.861] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.862] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.862] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c5a0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.862] WbemDefPath:IUnknown:Release (This=0x78c5a0) returned 0x2
	[0166.862] WbemDefPath:IUnknown:Release (This=0x78c5a0) returned 0x1
	[0166.862] SetEvent (hEvent=0x67c) returned 1
	[0166.876] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0166.876] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.876] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78c610) returned 0x0
	[0166.876] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0166.876] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c610, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78c610) returned 0x0
	[0166.876] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c610, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.876] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c610, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.877] WbemDefPath:IUnknown:AddRef (This=0x78c610) returned 0x3
	[0166.877] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c610, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.877] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c610, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.877] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c610, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x79fac0) returned 0x0
	[0166.877] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x79fac0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.877] WbemDefPath:IUnknown:Release (This=0x79fac0) returned 0x3
	[0166.877] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.877] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.877] WbemDefPath:IUnknown:QueryInterface (in: This=0x78c610, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.877] WbemDefPath:IUnknown:Release (This=0x78c610) returned 0x2
	[0166.877] WbemDefPath:IUnknown:Release (This=0x78c610) returned 0x1
	[0166.877] SetEvent (hEvent=0x680) returned 1
	[0166.891] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0166.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.891] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cf40) returned 0x0
	[0166.891] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0166.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cf40, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cf40) returned 0x0
	[0166.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cf40, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cf40, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.892] WbemDefPath:IUnknown:AddRef (This=0x78cf40) returned 0x3
	[0166.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cf40, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cf40, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cf40, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x79fd48) returned 0x0
	[0166.892] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x79fd48, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.892] WbemDefPath:IUnknown:Release (This=0x79fd48) returned 0x3
	[0166.892] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.892] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cf40, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.892] WbemDefPath:IUnknown:Release (This=0x78cf40) returned 0x2
	[0166.892] WbemDefPath:IUnknown:Release (This=0x78cf40) returned 0x1
	[0166.892] SetEvent (hEvent=0x684) returned 1
	[0166.907] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0166.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.908] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78ced0) returned 0x0
	[0166.908] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0166.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ced0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78ced0) returned 0x0
	[0166.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ced0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ced0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.908] WbemDefPath:IUnknown:AddRef (This=0x78ced0) returned 0x3
	[0166.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ced0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ced0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ced0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x79fe80) returned 0x0
	[0166.909] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x79fe80, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.909] WbemDefPath:IUnknown:Release (This=0x79fe80) returned 0x3
	[0166.909] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.909] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.909] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ced0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.909] WbemDefPath:IUnknown:Release (This=0x78ced0) returned 0x2
	[0166.909] WbemDefPath:IUnknown:Release (This=0x78ced0) returned 0x1
	[0166.909] SetEvent (hEvent=0x688) returned 1
	[0166.924] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0166.924] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.924] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78ce60) returned 0x0
	[0166.924] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0166.924] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ce60, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78ce60) returned 0x0
	[0166.925] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ce60, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.925] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ce60, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.925] WbemDefPath:IUnknown:AddRef (This=0x78ce60) returned 0x3
	[0166.925] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ce60, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.925] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ce60, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.925] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ce60, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a0018) returned 0x0
	[0166.925] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a0018, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.925] WbemDefPath:IUnknown:Release (This=0x7a0018) returned 0x3
	[0166.925] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.925] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.925] WbemDefPath:IUnknown:QueryInterface (in: This=0x78ce60, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.925] WbemDefPath:IUnknown:Release (This=0x78ce60) returned 0x2
	[0166.925] WbemDefPath:IUnknown:Release (This=0x78ce60) returned 0x1
	[0166.926] SetEvent (hEvent=0x68c) returned 1
	[0166.945] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0166.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.945] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x78cdf0) returned 0x0
	[0166.945] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0166.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cdf0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x78cdf0) returned 0x0
	[0166.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cdf0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cdf0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.946] WbemDefPath:IUnknown:AddRef (This=0x78cdf0) returned 0x3
	[0166.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cdf0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cdf0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cdf0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x79f388) returned 0x0
	[0166.946] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x79f388, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.946] WbemDefPath:IUnknown:Release (This=0x79f388) returned 0x3
	[0166.946] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.946] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x78cdf0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.946] WbemDefPath:IUnknown:Release (This=0x78cdf0) returned 0x2
	[0166.946] WbemDefPath:IUnknown:Release (This=0x78cdf0) returned 0x1
	[0166.946] SetEvent (hEvent=0x690) returned 1
	[0166.967] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783000) returned 0x0
	[0166.967] WbemDefPath:IUnknown:QueryInterface (in: This=0x783000, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.967] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783000, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2828) returned 0x0
	[0166.967] WbemDefPath:IUnknown:Release (This=0x783000) returned 0x0
	[0166.967] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2828, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2828) returned 0x0
	[0166.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2828, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2828, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.968] WbemDefPath:IUnknown:AddRef (This=0x7a2828) returned 0x3
	[0166.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2828, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2828, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2828, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x79f418) returned 0x0
	[0166.968] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x79f418, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.968] WbemDefPath:IUnknown:Release (This=0x79f418) returned 0x3
	[0166.968] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.968] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.968] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2828, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.969] WbemDefPath:IUnknown:Release (This=0x7a2828) returned 0x2
	[0166.969] WbemDefPath:IUnknown:Release (This=0x7a2828) returned 0x1
	[0166.969] SetEvent (hEvent=0x694) returned 1
	[0166.982] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0166.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.982] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2908) returned 0x0
	[0166.982] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0166.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2908, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2908) returned 0x0
	[0166.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2908, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2908, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.982] WbemDefPath:IUnknown:AddRef (This=0x7a2908) returned 0x3
	[0166.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2908, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2908, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2908, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x79f658) returned 0x0
	[0166.983] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x79f658, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.983] WbemDefPath:IUnknown:Release (This=0x79f658) returned 0x3
	[0166.983] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.983] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.983] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2908, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.983] WbemDefPath:IUnknown:Release (This=0x7a2908) returned 0x2
	[0166.983] WbemDefPath:IUnknown:Release (This=0x7a2908) returned 0x1
	[0166.983] SetEvent (hEvent=0x698) returned 1
	[0166.996] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783070) returned 0x0
	[0166.996] WbemDefPath:IUnknown:QueryInterface (in: This=0x783070, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0166.996] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783070, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1c58) returned 0x0
	[0166.997] WbemDefPath:IUnknown:Release (This=0x783070) returned 0x0
	[0166.997] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1c58, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1c58) returned 0x0
	[0166.997] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1c58, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0166.997] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1c58, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0166.997] WbemDefPath:IUnknown:AddRef (This=0x7a1c58) returned 0x3
	[0166.997] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1c58, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0166.997] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1c58, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0166.997] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1c58, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a4620) returned 0x0
	[0166.997] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a4620, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0166.997] WbemDefPath:IUnknown:Release (This=0x7a4620) returned 0x3
	[0166.997] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0166.997] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0166.997] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1c58, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0166.998] WbemDefPath:IUnknown:Release (This=0x7a1c58) returned 0x2
	[0166.998] WbemDefPath:IUnknown:Release (This=0x7a1c58) returned 0x1
	[0166.998] SetEvent (hEvent=0x69c) returned 1
	[0167.011] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fd0) returned 0x0
	[0167.011] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fd0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.011] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fd0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2588) returned 0x0
	[0167.011] WbemDefPath:IUnknown:Release (This=0x782fd0) returned 0x0
	[0167.011] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2588, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2588) returned 0x0
	[0167.011] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2588, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.011] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2588, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.012] WbemDefPath:IUnknown:AddRef (This=0x7a2588) returned 0x3
	[0167.012] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2588, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.012] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2588, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.012] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2588, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a46e0) returned 0x0
	[0167.012] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a46e0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.012] WbemDefPath:IUnknown:Release (This=0x7a46e0) returned 0x3
	[0167.012] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.012] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.012] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2588, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.012] WbemDefPath:IUnknown:Release (This=0x7a2588) returned 0x2
	[0167.012] WbemDefPath:IUnknown:Release (This=0x7a2588) returned 0x1
	[0167.012] SetEvent (hEvent=0x6a0) returned 1
	[0167.024] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783030) returned 0x0
	[0167.024] WbemDefPath:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.024] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a27b8) returned 0x0
	[0167.024] WbemDefPath:IUnknown:Release (This=0x783030) returned 0x0
	[0167.024] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a27b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a27b8) returned 0x0
	[0167.025] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a27b8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.025] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a27b8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.025] WbemDefPath:IUnknown:AddRef (This=0x7a27b8) returned 0x3
	[0167.025] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a27b8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.025] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a27b8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.025] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a27b8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a4860) returned 0x0
	[0167.025] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a4860, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.025] WbemDefPath:IUnknown:Release (This=0x7a4860) returned 0x3
	[0167.025] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.025] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.025] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a27b8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.025] WbemDefPath:IUnknown:Release (This=0x7a27b8) returned 0x2
	[0167.025] WbemDefPath:IUnknown:Release (This=0x7a27b8) returned 0x1
	[0167.025] SetEvent (hEvent=0x6a4) returned 1
	[0167.044] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7830a0) returned 0x0
	[0167.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x7830a0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.045] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7830a0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a22e8) returned 0x0
	[0167.045] WbemDefPath:IUnknown:Release (This=0x7830a0) returned 0x0
	[0167.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a22e8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a22e8) returned 0x0
	[0167.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a22e8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a22e8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.045] WbemDefPath:IUnknown:AddRef (This=0x7a22e8) returned 0x3
	[0167.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a22e8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a22e8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a22e8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a4980) returned 0x0
	[0167.045] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a4980, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.045] WbemDefPath:IUnknown:Release (This=0x7a4980) returned 0x3
	[0167.046] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.046] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.046] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a22e8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.046] WbemDefPath:IUnknown:Release (This=0x7a22e8) returned 0x2
	[0167.046] WbemDefPath:IUnknown:Release (This=0x7a22e8) returned 0x1
	[0167.046] SetEvent (hEvent=0x6a8) returned 1
	[0167.063] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fd0) returned 0x0
	[0167.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fd0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.063] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fd0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2208) returned 0x0
	[0167.063] WbemDefPath:IUnknown:Release (This=0x782fd0) returned 0x0
	[0167.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2208, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2208) returned 0x0
	[0167.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2208, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2208, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.064] WbemDefPath:IUnknown:AddRef (This=0x7a2208) returned 0x3
	[0167.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2208, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2208, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2208, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a4c98) returned 0x0
	[0167.064] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a4c98, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.064] WbemDefPath:IUnknown:Release (This=0x7a4c98) returned 0x3
	[0167.064] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.064] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2208, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.064] WbemDefPath:IUnknown:Release (This=0x7a2208) returned 0x2
	[0167.064] WbemDefPath:IUnknown:Release (This=0x7a2208) returned 0x1
	[0167.064] SetEvent (hEvent=0x6ac) returned 1
	[0167.106] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0167.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.107] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2978) returned 0x0
	[0167.107] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0167.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2978, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2978) returned 0x0
	[0167.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2978, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2978, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.107] WbemDefPath:IUnknown:AddRef (This=0x7a2978) returned 0x3
	[0167.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2978, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2978, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2978, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a4b18) returned 0x0
	[0167.107] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a4b18, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.108] WbemDefPath:IUnknown:Release (This=0x7a4b18) returned 0x3
	[0167.108] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.108] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2978, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.108] WbemDefPath:IUnknown:Release (This=0x7a2978) returned 0x2
	[0167.108] WbemDefPath:IUnknown:Release (This=0x7a2978) returned 0x1
	[0167.108] SetEvent (hEvent=0x6b0) returned 1
	[0167.127] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0167.128] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.128] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2438) returned 0x0
	[0167.128] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0167.128] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2438, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2438) returned 0x0
	[0167.128] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2438, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.128] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2438, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.128] WbemDefPath:IUnknown:AddRef (This=0x7a2438) returned 0x3
	[0167.128] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2438, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.128] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2438, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.128] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2438, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a4f20) returned 0x0
	[0167.129] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a4f20, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.129] WbemDefPath:IUnknown:Release (This=0x7a4f20) returned 0x3
	[0167.129] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.129] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.129] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2438, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.129] WbemDefPath:IUnknown:Release (This=0x7a2438) returned 0x2
	[0167.129] WbemDefPath:IUnknown:Release (This=0x7a2438) returned 0x1
	[0167.129] SetEvent (hEvent=0x6b4) returned 1
	[0167.222] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.223] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.223] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2898) returned 0x0
	[0167.223] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.223] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2898, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2898) returned 0x0
	[0167.223] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2898, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.223] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2898, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.223] WbemDefPath:IUnknown:AddRef (This=0x7a2898) returned 0x3
	[0167.223] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2898, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.224] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2898, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.224] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2898, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a50b8) returned 0x0
	[0167.224] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a50b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.224] WbemDefPath:IUnknown:Release (This=0x7a50b8) returned 0x3
	[0167.224] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.224] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.224] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2898, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.224] WbemDefPath:IUnknown:Release (This=0x7a2898) returned 0x2
	[0167.224] WbemDefPath:IUnknown:Release (This=0x7a2898) returned 0x1
	[0167.224] SetEvent (hEvent=0x6b8) returned 1
	[0167.236] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7830a0) returned 0x0
	[0167.236] WbemDefPath:IUnknown:QueryInterface (in: This=0x7830a0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.236] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7830a0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2278) returned 0x0
	[0167.236] WbemDefPath:IUnknown:Release (This=0x7830a0) returned 0x0
	[0167.236] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2278, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2278) returned 0x0
	[0167.236] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2278, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.236] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2278, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.236] WbemDefPath:IUnknown:AddRef (This=0x7a2278) returned 0x3
	[0167.236] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2278, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.237] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2278, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.237] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2278, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a5238) returned 0x0
	[0167.237] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a5238, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.237] WbemDefPath:IUnknown:Release (This=0x7a5238) returned 0x3
	[0167.237] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.237] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.237] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2278, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.237] WbemDefPath:IUnknown:Release (This=0x7a2278) returned 0x2
	[0167.237] WbemDefPath:IUnknown:Release (This=0x7a2278) returned 0x1
	[0167.237] SetEvent (hEvent=0x6bc) returned 1
	[0167.249] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783070) returned 0x0
	[0167.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x783070, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.249] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783070, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1ef8) returned 0x0
	[0167.249] WbemDefPath:IUnknown:Release (This=0x783070) returned 0x0
	[0167.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1ef8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1ef8) returned 0x0
	[0167.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1ef8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1ef8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.249] WbemDefPath:IUnknown:AddRef (This=0x7a1ef8) returned 0x3
	[0167.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1ef8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1ef8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1ef8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a55c8) returned 0x0
	[0167.250] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a55c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.250] WbemDefPath:IUnknown:Release (This=0x7a55c8) returned 0x3
	[0167.250] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.250] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.250] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1ef8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.250] WbemDefPath:IUnknown:Release (This=0x7a1ef8) returned 0x2
	[0167.250] WbemDefPath:IUnknown:Release (This=0x7a1ef8) returned 0x1
	[0167.250] SetEvent (hEvent=0x6c0) returned 1
	[0167.281] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0167.281] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.281] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1e88) returned 0x0
	[0167.281] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0167.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e88, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1e88) returned 0x0
	[0167.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e88, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e88, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.282] WbemDefPath:IUnknown:AddRef (This=0x7a1e88) returned 0x3
	[0167.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e88, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e88, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e88, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a54f0) returned 0x0
	[0167.282] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a54f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.282] WbemDefPath:IUnknown:Release (This=0x7a54f0) returned 0x3
	[0167.282] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.282] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e88, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.282] WbemDefPath:IUnknown:Release (This=0x7a1e88) returned 0x2
	[0167.282] WbemDefPath:IUnknown:Release (This=0x7a1e88) returned 0x1
	[0167.283] SetEvent (hEvent=0x6c4) returned 1
	[0167.331] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7830b0) returned 0x0
	[0167.332] WbemDefPath:IUnknown:QueryInterface (in: This=0x7830b0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.332] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7830b0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a24a8) returned 0x0
	[0167.332] WbemDefPath:IUnknown:Release (This=0x7830b0) returned 0x0
	[0167.332] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a24a8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a24a8) returned 0x0
	[0167.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a24a8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a24a8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.333] WbemDefPath:IUnknown:AddRef (This=0x7a24a8) returned 0x3
	[0167.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a24a8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a24a8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a24a8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a5790) returned 0x0
	[0167.333] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a5790, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.333] WbemDefPath:IUnknown:Release (This=0x7a5790) returned 0x3
	[0167.333] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.333] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.333] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a24a8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.333] WbemDefPath:IUnknown:Release (This=0x7a24a8) returned 0x2
	[0167.333] WbemDefPath:IUnknown:Release (This=0x7a24a8) returned 0x1
	[0167.333] SetEvent (hEvent=0x6c8) returned 1
	[0167.356] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7830a0) returned 0x0
	[0167.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x7830a0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.357] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7830a0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2668) returned 0x0
	[0167.357] WbemDefPath:IUnknown:Release (This=0x7830a0) returned 0x0
	[0167.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2668, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2668) returned 0x0
	[0167.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2668, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2668, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.357] WbemDefPath:IUnknown:AddRef (This=0x7a2668) returned 0x3
	[0167.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2668, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2668, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2668, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a5868) returned 0x0
	[0167.357] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a5868, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.357] WbemDefPath:IUnknown:Release (This=0x7a5868) returned 0x3
	[0167.357] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.357] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2668, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.358] WbemDefPath:IUnknown:Release (This=0x7a2668) returned 0x2
	[0167.358] WbemDefPath:IUnknown:Release (This=0x7a2668) returned 0x1
	[0167.358] SetEvent (hEvent=0x6cc) returned 1
	[0167.379] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fe0) returned 0x0
	[0167.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.380] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fe0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a20b8) returned 0x0
	[0167.381] WbemDefPath:IUnknown:Release (This=0x782fe0) returned 0x0
	[0167.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a20b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a20b8) returned 0x0
	[0167.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a20b8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a20b8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.381] WbemDefPath:IUnknown:AddRef (This=0x7a20b8) returned 0x3
	[0167.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a20b8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a20b8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a20b8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a5a48) returned 0x0
	[0167.381] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a5a48, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.381] WbemDefPath:IUnknown:Release (This=0x7a5a48) returned 0x3
	[0167.381] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.381] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a20b8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.382] WbemDefPath:IUnknown:Release (This=0x7a20b8) returned 0x2
	[0167.382] WbemDefPath:IUnknown:Release (This=0x7a20b8) returned 0x1
	[0167.382] SetEvent (hEvent=0x6d0) returned 1
	[0167.452] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783050) returned 0x0
	[0167.452] WbemDefPath:IUnknown:QueryInterface (in: This=0x783050, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.452] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783050, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1d38) returned 0x0
	[0167.453] WbemDefPath:IUnknown:Release (This=0x783050) returned 0x0
	[0167.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1d38, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1d38) returned 0x0
	[0167.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1d38, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1d38, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.453] WbemDefPath:IUnknown:AddRef (This=0x7a1d38) returned 0x3
	[0167.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1d38, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1d38, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1d38, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a5f28) returned 0x0
	[0167.453] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a5f28, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.453] WbemDefPath:IUnknown:Release (This=0x7a5f28) returned 0x3
	[0167.454] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.454] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.454] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1d38, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.454] WbemDefPath:IUnknown:Release (This=0x7a1d38) returned 0x2
	[0167.454] WbemDefPath:IUnknown:Release (This=0x7a1d38) returned 0x1
	[0167.454] SetEvent (hEvent=0x6d4) returned 1
	[0167.467] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783030) returned 0x0
	[0167.467] WbemDefPath:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.468] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1da8) returned 0x0
	[0167.468] WbemDefPath:IUnknown:Release (This=0x783030) returned 0x0
	[0167.468] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1da8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1da8) returned 0x0
	[0167.468] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1da8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.468] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1da8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.468] WbemDefPath:IUnknown:AddRef (This=0x7a1da8) returned 0x3
	[0167.468] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1da8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.468] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1da8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.468] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1da8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a5cd0) returned 0x0
	[0167.468] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a5cd0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.468] WbemDefPath:IUnknown:Release (This=0x7a5cd0) returned 0x3
	[0167.468] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.469] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1da8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.469] WbemDefPath:IUnknown:Release (This=0x7a1da8) returned 0x2
	[0167.469] WbemDefPath:IUnknown:Release (This=0x7a1da8) returned 0x1
	[0167.469] SetEvent (hEvent=0x6d8) returned 1
	[0167.482] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783120) returned 0x0
	[0167.483] WbemDefPath:IUnknown:QueryInterface (in: This=0x783120, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.483] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783120, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a25f8) returned 0x0
	[0167.483] WbemDefPath:IUnknown:Release (This=0x783120) returned 0x0
	[0167.483] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a25f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a25f8) returned 0x0
	[0167.483] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a25f8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.483] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a25f8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.483] WbemDefPath:IUnknown:AddRef (This=0x7a25f8) returned 0x3
	[0167.483] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a25f8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.483] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a25f8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.483] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a25f8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a5fa0) returned 0x0
	[0167.483] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a5fa0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.483] WbemDefPath:IUnknown:Release (This=0x7a5fa0) returned 0x3
	[0167.483] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.483] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.483] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a25f8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.484] WbemDefPath:IUnknown:Release (This=0x7a25f8) returned 0x2
	[0167.484] WbemDefPath:IUnknown:Release (This=0x7a25f8) returned 0x1
	[0167.484] SetEvent (hEvent=0x6dc) returned 1
	[0167.495] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.496] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.496] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1fd8) returned 0x0
	[0167.496] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.496] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1fd8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1fd8) returned 0x0
	[0167.496] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1fd8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.496] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1fd8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.497] WbemDefPath:IUnknown:AddRef (This=0x7a1fd8) returned 0x3
	[0167.497] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1fd8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.497] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1fd8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.497] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1fd8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a4230) returned 0x0
	[0167.497] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a4230, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.497] WbemDefPath:IUnknown:Release (This=0x7a4230) returned 0x3
	[0167.497] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.497] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.497] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1fd8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.497] WbemDefPath:IUnknown:Release (This=0x7a1fd8) returned 0x2
	[0167.497] WbemDefPath:IUnknown:Release (This=0x7a1fd8) returned 0x1
	[0167.497] SetEvent (hEvent=0x6e0) returned 1
	[0167.510] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783050) returned 0x0
	[0167.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x783050, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.511] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783050, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1f68) returned 0x0
	[0167.511] WbemDefPath:IUnknown:Release (This=0x783050) returned 0x0
	[0167.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1f68, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1f68) returned 0x0
	[0167.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1f68, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1f68, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.512] WbemDefPath:IUnknown:AddRef (This=0x7a1f68) returned 0x3
	[0167.512] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1f68, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.512] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1f68, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.512] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1f68, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7a4470) returned 0x0
	[0167.512] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7a4470, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.512] WbemDefPath:IUnknown:Release (This=0x7a4470) returned 0x3
	[0167.512] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.512] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.512] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1f68, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.512] WbemDefPath:IUnknown:Release (This=0x7a1f68) returned 0x2
	[0167.513] WbemDefPath:IUnknown:Release (This=0x7a1f68) returned 0x1
	[0167.513] SetEvent (hEvent=0x6e4) returned 1
	[0167.536] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783010) returned 0x0
	[0167.536] WbemDefPath:IUnknown:QueryInterface (in: This=0x783010, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.536] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783010, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1e18) returned 0x0
	[0167.536] WbemDefPath:IUnknown:Release (This=0x783010) returned 0x0
	[0167.536] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e18, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1e18) returned 0x0
	[0167.537] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e18, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.537] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e18, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.538] WbemDefPath:IUnknown:AddRef (This=0x7a1e18) returned 0x3
	[0167.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e18, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e18, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e18, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b31c0) returned 0x0
	[0167.538] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b31c0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.538] WbemDefPath:IUnknown:Release (This=0x7b31c0) returned 0x3
	[0167.538] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.538] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.538] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1e18, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.538] WbemDefPath:IUnknown:Release (This=0x7a1e18) returned 0x2
	[0167.538] WbemDefPath:IUnknown:Release (This=0x7a1e18) returned 0x1
	[0167.538] SetEvent (hEvent=0x6e8) returned 1
	[0167.561] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.561] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.561] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a23c8) returned 0x0
	[0167.561] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.561] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a23c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a23c8) returned 0x0
	[0167.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a23c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a23c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.562] WbemDefPath:IUnknown:AddRef (This=0x7a23c8) returned 0x3
	[0167.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a23c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a23c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a23c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b30e8) returned 0x0
	[0167.562] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b30e8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.562] WbemDefPath:IUnknown:Release (This=0x7b30e8) returned 0x3
	[0167.562] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.562] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.563] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a23c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.563] WbemDefPath:IUnknown:Release (This=0x7a23c8) returned 0x2
	[0167.563] WbemDefPath:IUnknown:Release (This=0x7a23c8) returned 0x1
	[0167.563] SetEvent (hEvent=0x6ec) returned 1
	[0167.579] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.580] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.580] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2198) returned 0x0
	[0167.580] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.580] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2198, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2198) returned 0x0
	[0167.580] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2198, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.580] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2198, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.581] WbemDefPath:IUnknown:AddRef (This=0x7a2198) returned 0x3
	[0167.581] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2198, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.581] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2198, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.581] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2198, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b33b8) returned 0x0
	[0167.581] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b33b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.581] WbemDefPath:IUnknown:Release (This=0x7b33b8) returned 0x3
	[0167.581] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.581] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.581] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2198, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.581] WbemDefPath:IUnknown:Release (This=0x7a2198) returned 0x2
	[0167.581] WbemDefPath:IUnknown:Release (This=0x7a2198) returned 0x1
	[0167.581] SetEvent (hEvent=0x6f0) returned 1
	[0167.597] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.597] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1be8) returned 0x0
	[0167.597] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1be8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1be8) returned 0x0
	[0167.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1be8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1be8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.598] WbemDefPath:IUnknown:AddRef (This=0x7a1be8) returned 0x3
	[0167.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1be8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1be8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1be8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b3598) returned 0x0
	[0167.598] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b3598, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.598] WbemDefPath:IUnknown:Release (This=0x7b3598) returned 0x3
	[0167.598] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.598] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1be8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.598] WbemDefPath:IUnknown:Release (This=0x7a1be8) returned 0x2
	[0167.598] WbemDefPath:IUnknown:Release (This=0x7a1be8) returned 0x1
	[0167.598] SetEvent (hEvent=0x6f4) returned 1
	[0167.618] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.618] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.618] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a26d8) returned 0x0
	[0167.618] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.618] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a26d8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a26d8) returned 0x0
	[0167.618] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a26d8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.618] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a26d8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.619] WbemDefPath:IUnknown:AddRef (This=0x7a26d8) returned 0x3
	[0167.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a26d8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a26d8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a26d8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b38b0) returned 0x0
	[0167.619] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b38b0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.619] WbemDefPath:IUnknown:Release (This=0x7b38b0) returned 0x3
	[0167.619] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.619] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.619] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a26d8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.619] WbemDefPath:IUnknown:Release (This=0x7a26d8) returned 0x2
	[0167.619] WbemDefPath:IUnknown:Release (This=0x7a26d8) returned 0x1
	[0167.619] SetEvent (hEvent=0x6f8) returned 1
	[0167.635] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.636] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2358) returned 0x0
	[0167.636] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2358, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2358) returned 0x0
	[0167.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2358, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2358, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.636] WbemDefPath:IUnknown:AddRef (This=0x7a2358) returned 0x3
	[0167.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2358, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2358, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2358, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b3ad8) returned 0x0
	[0167.636] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b3ad8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.636] WbemDefPath:IUnknown:Release (This=0x7b3ad8) returned 0x3
	[0167.637] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.637] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2358, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.637] WbemDefPath:IUnknown:Release (This=0x7a2358) returned 0x2
	[0167.637] WbemDefPath:IUnknown:Release (This=0x7a2358) returned 0x1
	[0167.637] SetEvent (hEvent=0x6fc) returned 1
	[0167.646] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.646] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.646] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2518) returned 0x0
	[0167.646] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.646] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2518, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2518) returned 0x0
	[0167.646] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2518, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.646] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2518, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.647] WbemDefPath:IUnknown:AddRef (This=0x7a2518) returned 0x3
	[0167.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2518, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2518, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2518, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b3a18) returned 0x0
	[0167.647] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b3a18, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.647] WbemDefPath:IUnknown:Release (This=0x7b3a18) returned 0x3
	[0167.647] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.647] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2518, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.647] WbemDefPath:IUnknown:Release (This=0x7a2518) returned 0x2
	[0167.647] WbemDefPath:IUnknown:Release (This=0x7a2518) returned 0x1
	[0167.647] SetEvent (hEvent=0x700) returned 1
	[0167.657] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7830b0) returned 0x0
	[0167.657] WbemDefPath:IUnknown:QueryInterface (in: This=0x7830b0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.657] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7830b0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2748) returned 0x0
	[0167.658] WbemDefPath:IUnknown:Release (This=0x7830b0) returned 0x0
	[0167.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2748, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2748) returned 0x0
	[0167.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2748, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2748, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.658] WbemDefPath:IUnknown:AddRef (This=0x7a2748) returned 0x3
	[0167.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2748, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2748, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2748, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b3c70) returned 0x0
	[0167.658] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b3c70, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.658] WbemDefPath:IUnknown:Release (This=0x7b3c70) returned 0x3
	[0167.658] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.658] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2748, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.658] WbemDefPath:IUnknown:Release (This=0x7a2748) returned 0x2
	[0167.658] WbemDefPath:IUnknown:Release (This=0x7a2748) returned 0x1
	[0167.659] SetEvent (hEvent=0x704) returned 1
	[0167.691] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783060) returned 0x0
	[0167.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x783060, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.692] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783060, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a1cc8) returned 0x0
	[0167.692] WbemDefPath:IUnknown:Release (This=0x783060) returned 0x0
	[0167.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1cc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a1cc8) returned 0x0
	[0167.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1cc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1cc8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.692] WbemDefPath:IUnknown:AddRef (This=0x7a1cc8) returned 0x3
	[0167.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1cc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1cc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1cc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b3e68) returned 0x0
	[0167.693] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b3e68, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.693] WbemDefPath:IUnknown:Release (This=0x7b3e68) returned 0x3
	[0167.693] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.693] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a1cc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.693] WbemDefPath:IUnknown:Release (This=0x7a1cc8) returned 0x2
	[0167.693] WbemDefPath:IUnknown:Release (This=0x7a1cc8) returned 0x1
	[0167.693] SetEvent (hEvent=0x708) returned 1
	[0167.727] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7830b0) returned 0x0
	[0167.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x7830b0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.727] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7830b0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2048) returned 0x0
	[0167.727] WbemDefPath:IUnknown:Release (This=0x7830b0) returned 0x0
	[0167.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2048, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2048) returned 0x0
	[0167.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2048, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2048, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.728] WbemDefPath:IUnknown:AddRef (This=0x7a2048) returned 0x3
	[0167.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2048, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2048, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2048, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b4108) returned 0x0
	[0167.728] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b4108, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.728] WbemDefPath:IUnknown:Release (This=0x7b4108) returned 0x3
	[0167.728] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.728] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2048, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.728] WbemDefPath:IUnknown:Release (This=0x7a2048) returned 0x2
	[0167.728] WbemDefPath:IUnknown:Release (This=0x7a2048) returned 0x1
	[0167.728] SetEvent (hEvent=0x70c) returned 1
	[0167.747] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fa0) returned 0x0
	[0167.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fa0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.748] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fa0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2128) returned 0x0
	[0167.748] WbemDefPath:IUnknown:Release (This=0x782fa0) returned 0x0
	[0167.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2128, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2128) returned 0x0
	[0167.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2128, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2128, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.748] WbemDefPath:IUnknown:AddRef (This=0x7a2128) returned 0x3
	[0167.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2128, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2128, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2128, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b21d0) returned 0x0
	[0167.749] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b21d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.749] WbemDefPath:IUnknown:Release (This=0x7b21d0) returned 0x3
	[0167.749] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.749] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2128, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.749] WbemDefPath:IUnknown:Release (This=0x7a2128) returned 0x2
	[0167.749] WbemDefPath:IUnknown:Release (This=0x7a2128) returned 0x1
	[0167.749] SetEvent (hEvent=0x710) returned 1
	[0167.766] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783080) returned 0x0
	[0167.767] WbemDefPath:IUnknown:QueryInterface (in: This=0x783080, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.767] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783080, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2a58) returned 0x0
	[0167.767] WbemDefPath:IUnknown:Release (This=0x783080) returned 0x0
	[0167.767] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2a58, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2a58) returned 0x0
	[0167.767] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2a58, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.767] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2a58, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.767] WbemDefPath:IUnknown:AddRef (This=0x7a2a58) returned 0x3
	[0167.768] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2a58, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.768] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2a58, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.768] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2a58, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b2278) returned 0x0
	[0167.768] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b2278, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.768] WbemDefPath:IUnknown:Release (This=0x7b2278) returned 0x3
	[0167.768] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.768] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.768] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2a58, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.768] WbemDefPath:IUnknown:Release (This=0x7a2a58) returned 0x2
	[0167.768] WbemDefPath:IUnknown:Release (This=0x7a2a58) returned 0x1
	[0167.768] SetEvent (hEvent=0x714) returned 1
	[0167.789] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0167.789] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.789] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2b38) returned 0x0
	[0167.789] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0167.789] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2b38, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2b38) returned 0x0
	[0167.789] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2b38, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2b38, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.790] WbemDefPath:IUnknown:AddRef (This=0x7a2b38) returned 0x3
	[0167.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2b38, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2b38, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2b38, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b2548) returned 0x0
	[0167.790] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b2548, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.790] WbemDefPath:IUnknown:Release (This=0x7b2548) returned 0x3
	[0167.790] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.790] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.790] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2b38, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.790] WbemDefPath:IUnknown:Release (This=0x7a2b38) returned 0x2
	[0167.790] WbemDefPath:IUnknown:Release (This=0x7a2b38) returned 0x1
	[0167.790] SetEvent (hEvent=0x718) returned 1
	[0167.816] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fe0) returned 0x0
	[0167.816] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.816] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fe0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a2ac8) returned 0x0
	[0167.817] WbemDefPath:IUnknown:Release (This=0x782fe0) returned 0x0
	[0167.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2ac8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a2ac8) returned 0x0
	[0167.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2ac8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2ac8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.817] WbemDefPath:IUnknown:AddRef (This=0x7a2ac8) returned 0x3
	[0167.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2ac8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2ac8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2ac8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b2a40) returned 0x0
	[0167.817] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b2a40, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.817] WbemDefPath:IUnknown:Release (This=0x7b2a40) returned 0x3
	[0167.817] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.817] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.818] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a2ac8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.818] WbemDefPath:IUnknown:Release (This=0x7a2ac8) returned 0x2
	[0167.818] WbemDefPath:IUnknown:Release (This=0x7a2ac8) returned 0x1
	[0167.818] SetEvent (hEvent=0x71c) returned 1
	[0167.945] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783000) returned 0x0
	[0167.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x783000, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0167.945] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783000, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7a29e8) returned 0x0
	[0167.946] WbemDefPath:IUnknown:Release (This=0x783000) returned 0x0
	[0167.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a29e8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7a29e8) returned 0x0
	[0167.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a29e8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0167.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a29e8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0167.946] WbemDefPath:IUnknown:AddRef (This=0x7a29e8) returned 0x3
	[0167.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a29e8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0167.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a29e8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0167.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a29e8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b2890) returned 0x0
	[0167.947] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b2890, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0167.947] WbemDefPath:IUnknown:Release (This=0x7b2890) returned 0x3
	[0167.947] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0167.947] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0167.947] WbemDefPath:IUnknown:QueryInterface (in: This=0x7a29e8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0167.947] WbemDefPath:IUnknown:Release (This=0x7a29e8) returned 0x2
	[0167.947] WbemDefPath:IUnknown:Release (This=0x7a29e8) returned 0x1
	[0167.947] SetEvent (hEvent=0x720) returned 1
	[0168.209] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fa0) returned 0x0
	[0168.210] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fa0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.210] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fa0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bca48) returned 0x0
	[0168.211] WbemDefPath:IUnknown:Release (This=0x782fa0) returned 0x0
	[0168.211] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bca48, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bca48) returned 0x0
	[0168.211] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bca48, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.211] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bca48, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.211] WbemDefPath:IUnknown:AddRef (This=0x7bca48) returned 0x3
	[0168.211] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bca48, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.211] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bca48, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.211] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bca48, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b2ba8) returned 0x0
	[0168.211] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b2ba8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.211] WbemDefPath:IUnknown:Release (This=0x7b2ba8) returned 0x3
	[0168.211] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.234] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.234] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bca48, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.234] WbemDefPath:IUnknown:Release (This=0x7bca48) returned 0x2
	[0168.235] WbemDefPath:IUnknown:Release (This=0x7bca48) returned 0x1
	[0168.235] SetEvent (hEvent=0x724) returned 1
	[0168.252] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783060) returned 0x0
	[0168.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x783060, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.252] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783060, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bc8f8) returned 0x0
	[0168.253] WbemDefPath:IUnknown:Release (This=0x783060) returned 0x0
	[0168.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc8f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bc8f8) returned 0x0
	[0168.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc8f8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc8f8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.253] WbemDefPath:IUnknown:AddRef (This=0x7bc8f8) returned 0x3
	[0168.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc8f8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc8f8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc8f8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b2c38) returned 0x0
	[0168.253] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b2c38, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.253] WbemDefPath:IUnknown:Release (This=0x7b2c38) returned 0x3
	[0168.253] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.253] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc8f8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.253] WbemDefPath:IUnknown:Release (This=0x7bc8f8) returned 0x2
	[0168.253] WbemDefPath:IUnknown:Release (This=0x7bc8f8) returned 0x1
	[0168.253] SetEvent (hEvent=0x728) returned 1
	[0168.273] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0168.273] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.273] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd3e8) returned 0x0
	[0168.273] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0168.273] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd3e8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd3e8) returned 0x0
	[0168.274] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd3e8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.274] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd3e8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.274] WbemDefPath:IUnknown:AddRef (This=0x7bd3e8) returned 0x3
	[0168.274] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd3e8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.274] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd3e8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.274] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd3e8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b2fe0) returned 0x0
	[0168.274] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b2fe0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.274] WbemDefPath:IUnknown:Release (This=0x7b2fe0) returned 0x3
	[0168.274] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.274] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.274] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd3e8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.274] WbemDefPath:IUnknown:Release (This=0x7bd3e8) returned 0x2
	[0168.274] WbemDefPath:IUnknown:Release (This=0x7bd3e8) returned 0x1
	[0168.275] SetEvent (hEvent=0x72c) returned 1
	[0168.297] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fc0) returned 0x0
	[0168.297] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fc0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.297] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fc0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcb28) returned 0x0
	[0168.297] WbemDefPath:IUnknown:Release (This=0x782fc0) returned 0x0
	[0168.298] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb28, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcb28) returned 0x0
	[0168.298] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb28, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.298] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb28, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.298] WbemDefPath:IUnknown:AddRef (This=0x7bcb28) returned 0x3
	[0168.298] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb28, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.298] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb28, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.298] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb28, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7b2db8) returned 0x0
	[0168.298] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7b2db8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.298] WbemDefPath:IUnknown:Release (This=0x7b2db8) returned 0x3
	[0168.298] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.298] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.298] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb28, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.299] WbemDefPath:IUnknown:Release (This=0x7bcb28) returned 0x2
	[0168.299] WbemDefPath:IUnknown:Release (This=0x7bcb28) returned 0x1
	[0168.299] SetEvent (hEvent=0x730) returned 1
	[0168.316] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783080) returned 0x0
	[0168.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x783080, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.317] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783080, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bc888) returned 0x0
	[0168.317] WbemDefPath:IUnknown:Release (This=0x783080) returned 0x0
	[0168.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc888, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bc888) returned 0x0
	[0168.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc888, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc888, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.317] WbemDefPath:IUnknown:AddRef (This=0x7bc888) returned 0x3
	[0168.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc888, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc888, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc888, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bdfc8) returned 0x0
	[0168.317] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bdfc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.317] WbemDefPath:IUnknown:Release (This=0x7bdfc8) returned 0x3
	[0168.318] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.318] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.318] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc888, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.318] WbemDefPath:IUnknown:Release (This=0x7bc888) returned 0x2
	[0168.318] WbemDefPath:IUnknown:Release (This=0x7bc888) returned 0x1
	[0168.318] SetEvent (hEvent=0x734) returned 1
	[0168.346] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fa0) returned 0x0
	[0168.346] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fa0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.346] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fa0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd308) returned 0x0
	[0168.346] WbemDefPath:IUnknown:Release (This=0x782fa0) returned 0x0
	[0168.346] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd308, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd308) returned 0x0
	[0168.346] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd308, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.346] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd308, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.347] WbemDefPath:IUnknown:AddRef (This=0x7bd308) returned 0x3
	[0168.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd308, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd308, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd308, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bdd70) returned 0x0
	[0168.347] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bdd70, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.347] WbemDefPath:IUnknown:Release (This=0x7bdd70) returned 0x3
	[0168.347] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.347] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd308, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.347] WbemDefPath:IUnknown:Release (This=0x7bd308) returned 0x2
	[0168.347] WbemDefPath:IUnknown:Release (This=0x7bd308) returned 0x1
	[0168.347] SetEvent (hEvent=0x738) returned 1
	[0168.372] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783050) returned 0x0
	[0168.372] WbemDefPath:IUnknown:QueryInterface (in: This=0x783050, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.372] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783050, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd0d8) returned 0x0
	[0168.372] WbemDefPath:IUnknown:Release (This=0x783050) returned 0x0
	[0168.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd0d8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd0d8) returned 0x0
	[0168.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd0d8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd0d8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.373] WbemDefPath:IUnknown:AddRef (This=0x7bd0d8) returned 0x3
	[0168.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd0d8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd0d8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd0d8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7be1f0) returned 0x0
	[0168.373] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7be1f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.373] WbemDefPath:IUnknown:Release (This=0x7be1f0) returned 0x3
	[0168.373] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.373] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.374] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd0d8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.374] WbemDefPath:IUnknown:Release (This=0x7bd0d8) returned 0x2
	[0168.374] WbemDefPath:IUnknown:Release (This=0x7bd0d8) returned 0x1
	[0168.374] SetEvent (hEvent=0x73c) returned 1
	[0168.404] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0168.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.405] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd458) returned 0x0
	[0168.405] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0168.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd458, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd458) returned 0x0
	[0168.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd458, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd458, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.405] WbemDefPath:IUnknown:AddRef (This=0x7bd458) returned 0x3
	[0168.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd458, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd458, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd458, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7be580) returned 0x0
	[0168.406] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7be580, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.406] WbemDefPath:IUnknown:Release (This=0x7be580) returned 0x3
	[0168.406] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.406] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.406] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd458, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.406] WbemDefPath:IUnknown:Release (This=0x7bd458) returned 0x2
	[0168.406] WbemDefPath:IUnknown:Release (This=0x7bd458) returned 0x1
	[0168.406] SetEvent (hEvent=0x740) returned 1
	[0168.444] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783030) returned 0x0
	[0168.444] WbemDefPath:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.444] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcab8) returned 0x0
	[0168.445] WbemDefPath:IUnknown:Release (This=0x783030) returned 0x0
	[0168.445] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcab8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcab8) returned 0x0
	[0168.445] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcab8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.445] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcab8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.445] WbemDefPath:IUnknown:AddRef (This=0x7bcab8) returned 0x3
	[0168.445] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcab8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.446] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcab8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.446] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcab8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7be508) returned 0x0
	[0168.446] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7be508, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.446] WbemDefPath:IUnknown:Release (This=0x7be508) returned 0x3
	[0168.446] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.446] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.446] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcab8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.446] WbemDefPath:IUnknown:Release (This=0x7bcab8) returned 0x2
	[0168.446] WbemDefPath:IUnknown:Release (This=0x7bcab8) returned 0x1
	[0168.446] SetEvent (hEvent=0x744) returned 1
	[0168.534] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783020) returned 0x0
	[0168.534] WbemDefPath:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.534] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783020, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd4c8) returned 0x0
	[0168.534] WbemDefPath:IUnknown:Release (This=0x783020) returned 0x0
	[0168.534] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd4c8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd4c8) returned 0x0
	[0168.534] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd4c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.535] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd4c8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.535] WbemDefPath:IUnknown:AddRef (This=0x7bd4c8) returned 0x3
	[0168.535] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd4c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.535] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd4c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.535] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd4c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7be7d8) returned 0x0
	[0168.535] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7be7d8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.535] WbemDefPath:IUnknown:Release (This=0x7be7d8) returned 0x3
	[0168.535] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.535] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.535] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd4c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.535] WbemDefPath:IUnknown:Release (This=0x7bd4c8) returned 0x2
	[0168.535] WbemDefPath:IUnknown:Release (This=0x7bd4c8) returned 0x1
	[0168.535] SetEvent (hEvent=0x748) returned 1
	[0168.558] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0168.559] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.559] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bce38) returned 0x0
	[0168.559] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0168.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bce38, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bce38) returned 0x0
	[0168.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bce38, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bce38, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.560] WbemDefPath:IUnknown:AddRef (This=0x7bce38) returned 0x3
	[0168.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bce38, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bce38, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bce38, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7be730) returned 0x0
	[0168.560] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7be730, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.561] WbemDefPath:IUnknown:Release (This=0x7be730) returned 0x3
	[0168.561] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.561] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.561] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bce38, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.561] WbemDefPath:IUnknown:Release (This=0x7bce38) returned 0x2
	[0168.561] WbemDefPath:IUnknown:Release (This=0x7bce38) returned 0x1
	[0168.561] SetEvent (hEvent=0x74c) returned 1
	[0168.597] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fd0) returned 0x0
	[0168.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fd0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.597] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fd0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd148) returned 0x0
	[0168.597] WbemDefPath:IUnknown:Release (This=0x782fd0) returned 0x0
	[0168.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd148, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd148) returned 0x0
	[0168.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd148, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd148, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.598] WbemDefPath:IUnknown:AddRef (This=0x7bd148) returned 0x3
	[0168.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd148, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd148, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd148, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bea60) returned 0x0
	[0168.598] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bea60, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.598] WbemDefPath:IUnknown:Release (This=0x7bea60) returned 0x3
	[0168.598] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.598] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd148, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.598] WbemDefPath:IUnknown:Release (This=0x7bd148) returned 0x2
	[0168.598] WbemDefPath:IUnknown:Release (This=0x7bd148) returned 0x1
	[0168.598] SetEvent (hEvent=0x750) returned 1
	[0168.616] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782f80) returned 0x0
	[0168.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x782f80, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.617] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782f80, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd1b8) returned 0x0
	[0168.617] WbemDefPath:IUnknown:Release (This=0x782f80) returned 0x0
	[0168.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd1b8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd1b8) returned 0x0
	[0168.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd1b8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd1b8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.617] WbemDefPath:IUnknown:AddRef (This=0x7bd1b8) returned 0x3
	[0168.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd1b8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd1b8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd1b8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7be9e8) returned 0x0
	[0168.618] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7be9e8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.618] WbemDefPath:IUnknown:Release (This=0x7be9e8) returned 0x3
	[0168.618] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.618] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.618] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd1b8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.618] WbemDefPath:IUnknown:Release (This=0x7bd1b8) returned 0x2
	[0168.618] WbemDefPath:IUnknown:Release (This=0x7bd1b8) returned 0x1
	[0168.618] SetEvent (hEvent=0x754) returned 1
	[0168.636] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fd0) returned 0x0
	[0168.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fd0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.637] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fd0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcb98) returned 0x0
	[0168.637] WbemDefPath:IUnknown:Release (This=0x782fd0) returned 0x0
	[0168.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb98, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcb98) returned 0x0
	[0168.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb98, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb98, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.637] WbemDefPath:IUnknown:AddRef (This=0x7bcb98) returned 0x3
	[0168.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb98, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb98, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb98, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bee38) returned 0x0
	[0168.637] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bee38, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.638] WbemDefPath:IUnknown:Release (This=0x7bee38) returned 0x3
	[0168.638] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.638] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.638] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcb98, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.638] WbemDefPath:IUnknown:Release (This=0x7bcb98) returned 0x2
	[0168.638] WbemDefPath:IUnknown:Release (This=0x7bcb98) returned 0x1
	[0168.638] SetEvent (hEvent=0x758) returned 1
	[0168.654] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783030) returned 0x0
	[0168.654] WbemDefPath:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.654] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd538) returned 0x0
	[0168.654] WbemDefPath:IUnknown:Release (This=0x783030) returned 0x0
	[0168.654] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd538, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd538) returned 0x0
	[0168.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd538, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd538, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.655] WbemDefPath:IUnknown:AddRef (This=0x7bd538) returned 0x3
	[0168.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd538, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd538, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd538, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bf000) returned 0x0
	[0168.655] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bf000, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.655] WbemDefPath:IUnknown:Release (This=0x7bf000) returned 0x3
	[0168.655] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.655] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd538, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.655] WbemDefPath:IUnknown:Release (This=0x7bd538) returned 0x2
	[0168.655] WbemDefPath:IUnknown:Release (This=0x7bd538) returned 0x1
	[0168.655] SetEvent (hEvent=0x75c) returned 1
	[0168.671] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fe0) returned 0x0
	[0168.671] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.671] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fe0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd228) returned 0x0
	[0168.671] WbemDefPath:IUnknown:Release (This=0x782fe0) returned 0x0
	[0168.671] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd228, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd228) returned 0x0
	[0168.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd228, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd228, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.672] WbemDefPath:IUnknown:AddRef (This=0x7bd228) returned 0x3
	[0168.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd228, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd228, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd228, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bf090) returned 0x0
	[0168.672] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bf090, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.672] WbemDefPath:IUnknown:Release (This=0x7bf090) returned 0x3
	[0168.672] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.672] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd228, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.674] WbemDefPath:IUnknown:Release (This=0x7bd228) returned 0x2
	[0168.674] WbemDefPath:IUnknown:Release (This=0x7bd228) returned 0x1
	[0168.674] SetEvent (hEvent=0x760) returned 1
	[0168.816] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0168.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.817] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd298) returned 0x0
	[0168.817] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0168.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd298, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd298) returned 0x0
	[0168.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd298, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd298, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.817] WbemDefPath:IUnknown:AddRef (This=0x7bd298) returned 0x3
	[0168.817] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd298, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.818] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd298, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.818] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd298, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bf3d8) returned 0x0
	[0168.818] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bf3d8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.818] WbemDefPath:IUnknown:Release (This=0x7bf3d8) returned 0x3
	[0168.818] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.818] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.818] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd298, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.818] WbemDefPath:IUnknown:Release (This=0x7bd298) returned 0x2
	[0168.818] WbemDefPath:IUnknown:Release (This=0x7bd298) returned 0x1
	[0168.818] SetEvent (hEvent=0x764) returned 1
	[0168.837] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0168.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.838] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bc7a8) returned 0x0
	[0168.838] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0168.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc7a8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bc7a8) returned 0x0
	[0168.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc7a8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc7a8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.838] WbemDefPath:IUnknown:AddRef (This=0x7bc7a8) returned 0x3
	[0168.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc7a8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc7a8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc7a8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bf270) returned 0x0
	[0168.839] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bf270, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.839] WbemDefPath:IUnknown:Release (This=0x7bf270) returned 0x3
	[0168.839] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.839] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.839] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc7a8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.839] WbemDefPath:IUnknown:Release (This=0x7bc7a8) returned 0x2
	[0168.839] WbemDefPath:IUnknown:Release (This=0x7bc7a8) returned 0x1
	[0168.839] SetEvent (hEvent=0x768) returned 1
	[0168.856] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783080) returned 0x0
	[0168.856] WbemDefPath:IUnknown:QueryInterface (in: This=0x783080, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.856] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783080, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd378) returned 0x0
	[0168.857] WbemDefPath:IUnknown:Release (This=0x783080) returned 0x0
	[0168.857] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd378, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd378) returned 0x0
	[0168.857] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd378, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.857] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd378, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.857] WbemDefPath:IUnknown:AddRef (This=0x7bd378) returned 0x3
	[0168.857] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd378, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.857] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd378, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.857] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd378, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bf5a0) returned 0x0
	[0168.857] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bf5a0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.857] WbemDefPath:IUnknown:Release (This=0x7bf5a0) returned 0x3
	[0168.857] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.858] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.858] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd378, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.858] WbemDefPath:IUnknown:Release (This=0x7bd378) returned 0x2
	[0168.858] WbemDefPath:IUnknown:Release (This=0x7bd378) returned 0x1
	[0168.858] SetEvent (hEvent=0x76c) returned 1
	[0168.881] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fc0) returned 0x0
	[0168.882] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fc0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.882] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fc0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bc968) returned 0x0
	[0168.882] WbemDefPath:IUnknown:Release (This=0x782fc0) returned 0x0
	[0168.882] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc968, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bc968) returned 0x0
	[0168.882] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc968, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.882] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc968, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.882] WbemDefPath:IUnknown:AddRef (This=0x7bc968) returned 0x3
	[0168.882] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc968, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.882] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc968, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.882] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc968, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bf738) returned 0x0
	[0168.883] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bf738, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.883] WbemDefPath:IUnknown:Release (This=0x7bf738) returned 0x3
	[0168.883] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.883] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc968, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.883] WbemDefPath:IUnknown:Release (This=0x7bc968) returned 0x2
	[0168.883] WbemDefPath:IUnknown:Release (This=0x7bc968) returned 0x1
	[0168.883] SetEvent (hEvent=0x770) returned 1
	[0168.907] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fe0) returned 0x0
	[0168.907] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.907] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fe0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bc818) returned 0x0
	[0168.907] WbemDefPath:IUnknown:Release (This=0x782fe0) returned 0x0
	[0168.907] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc818, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bc818) returned 0x0
	[0168.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc818, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc818, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.908] WbemDefPath:IUnknown:AddRef (This=0x7bc818) returned 0x3
	[0168.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc818, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc818, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc818, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bf8d0) returned 0x0
	[0168.908] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bf8d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.908] WbemDefPath:IUnknown:Release (This=0x7bf8d0) returned 0x3
	[0168.908] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.908] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.908] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc818, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.908] WbemDefPath:IUnknown:Release (This=0x7bc818) returned 0x2
	[0168.909] WbemDefPath:IUnknown:Release (This=0x7bc818) returned 0x1
	[0168.909] SetEvent (hEvent=0x774) returned 1
	[0168.926] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783040) returned 0x0
	[0168.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x783040, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0168.927] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783040, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bc9d8) returned 0x0
	[0168.927] WbemDefPath:IUnknown:Release (This=0x783040) returned 0x0
	[0168.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc9d8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bc9d8) returned 0x0
	[0168.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc9d8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0168.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc9d8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0168.927] WbemDefPath:IUnknown:AddRef (This=0x7bc9d8) returned 0x3
	[0168.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc9d8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0168.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc9d8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0168.927] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc9d8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bf930) returned 0x0
	[0168.927] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bf930, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0168.928] WbemDefPath:IUnknown:Release (This=0x7bf930) returned 0x3
	[0168.928] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0168.928] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0168.928] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bc9d8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0168.928] WbemDefPath:IUnknown:Release (This=0x7bc9d8) returned 0x2
	[0168.928] WbemDefPath:IUnknown:Release (This=0x7bc9d8) returned 0x1
	[0168.928] SetEvent (hEvent=0x778) returned 1
	[0169.075] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783010) returned 0x0
	[0169.075] WbemDefPath:IUnknown:QueryInterface (in: This=0x783010, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0169.075] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783010, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcea8) returned 0x0
	[0169.076] WbemDefPath:IUnknown:Release (This=0x783010) returned 0x0
	[0169.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcea8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcea8) returned 0x0
	[0169.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcea8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0169.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcea8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0169.076] WbemDefPath:IUnknown:AddRef (This=0x7bcea8) returned 0x3
	[0169.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcea8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0169.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcea8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0169.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcea8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x7bfba0) returned 0x0
	[0169.076] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7bfba0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0169.076] WbemDefPath:IUnknown:Release (This=0x7bfba0) returned 0x3
	[0169.076] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0169.077] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0169.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcea8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0169.077] WbemDefPath:IUnknown:Release (This=0x7bcea8) returned 0x2
	[0169.077] WbemDefPath:IUnknown:Release (This=0x7bcea8) returned 0x1
	[0169.077] SetEvent (hEvent=0x77c) returned 1
	[0169.295] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783010) returned 0x0
	[0169.295] WbemDefPath:IUnknown:QueryInterface (in: This=0x783010, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0169.295] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783010, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcc08) returned 0x0
	[0169.295] WbemDefPath:IUnknown:Release (This=0x783010) returned 0x0
	[0169.295] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc08, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcc08) returned 0x0
	[0169.296] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc08, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0169.296] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc08, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0169.296] WbemDefPath:IUnknown:AddRef (This=0x7bcc08) returned 0x3
	[0169.296] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc08, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0169.296] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc08, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0169.296] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc08, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a1100) returned 0x0
	[0169.296] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a1100, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0169.296] WbemDefPath:IUnknown:Release (This=0x55a1100) returned 0x3
	[0169.296] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0169.296] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0169.296] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc08, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0169.297] WbemDefPath:IUnknown:Release (This=0x7bcc08) returned 0x2
	[0169.297] WbemDefPath:IUnknown:Release (This=0x7bcc08) returned 0x1
	[0169.297] SetEvent (hEvent=0x780) returned 1
	[0169.375] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0169.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0169.376] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcc78) returned 0x0
	[0169.376] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0169.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc78, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcc78) returned 0x0
	[0169.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc78, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0169.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc78, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0169.377] WbemDefPath:IUnknown:AddRef (This=0x7bcc78) returned 0x3
	[0169.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc78, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0169.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc78, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0169.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc78, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a12f8) returned 0x0
	[0169.377] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a12f8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0169.377] WbemDefPath:IUnknown:Release (This=0x55a12f8) returned 0x3
	[0169.377] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0169.377] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0169.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcc78, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0169.377] WbemDefPath:IUnknown:Release (This=0x7bcc78) returned 0x2
	[0169.377] WbemDefPath:IUnknown:Release (This=0x7bcc78) returned 0x1
	[0169.377] SetEvent (hEvent=0x784) returned 1
	[0169.419] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783170) returned 0x0
	[0169.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x783170, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0169.420] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783170, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcce8) returned 0x0
	[0169.420] WbemDefPath:IUnknown:Release (This=0x783170) returned 0x0
	[0169.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcce8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcce8) returned 0x0
	[0169.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcce8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0169.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcce8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0169.420] WbemDefPath:IUnknown:AddRef (This=0x7bcce8) returned 0x3
	[0169.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcce8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0169.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcce8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0169.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcce8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a1568) returned 0x0
	[0169.421] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a1568, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0169.421] WbemDefPath:IUnknown:Release (This=0x55a1568) returned 0x3
	[0169.421] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0169.421] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0169.421] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcce8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0169.421] WbemDefPath:IUnknown:Release (This=0x7bcce8) returned 0x2
	[0169.421] WbemDefPath:IUnknown:Release (This=0x7bcce8) returned 0x1
	[0169.421] SetEvent (hEvent=0x788) returned 1
	[0170.749] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783030) returned 0x0
	[0170.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0170.750] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcd58) returned 0x0
	[0170.750] WbemDefPath:IUnknown:Release (This=0x783030) returned 0x0
	[0170.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcd58, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcd58) returned 0x0
	[0170.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcd58, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0170.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcd58, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0170.751] WbemDefPath:IUnknown:AddRef (This=0x7bcd58) returned 0x3
	[0170.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcd58, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0170.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcd58, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0170.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcd58, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a1658) returned 0x0
	[0170.751] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a1658, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0170.751] WbemDefPath:IUnknown:Release (This=0x55a1658) returned 0x3
	[0170.751] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0170.751] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0170.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcd58, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0170.751] WbemDefPath:IUnknown:Release (This=0x7bcd58) returned 0x2
	[0170.751] WbemDefPath:IUnknown:Release (This=0x7bcd58) returned 0x1
	[0170.751] SetEvent (hEvent=0x7a0) returned 1
	[0170.762] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x782fa0) returned 0x0
	[0170.762] WbemDefPath:IUnknown:QueryInterface (in: This=0x782fa0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0170.762] WbemDefPath:IClassFactory:CreateInstance (in: This=0x782fa0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcf18) returned 0x0
	[0170.762] WbemDefPath:IUnknown:Release (This=0x782fa0) returned 0x0
	[0170.762] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf18, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcf18) returned 0x0
	[0170.762] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf18, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0170.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf18, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0170.763] WbemDefPath:IUnknown:AddRef (This=0x7bcf18) returned 0x3
	[0170.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf18, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0170.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf18, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0170.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf18, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a1760) returned 0x0
	[0170.763] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a1760, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0170.763] WbemDefPath:IUnknown:Release (This=0x55a1760) returned 0x3
	[0170.763] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0170.763] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0170.763] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf18, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0170.763] WbemDefPath:IUnknown:Release (This=0x7bcf18) returned 0x2
	[0170.763] WbemDefPath:IUnknown:Release (This=0x7bcf18) returned 0x1
	[0170.763] SetEvent (hEvent=0x7a4) returned 1
	[0170.905] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783200) returned 0x0
	[0170.905] WbemDefPath:IUnknown:QueryInterface (in: This=0x783200, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0170.905] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783200, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcf88) returned 0x0
	[0170.905] WbemDefPath:IUnknown:Release (This=0x783200) returned 0x0
	[0170.905] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf88, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcf88) returned 0x0
	[0170.905] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf88, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0170.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf88, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0170.906] WbemDefPath:IUnknown:AddRef (This=0x7bcf88) returned 0x3
	[0170.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf88, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0170.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf88, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0170.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf88, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a1af0) returned 0x0
	[0170.906] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a1af0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0170.906] WbemDefPath:IUnknown:Release (This=0x55a1af0) returned 0x3
	[0170.906] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0170.906] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0170.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcf88, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0170.906] WbemDefPath:IUnknown:Release (This=0x7bcf88) returned 0x2
	[0170.906] WbemDefPath:IUnknown:Release (This=0x7bcf88) returned 0x1
	[0170.906] SetEvent (hEvent=0x7bc) returned 1
	[0171.675] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783320) returned 0x0
	[0171.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x783320, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0171.675] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783320, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd068) returned 0x0
	[0171.675] WbemDefPath:IUnknown:Release (This=0x783320) returned 0x0
	[0171.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd068, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd068) returned 0x0
	[0171.676] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd068, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0171.676] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd068, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0171.676] WbemDefPath:IUnknown:AddRef (This=0x7bd068) returned 0x3
	[0171.676] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd068, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0171.676] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd068, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0171.676] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd068, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a1b08) returned 0x0
	[0171.676] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a1b08, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0171.676] WbemDefPath:IUnknown:Release (This=0x55a1b08) returned 0x3
	[0171.676] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0171.676] CoGetContextToken (in: pToken=0x139e9f8 | out: pToken=0x139e9f8) returned 0x0
	[0171.676] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0171.676] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd068, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0171.676] WbemDefPath:IUnknown:Release (This=0x7bd068) returned 0x2
	[0171.676] WbemDefPath:IUnknown:Release (This=0x7bd068) returned 0x1
	[0171.676] SetEvent (hEvent=0x7c4) returned 1
	[0173.107] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783050) returned 0x0
	[0173.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x783050, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0173.108] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783050, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bcff8) returned 0x0
	[0173.109] WbemDefPath:IUnknown:Release (This=0x783050) returned 0x0
	[0173.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcff8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bcff8) returned 0x0
	[0173.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcff8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0173.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcff8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0173.109] WbemDefPath:IUnknown:AddRef (This=0x7bcff8) returned 0x3
	[0173.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcff8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0173.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcff8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0173.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcff8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a1940) returned 0x0
	[0173.110] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a1940, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.110] WbemDefPath:IUnknown:Release (This=0x55a1940) returned 0x3
	[0173.110] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0173.110] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0173.110] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bcff8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0173.110] WbemDefPath:IUnknown:Release (This=0x7bcff8) returned 0x2
	[0173.110] WbemDefPath:IUnknown:Release (This=0x7bcff8) returned 0x1
	[0173.110] SetEvent (hEvent=0x7b4) returned 1
	[0173.121] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783020) returned 0x0
	[0173.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0173.122] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783020, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd5a8) returned 0x0
	[0173.122] WbemDefPath:IUnknown:Release (This=0x783020) returned 0x0
	[0173.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd5a8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd5a8) returned 0x0
	[0173.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd5a8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0173.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd5a8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0173.122] WbemDefPath:IUnknown:AddRef (This=0x7bd5a8) returned 0x3
	[0173.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd5a8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0173.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd5a8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0173.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd5a8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a1c10) returned 0x0
	[0173.122] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a1c10, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.122] WbemDefPath:IUnknown:Release (This=0x55a1c10) returned 0x3
	[0173.122] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0173.123] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0173.123] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd5a8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0173.123] WbemDefPath:IUnknown:Release (This=0x7bd5a8) returned 0x2
	[0173.123] WbemDefPath:IUnknown:Release (This=0x7bd5a8) returned 0x1
	[0173.123] SetEvent (hEvent=0x7b0) returned 1
	[0173.455] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7832e0) returned 0x0
	[0173.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x7832e0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0173.456] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7832e0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd618) returned 0x0
	[0173.456] WbemDefPath:IUnknown:Release (This=0x7832e0) returned 0x0
	[0173.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd618, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd618) returned 0x0
	[0173.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd618, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0173.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd618, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0173.457] WbemDefPath:IUnknown:AddRef (This=0x7bd618) returned 0x3
	[0173.457] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd618, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0173.457] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd618, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0173.457] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd618, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a0128) returned 0x0
	[0173.457] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a0128, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.457] WbemDefPath:IUnknown:Release (This=0x55a0128) returned 0x3
	[0173.457] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0173.457] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0173.457] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd618, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0173.457] WbemDefPath:IUnknown:Release (This=0x7bd618) returned 0x2
	[0173.458] WbemDefPath:IUnknown:Release (This=0x7bd618) returned 0x1
	[0173.458] SetEvent (hEvent=0x790) returned 1
	[0173.697] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x783280) returned 0x0
	[0173.698] WbemDefPath:IUnknown:QueryInterface (in: This=0x783280, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0173.698] WbemDefPath:IClassFactory:CreateInstance (in: This=0x783280, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x7bd688) returned 0x0
	[0173.698] WbemDefPath:IUnknown:Release (This=0x783280) returned 0x0
	[0173.698] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd688, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x7bd688) returned 0x0
	[0173.698] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd688, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0173.698] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd688, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0173.699] WbemDefPath:IUnknown:AddRef (This=0x7bd688) returned 0x3
	[0173.699] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd688, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0173.699] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd688, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0173.699] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd688, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a0230) returned 0x0
	[0173.699] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a0230, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.699] WbemDefPath:IUnknown:Release (This=0x55a0230) returned 0x3
	[0173.699] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0173.699] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0173.699] WbemDefPath:IUnknown:QueryInterface (in: This=0x7bd688, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0173.699] WbemDefPath:IUnknown:Release (This=0x7bd688) returned 0x2
	[0173.699] WbemDefPath:IUnknown:Release (This=0x7bd688) returned 0x1
	[0173.700] SetEvent (hEvent=0x78c) returned 1
	[0175.083] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7832e0) returned 0x0
	[0175.083] WbemDefPath:IUnknown:QueryInterface (in: This=0x7832e0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0175.083] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7832e0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x795ef8) returned 0x0
	[0175.084] WbemDefPath:IUnknown:Release (This=0x7832e0) returned 0x0
	[0175.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x795ef8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x795ef8) returned 0x0
	[0175.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x795ef8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0175.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x795ef8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0175.084] WbemDefPath:IUnknown:AddRef (This=0x795ef8) returned 0x3
	[0175.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x795ef8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0175.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x795ef8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0175.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x795ef8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a03e0) returned 0x0
	[0175.085] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a03e0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0175.085] WbemDefPath:IUnknown:Release (This=0x55a03e0) returned 0x3
	[0175.085] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0175.085] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0175.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x795ef8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0175.085] WbemDefPath:IUnknown:Release (This=0x795ef8) returned 0x2
	[0175.085] WbemDefPath:IUnknown:Release (This=0x795ef8) returned 0x1
	[0175.085] SetEvent (hEvent=0x5d4) returned 1
	[0175.115] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x7831c0) returned 0x0
	[0175.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x7831c0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0175.116] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7831c0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x796128) returned 0x0
	[0175.116] WbemDefPath:IUnknown:Release (This=0x7831c0) returned 0x0
	[0175.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x796128, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x796128) returned 0x0
	[0175.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x796128, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0175.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x796128, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0175.116] WbemDefPath:IUnknown:AddRef (This=0x796128) returned 0x3
	[0175.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x796128, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0175.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x796128, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0175.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x796128, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a0668) returned 0x0
	[0175.117] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a0668, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0175.117] WbemDefPath:IUnknown:Release (This=0x55a0668) returned 0x3
	[0175.117] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0175.117] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0175.117] WbemDefPath:IUnknown:QueryInterface (in: This=0x796128, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0175.117] WbemDefPath:IUnknown:Release (This=0x796128) returned 0x2
	[0175.117] WbemDefPath:IUnknown:Release (This=0x796128) returned 0x1
	[0175.117] SetEvent (hEvent=0x5b4) returned 1
	[0175.446] CoGetClassObject (in: rclsid=0x6ebf84*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x139f2c8 | out: ppv=0x139f2c8*=0x754968) returned 0x0
	[0175.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x754968, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x139f4e0 | out: ppvObject=0x139f4e0*=0x0) returned 0x80004002
	[0175.447] WbemDefPath:IClassFactory:CreateInstance (in: This=0x754968, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f4f4 | out: ppvObject=0x139f4f4*=0x796198) returned 0x0
	[0175.447] WbemDefPath:IUnknown:Release (This=0x754968) returned 0x0
	[0175.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x796198, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139f114 | out: ppvObject=0x139f114*=0x796198) returned 0x0
	[0175.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x796198, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x139f0d0 | out: ppvObject=0x139f0d0*=0x0) returned 0x80004002
	[0175.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x796198, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x139ecc4 | out: ppvObject=0x139ecc4*=0x0) returned 0x80004002
	[0175.448] WbemDefPath:IUnknown:AddRef (This=0x796198) returned 0x3
	[0175.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x796198, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x139ea2c | out: ppvObject=0x139ea2c*=0x0) returned 0x80004002
	[0175.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x796198, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x139e9dc | out: ppvObject=0x139e9dc*=0x0) returned 0x80004002
	[0175.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x796198, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139e9e8 | out: ppvObject=0x139e9e8*=0x55a0698) returned 0x0
	[0175.448] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x55a0698, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x139e9f0 | out: pCid=0x139e9f0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0175.448] WbemDefPath:IUnknown:Release (This=0x55a0698) returned 0x3
	[0175.448] CoGetContextToken (in: pToken=0x139ea48 | out: pToken=0x139ea48) returned 0x0
	[0175.449] CoGetContextToken (in: pToken=0x139ee50 | out: pToken=0x139ee50) returned 0x0
	[0175.449] WbemDefPath:IUnknown:QueryInterface (in: This=0x796198, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x139eee0 | out: ppvObject=0x139eee0*=0x0) returned 0x80004002
	[0175.449] WbemDefPath:IUnknown:Release (This=0x796198) returned 0x2
	[0175.449] WbemDefPath:IUnknown:Release (This=0x796198) returned 0x1
	[0175.449] SetEvent (hEvent=0x594) returned 1

Thread:
	id = 13
	os_tid = 0x3c8


Thread:
	id = 14
	os_tid = 0x720


Thread:
	id = 15
	os_tid = 0x5dc


Thread:
	id = 16
	os_tid = 0x9d4

	[0134.480] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0134.481] RoInitialize () returned 0x1
	[0134.481] RoUninitialize () returned 0x0
	[0134.481] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x4d0f7fc | out: lpiid=0x4d0f7fc) returned 0x0
	[0134.483] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4d0f510 | out: ppv=0x4d0f510*=0x73c050) returned 0x0
	[0134.737] WbemLocator:IUnknown:QueryInterface (in: This=0x73c050, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4d0f728 | out: ppvObject=0x4d0f728*=0x0) returned 0x80004002
	[0134.737] WbemLocator:IClassFactory:CreateInstance (in: This=0x73c050, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0f73c | out: ppvObject=0x4d0f73c*=0x72df70) returned 0x0
	[0134.737] WbemLocator:IUnknown:Release (This=0x73c050) returned 0x0
	[0134.737] WbemLocator:IUnknown:QueryInterface (in: This=0x72df70, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0f35c | out: ppvObject=0x4d0f35c*=0x72df70) returned 0x0
	[0134.737] WbemLocator:IUnknown:QueryInterface (in: This=0x72df70, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4d0f318 | out: ppvObject=0x4d0f318*=0x0) returned 0x80004002
	[0134.737] WbemLocator:IUnknown:QueryInterface (in: This=0x72df70, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x4d0ef0c | out: ppvObject=0x4d0ef0c*=0x0) returned 0x80004002
	[0134.737] WbemLocator:IUnknown:AddRef (This=0x72df70) returned 0x3
	[0134.738] WbemLocator:IUnknown:QueryInterface (in: This=0x72df70, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x4d0ec74 | out: ppvObject=0x4d0ec74*=0x0) returned 0x80004002
	[0134.738] WbemLocator:IUnknown:QueryInterface (in: This=0x72df70, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x4d0ec24 | out: ppvObject=0x4d0ec24*=0x0) returned 0x80004002
	[0134.738] WbemLocator:IUnknown:QueryInterface (in: This=0x72df70, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0ec30 | out: ppvObject=0x4d0ec30*=0x0) returned 0x80004002
	[0134.738] CoGetContextToken (in: pToken=0x4d0ec90 | out: pToken=0x4d0ec90) returned 0x0
	[0134.738] CoGetObjectContext (in: riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x73bf4c | out: ppv=0x73bf4c*=0x712138) returned 0x0
	[0134.894] CoGetContextToken (in: pToken=0x4d0f098 | out: pToken=0x4d0f098) returned 0x0
	[0134.894] WbemLocator:IUnknown:QueryInterface (in: This=0x72df70, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0f128 | out: ppvObject=0x4d0f128*=0x0) returned 0x80004002
	[0134.894] WbemLocator:IUnknown:Release (This=0x72df70) returned 0x2
	[0134.894] WbemLocator:IUnknown:Release (This=0x72df70) returned 0x1
	[0134.895] CoGetContextToken (in: pToken=0x4d0f708 | out: pToken=0x4d0f708) returned 0x0
	[0134.895] CoGetContextToken (in: pToken=0x4d0f668 | out: pToken=0x4d0f668) returned 0x0
	[0134.895] WbemLocator:IUnknown:QueryInterface (in: This=0x72df70, riid=0x4d0f738*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x4d0f734 | out: ppvObject=0x4d0f734*=0x72df70) returned 0x0
	[0134.896] WbemLocator:IUnknown:AddRef (This=0x72df70) returned 0x3
	[0134.896] WbemLocator:IUnknown:Release (This=0x72df70) returned 0x2
	[0134.916] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x72bc20, puCount=0x4d0f8cc | out: puCount=0x4d0f8cc*=0x2) returned 0x0
	[0134.916] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=8, puBuffLength=0x4d0f8c8*=0x0, pszText=0x0 | out: puBuffLength=0x4d0f8c8*=0xf, pszText=0x0) returned 0x0
	[0134.916] WbemDefPath:IWbemPath:GetText (in: This=0x72bc20, lFlags=8, puBuffLength=0x4d0f8c8*=0xf, pszText="00000000000000" | out: puBuffLength=0x4d0f8c8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0134.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x4d0eb4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0134.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=63, lpMultiByteStr=0x4d0f050, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", lpUsedDefaultChar=0x0) returned 63
	[0134.928] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x69d80000
	[0135.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x4d0f084, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity\x1aîi­\x19\x91A «TlHóÐ\x04¸Ás", lpUsedDefaultChar=0x0) returned 13
	[0135.173] GetProcAddress (hModule=0x69d80000, lpProcName="ResetSecurity") returned 0x69d826fe
	[0135.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x4d0f084, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity", lpUsedDefaultChar=0x0) returned 11
	[0135.195] GetProcAddress (hModule=0x69d80000, lpProcName="SetSecurity") returned 0x69d82740
	[0135.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x4d0f080, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 18
	[0135.231] GetProcAddress (hModule=0x69d80000, lpProcName="BlessIWbemServices") returned 0x69d81e89
	[0135.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x4d0f078, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObjectD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 24
	[0135.472] GetProcAddress (hModule=0x69d80000, lpProcName="BlessIWbemServicesObject") returned 0x69d81edb
	[0135.546] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x4d0f080, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 17
	[0135.546] GetProcAddress (hModule=0x69d80000, lpProcName="GetPropertyHandle") returned 0x69d823d4
	[0135.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x4d0f080, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValueîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 18
	[0135.653] GetProcAddress (hModule=0x69d80000, lpProcName="WritePropertyValue") returned 0x69d82837
	[0135.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x4d0f08c, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 5
	[0135.739] GetProcAddress (hModule=0x69d80000, lpProcName="Clone") returned 0x69d81f2d
	[0135.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x4d0f080, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15
	[0135.786] GetProcAddress (hModule=0x69d80000, lpProcName="VerifyClientKey") returned 0x69d827d4
	[0135.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x4d0f080, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15
	[0135.796] GetProcAddress (hModule=0x69d80000, lpProcName="GetQualifierSet") returned 0x69d82435
	[0135.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x4d0f08c, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get", lpUsedDefaultChar=0x0) returned 3
	[0135.799] GetProcAddress (hModule=0x69d80000, lpProcName="Get") returned 0x69d822f4
	[0135.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x4d0f08c, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put", lpUsedDefaultChar=0x0) returned 3
	[0135.969] GetProcAddress (hModule=0x69d80000, lpProcName="Put") returned 0x69d824de
	[0136.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x4d0f08c, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Deleteîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 6
	[0136.045] GetProcAddress (hModule=0x69d80000, lpProcName="Delete") returned 0x69d82151
	[0136.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x4d0f088, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNamesD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 8
	[0136.060] GetProcAddress (hModule=0x69d80000, lpProcName="GetNames") returned 0x69d823a2
	[0136.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x4d0f080, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumerationD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 16
	[0136.154] GetProcAddress (hModule=0x69d80000, lpProcName="BeginEnumeration") returned 0x69d81e63
	[0136.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x4d0f08c, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 4
	[0136.211] GetProcAddress (hModule=0x69d80000, lpProcName="Next") returned 0x69d824a3
	[0136.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x4d0f084, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumerationîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 14
	[0136.233] GetProcAddress (hModule=0x69d80000, lpProcName="EndEnumeration") returned 0x69d821e2
	[0136.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x4d0f078, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet", lpUsedDefaultChar=0x0) returned 23
	[0136.247] GetProcAddress (hModule=0x69d80000, lpProcName="GetPropertyQualifierSet") returned 0x69d8241f
	[0136.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x4d0f08c, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 5
	[0136.264] GetProcAddress (hModule=0x69d80000, lpProcName="Clone") returned 0x69d81f2d
	[0136.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x4d0f084, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 13
	[0136.265] GetProcAddress (hModule=0x69d80000, lpProcName="GetObjectText") returned 0x69d823be
	[0136.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x4d0f080, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 17
	[0136.289] GetProcAddress (hModule=0x69d80000, lpProcName="SpawnDerivedClass") returned 0x69d82786
	[0136.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x4d0f084, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 13
	[0136.355] GetProcAddress (hModule=0x69d80000, lpProcName="SpawnInstance") returned 0x69d8279c
	[0136.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x4d0f088, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 9
	[0136.357] GetProcAddress (hModule=0x69d80000, lpProcName="CompareTo") returned 0x69d81fad
	[0136.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x4d0f080, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 17
	[0136.377] GetProcAddress (hModule=0x69d80000, lpProcName="GetPropertyOrigin") returned 0x69d82409
	[0136.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x4d0f084, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFromD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 12
	[0136.399] GetProcAddress (hModule=0x69d80000, lpProcName="InheritsFrom") returned 0x69d82448
	[0136.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x4d0f088, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 9
	[0136.401] GetProcAddress (hModule=0x69d80000, lpProcName="GetMethod") returned 0x69d8235a
	[0136.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x4d0f088, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 9
	[0136.432] GetProcAddress (hModule=0x69d80000, lpProcName="PutMethod") returned 0x69d825fa
	[0136.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x4d0f084, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethodD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 12
	[0136.469] GetProcAddress (hModule=0x69d80000, lpProcName="DeleteMethod") returned 0x69d82164
	[0136.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x4d0f07c, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumerationîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 22
	[0136.472] GetProcAddress (hModule=0x69d80000, lpProcName="BeginMethodEnumeration") returned 0x69d81e76
	[0136.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x4d0f088, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethodîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 10
	[0136.474] GetProcAddress (hModule=0x69d80000, lpProcName="NextMethod") returned 0x69d824c2
	[0136.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x4d0f07c, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumerationD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 20
	[0136.496] GetProcAddress (hModule=0x69d80000, lpProcName="EndMethodEnumeration") returned 0x69d821f2
	[0136.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x4d0f07c, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 21
	[0136.498] GetProcAddress (hModule=0x69d80000, lpProcName="GetMethodQualifierSet") returned 0x69d8238c
	[0136.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x4d0f080, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin", lpUsedDefaultChar=0x0) returned 15
	[0136.500] GetProcAddress (hModule=0x69d80000, lpProcName="GetMethodOrigin") returned 0x69d82376
	[0136.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x4d0f080, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 16
	[0136.503] GetProcAddress (hModule=0x69d80000, lpProcName="QualifierSet_Get") returned 0x69d8264c
	[0136.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x4d0f080, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_PutD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 16
	[0136.539] GetProcAddress (hModule=0x69d80000, lpProcName="QualifierSet_Put") returned 0x69d8269a
	[0136.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x4d0f07c, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete", lpUsedDefaultChar=0x0) returned 19
	[0136.595] GetProcAddress (hModule=0x69d80000, lpProcName="QualifierSet_Delete") returned 0x69d82629
	[0136.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x4d0f07c, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 21
	[0136.597] GetProcAddress (hModule=0x69d80000, lpProcName="QualifierSet_GetNames") returned 0x69d82668
	[0136.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x4d0f074, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 29
	[0136.627] GetProcAddress (hModule=0x69d80000, lpProcName="QualifierSet_BeginEnumeration") returned 0x69d82616
	[0136.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x4d0f080, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 17
	[0136.629] GetProcAddress (hModule=0x69d80000, lpProcName="QualifierSet_Next") returned 0x69d8267e
	[0136.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x4d0f074, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration", lpUsedDefaultChar=0x0) returned 27
	[0136.652] GetProcAddress (hModule=0x69d80000, lpProcName="QualifierSet_EndEnumeration") returned 0x69d8263c
	[0136.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x4d0f078, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType", lpUsedDefaultChar=0x0) returned 23
	[0136.710] GetProcAddress (hModule=0x69d80000, lpProcName="GetCurrentApartmentType") returned 0x69d82435
	[0136.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x4d0f07c, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStubD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 20
	[0136.726] GetProcAddress (hModule=0x69d80000, lpProcName="GetDemultiplexedStub") returned 0x69d82313
	[0136.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x4d0f07c, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 21
	[0136.782] GetProcAddress (hModule=0x69d80000, lpProcName="CreateInstanceEnumWmi") returned 0x69d820db
	[0136.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x4d0f080, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmiîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 18
	[0136.883] GetProcAddress (hModule=0x69d80000, lpProcName="CreateClassEnumWmi") returned 0x69d82065
	[0136.890] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x4d0f084, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmiD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 12
	[0136.891] GetProcAddress (hModule=0x69d80000, lpProcName="ExecQueryWmi") returned 0x69d8227b
	[0137.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x4d0f078, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmiD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 24
	[0137.030] GetProcAddress (hModule=0x69d80000, lpProcName="ExecNotificationQueryWmi") returned 0x69d82202
	[0137.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x4d0f084, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmiîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 14
	[0137.033] GetProcAddress (hModule=0x69d80000, lpProcName="PutInstanceWmi") returned 0x69d8257a
	[0137.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x4d0f084, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi", lpUsedDefaultChar=0x0) returned 11
	[0137.131] GetProcAddress (hModule=0x69d80000, lpProcName="PutClassWmi") returned 0x69d824fa
	[0137.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x4d0f078, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObjectD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 24
	[0137.134] GetProcAddress (hModule=0x69d80000, lpProcName="CloneEnumWbemClassObject") returned 0x69d81f40
	[0137.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x4d0f080, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmiD\x1aîi­\x19\x91A «TlHóÐ\x04", lpUsedDefaultChar=0x0) returned 16
	[0137.186] GetProcAddress (hModule=0x69d80000, lpProcName="ConnectServerWmi") returned 0x69d81fc3
	[0137.335] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x4d0f7a4 | out: ppv=0x4d0f7a4*=0x72df00) returned 0x0
	[0137.336] WbemLocator:IWbemLocator:ConnectServer (in: This=0x72df00, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x4d0f838 | out: ppNamespace=0x4d0f838*=0x726078) returned 0x0
	[0140.916] WbemLocator:IUnknown:QueryInterface (in: This=0x726078, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0f6d4 | out: ppvObject=0x4d0f6d4*=0x744bd4) returned 0x0
	[0140.917] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x744bd4, pProxy=0x726078, pAuthnSvc=0x4d0f724, pAuthzSvc=0x4d0f720, pServerPrincName=0x4d0f718, pAuthnLevel=0x4d0f71c, pImpLevel=0x4d0f70c, pAuthInfo=0x4d0f710, pCapabilites=0x4d0f714 | out: pAuthnSvc=0x4d0f724*=0xa, pAuthzSvc=0x4d0f720*=0x0, pServerPrincName=0x4d0f718, pAuthnLevel=0x4d0f71c*=0x6, pImpLevel=0x4d0f70c*=0x2, pAuthInfo=0x4d0f710, pCapabilites=0x4d0f714*=0x1) returned 0x0
	[0140.917] WbemLocator:IUnknown:Release (This=0x744bd4) returned 0x1
	[0140.917] WbemLocator:IUnknown:QueryInterface (in: This=0x726078, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0f6c8 | out: ppvObject=0x4d0f6c8*=0x744bf8) returned 0x0
	[0140.917] WbemLocator:IUnknown:QueryInterface (in: This=0x726078, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0f6c4 | out: ppvObject=0x4d0f6c4*=0x744bd4) returned 0x0
	[0140.917] WbemLocator:IClientSecurity:SetBlanket (This=0x744bd4, pProxy=0x726078, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0140.918] WbemLocator:IUnknown:Release (This=0x744bd4) returned 0x2
	[0140.918] WbemLocator:IUnknown:Release (This=0x744bf8) returned 0x1
	[0140.918] CoTaskMemFree (pv=0x6ebc48) 
	[0140.918] WbemLocator:IUnknown:Release (This=0x72df00) returned 0x0
	[0140.918] WbemLocator:IUnknown:QueryInterface (in: This=0x726078, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0f2c4 | out: ppvObject=0x4d0f2c4*=0x744bf8) returned 0x0
	[0140.919] WbemLocator:IUnknown:QueryInterface (in: This=0x744bf8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4d0f280 | out: ppvObject=0x4d0f280*=0x0) returned 0x80004002
	[0140.919] WbemLocator:IUnknown:QueryInterface (in: This=0x744bf8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4d0f09c | out: ppvObject=0x4d0f09c*=0x0) returned 0x80004002
	[0140.920] WbemLocator:IUnknown:QueryInterface (in: This=0x726078, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x4d0ee74 | out: ppvObject=0x4d0ee74*=0x0) returned 0x80004002
	[0140.920] WbemLocator:IUnknown:AddRef (This=0x744bf8) returned 0x3
	[0140.920] WbemLocator:IUnknown:QueryInterface (in: This=0x744bf8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x4d0ebdc | out: ppvObject=0x4d0ebdc*=0x0) returned 0x80004002
	[0140.921] WbemLocator:IUnknown:QueryInterface (in: This=0x744bf8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x4d0eb8c | out: ppvObject=0x4d0eb8c*=0x0) returned 0x80004002
	[0140.921] WbemLocator:IUnknown:QueryInterface (in: This=0x744bf8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0eb98 | out: ppvObject=0x4d0eb98*=0x744b54) returned 0x0
	[0140.921] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x744b54, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4d0eba0 | out: pCid=0x4d0eba0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0140.921] WbemLocator:IUnknown:Release (This=0x744b54) returned 0x3
	[0140.921] CoGetContextToken (in: pToken=0x4d0ebf8 | out: pToken=0x4d0ebf8) returned 0x0
	[0140.922] CoGetContextToken (in: pToken=0x4d0f000 | out: pToken=0x4d0f000) returned 0x0
	[0140.922] WbemLocator:IUnknown:QueryInterface (in: This=0x744bf8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4d0f090 | out: ppvObject=0x4d0f090*=0x744bdc) returned 0x0
	[0140.922] WbemLocator:IRpcOptions:Query (in: This=0x744bdc, pPrx=0x744bf8, dwProperty=2, pdwValue=0x4d0f0b8 | out: pdwValue=0x4d0f0b8) returned 0x80004002
	[0140.923] WbemLocator:IUnknown:Release (This=0x744bdc) returned 0x3
	[0140.923] WbemLocator:IUnknown:Release (This=0x744bf8) returned 0x2
	[0140.923] CoGetContextToken (in: pToken=0x4d0f5d8 | out: pToken=0x4d0f5d8) returned 0x0
	[0140.923] CoGetContextToken (in: pToken=0x4d0f538 | out: pToken=0x4d0f538) returned 0x0
	[0140.923] WbemLocator:IUnknown:QueryInterface (in: This=0x744bf8, riid=0x4d0f608*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x4d0f604 | out: ppvObject=0x4d0f604*=0x726078) returned 0x0
	[0140.923] WbemLocator:IUnknown:AddRef (This=0x726078) returned 0x4
	[0140.923] WbemLocator:IUnknown:Release (This=0x726078) returned 0x3
	[0140.924] WbemLocator:IUnknown:Release (This=0x726078) returned 0x2
	[0140.980] SysStringLen (param_1=0x0) returned 0x0
	[0140.982] CoUninitialize () 

Thread:
	id = 121
	os_tid = 0x8e8

	[0141.144] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0141.144] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0141.144] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x744bf8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0141.146] CoMarshalInterface (pStm=0x743890, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x744bf8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0154.267] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0154.267] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0154.267] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7495c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0154.268] CoMarshalInterface (pStm=0x743870, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7495c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0162.232] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0162.232] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0162.232] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x74a6c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0162.232] CoMarshalInterface (pStm=0x7438d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x74a6c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0162.529] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0162.529] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0162.529] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x74a5c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0162.529] CoMarshalInterface (pStm=0x7435d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x74a5c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0163.054] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0163.054] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0163.054] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7497c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0163.054] CoMarshalInterface (pStm=0x743710, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7497c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0169.513] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0169.513] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0169.513] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749cc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0169.513] CoMarshalInterface (pStm=0x743610, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749cc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0170.840] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0170.840] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0170.840] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749ec8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0170.840] CoMarshalInterface (pStm=0x743450, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749ec8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0171.841] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0171.841] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0171.841] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749dc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0171.841] CoMarshalInterface (pStm=0x7434d0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749dc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0173.177] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0173.177] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0173.178] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7491c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0173.178] CoMarshalInterface (pStm=0x743650, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7491c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0173.826] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0173.826] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0173.826] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7498c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0173.826] CoMarshalInterface (pStm=0x743570, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7498c8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0175.171] CoGetContextToken (in: pToken=0x4d0f26c | out: pToken=0x4d0f26c) returned 0x0
	[0175.171] CoGetContextToken (in: pToken=0x4d0f25c | out: pToken=0x4d0f25c) returned 0x0
	[0175.171] CoGetMarshalSizeMax (in: pulSize=0x4d0f218, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749bc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x4d0f218) returned 0x0
	[0175.172] CoMarshalInterface (pStm=0x7435f0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x749bc8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0

Thread:
	id = 135
	os_tid = 0x590

	[0154.112] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0154.112] RoInitialize () returned 0x1
	[0154.112] RoUninitialize () returned 0x0
	[0154.113] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4e4f490 | out: ppv=0x4e4f490*=0x706b68) returned 0x0
	[0154.113] WbemLocator:IUnknown:QueryInterface (in: This=0x706b68, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4e4f6a8 | out: ppvObject=0x4e4f6a8*=0x0) returned 0x80004002
	[0154.113] WbemLocator:IClassFactory:CreateInstance (in: This=0x706b68, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4f6bc | out: ppvObject=0x4e4f6bc*=0x702c40) returned 0x0
	[0154.113] WbemLocator:IUnknown:Release (This=0x706b68) returned 0x0
	[0154.113] WbemLocator:IUnknown:QueryInterface (in: This=0x702c40, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4f2dc | out: ppvObject=0x4e4f2dc*=0x702c40) returned 0x0
	[0154.114] WbemLocator:IUnknown:QueryInterface (in: This=0x702c40, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4e4f298 | out: ppvObject=0x4e4f298*=0x0) returned 0x80004002
	[0154.114] WbemLocator:IUnknown:QueryInterface (in: This=0x702c40, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x4e4ee8c | out: ppvObject=0x4e4ee8c*=0x0) returned 0x80004002
	[0154.114] WbemLocator:IUnknown:AddRef (This=0x702c40) returned 0x3
	[0154.114] WbemLocator:IUnknown:QueryInterface (in: This=0x702c40, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x4e4ebf4 | out: ppvObject=0x4e4ebf4*=0x0) returned 0x80004002
	[0154.114] WbemLocator:IUnknown:QueryInterface (in: This=0x702c40, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x4e4eba4 | out: ppvObject=0x4e4eba4*=0x0) returned 0x80004002
	[0154.114] WbemLocator:IUnknown:QueryInterface (in: This=0x702c40, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4ebb0 | out: ppvObject=0x4e4ebb0*=0x0) returned 0x80004002
	[0154.114] CoGetContextToken (in: pToken=0x4e4ec10 | out: pToken=0x4e4ec10) returned 0x0
	[0154.115] CoGetContextToken (in: pToken=0x4e4f018 | out: pToken=0x4e4f018) returned 0x0
	[0154.115] WbemLocator:IUnknown:QueryInterface (in: This=0x702c40, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4f0a8 | out: ppvObject=0x4e4f0a8*=0x0) returned 0x80004002
	[0154.115] WbemLocator:IUnknown:Release (This=0x702c40) returned 0x2
	[0154.115] WbemLocator:IUnknown:Release (This=0x702c40) returned 0x1
	[0154.115] CoGetContextToken (in: pToken=0x4e4f688 | out: pToken=0x4e4f688) returned 0x0
	[0154.115] CoGetContextToken (in: pToken=0x4e4f5e8 | out: pToken=0x4e4f5e8) returned 0x0
	[0154.115] WbemLocator:IUnknown:QueryInterface (in: This=0x702c40, riid=0x4e4f6b8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x4e4f6b4 | out: ppvObject=0x4e4f6b4*=0x702c40) returned 0x0
	[0154.115] WbemLocator:IUnknown:AddRef (This=0x702c40) returned 0x3
	[0154.115] WbemLocator:IUnknown:Release (This=0x702c40) returned 0x2
	[0154.115] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x751c08, puCount=0x4e4f84c | out: puCount=0x4e4f84c*=0x2) returned 0x0
	[0154.115] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=8, puBuffLength=0x4e4f848*=0x0, pszText=0x0 | out: puBuffLength=0x4e4f848*=0xf, pszText=0x0) returned 0x0
	[0154.116] WbemDefPath:IWbemPath:GetText (in: This=0x751c08, lFlags=8, puBuffLength=0x4e4f848*=0xf, pszText="00000000000000" | out: puBuffLength=0x4e4f848*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0154.116] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x4e4f724 | out: ppv=0x4e4f724*=0x702cc0) returned 0x0
	[0154.116] WbemLocator:IWbemLocator:ConnectServer (in: This=0x702cc0, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x4e4f7b8 | out: ppNamespace=0x4e4f7b8*=0x726ac8) returned 0x0
	[0154.205] WbemLocator:IUnknown:QueryInterface (in: This=0x726ac8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4f654 | out: ppvObject=0x4e4f654*=0x7495a4) returned 0x0
	[0154.205] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7495a4, pProxy=0x726ac8, pAuthnSvc=0x4e4f6a4, pAuthzSvc=0x4e4f6a0, pServerPrincName=0x4e4f698, pAuthnLevel=0x4e4f69c, pImpLevel=0x4e4f68c, pAuthInfo=0x4e4f690, pCapabilites=0x4e4f694 | out: pAuthnSvc=0x4e4f6a4*=0xa, pAuthzSvc=0x4e4f6a0*=0x0, pServerPrincName=0x4e4f698, pAuthnLevel=0x4e4f69c*=0x6, pImpLevel=0x4e4f68c*=0x2, pAuthInfo=0x4e4f690, pCapabilites=0x4e4f694*=0x1) returned 0x0
	[0154.205] WbemLocator:IUnknown:Release (This=0x7495a4) returned 0x1
	[0154.205] WbemLocator:IUnknown:QueryInterface (in: This=0x726ac8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4f648 | out: ppvObject=0x4e4f648*=0x7495c8) returned 0x0
	[0154.205] WbemLocator:IUnknown:QueryInterface (in: This=0x726ac8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4f644 | out: ppvObject=0x4e4f644*=0x7495a4) returned 0x0
	[0154.206] WbemLocator:IClientSecurity:SetBlanket (This=0x7495a4, pProxy=0x726ac8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0154.206] WbemLocator:IUnknown:Release (This=0x7495a4) returned 0x2
	[0154.206] WbemLocator:IUnknown:Release (This=0x7495c8) returned 0x1
	[0154.206] CoTaskMemFree (pv=0x747de0) 
	[0154.206] WbemLocator:IUnknown:Release (This=0x702cc0) returned 0x0
	[0154.206] WbemLocator:IUnknown:QueryInterface (in: This=0x726ac8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4f244 | out: ppvObject=0x4e4f244*=0x7495c8) returned 0x0
	[0154.207] WbemLocator:IUnknown:QueryInterface (in: This=0x7495c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4e4f200 | out: ppvObject=0x4e4f200*=0x0) returned 0x80004002
	[0154.209] WbemLocator:IUnknown:QueryInterface (in: This=0x7495c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4e4f01c | out: ppvObject=0x4e4f01c*=0x0) returned 0x80004002
	[0154.212] WbemLocator:IUnknown:QueryInterface (in: This=0x726ac8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x4e4edf4 | out: ppvObject=0x4e4edf4*=0x0) returned 0x80004002
	[0154.214] WbemLocator:IUnknown:AddRef (This=0x7495c8) returned 0x3
	[0154.214] WbemLocator:IUnknown:QueryInterface (in: This=0x7495c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x4e4eb5c | out: ppvObject=0x4e4eb5c*=0x0) returned 0x80004002
	[0154.214] WbemLocator:IUnknown:QueryInterface (in: This=0x7495c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x4e4eb0c | out: ppvObject=0x4e4eb0c*=0x0) returned 0x80004002
	[0154.214] WbemLocator:IUnknown:QueryInterface (in: This=0x7495c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4eb18 | out: ppvObject=0x4e4eb18*=0x749524) returned 0x0
	[0154.223] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749524, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4e4eb20 | out: pCid=0x4e4eb20*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0154.223] WbemLocator:IUnknown:Release (This=0x749524) returned 0x3
	[0154.223] CoGetContextToken (in: pToken=0x4e4eb78 | out: pToken=0x4e4eb78) returned 0x0
	[0154.223] CoGetContextToken (in: pToken=0x4e4ef80 | out: pToken=0x4e4ef80) returned 0x0
	[0154.223] WbemLocator:IUnknown:QueryInterface (in: This=0x7495c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e4f010 | out: ppvObject=0x4e4f010*=0x7495ac) returned 0x0
	[0154.224] WbemLocator:IRpcOptions:Query (in: This=0x7495ac, pPrx=0x7495c8, dwProperty=2, pdwValue=0x4e4f038 | out: pdwValue=0x4e4f038) returned 0x80004002
	[0154.224] WbemLocator:IUnknown:Release (This=0x7495ac) returned 0x3
	[0154.224] WbemLocator:IUnknown:Release (This=0x7495c8) returned 0x2
	[0154.224] CoGetContextToken (in: pToken=0x4e4f558 | out: pToken=0x4e4f558) returned 0x0
	[0154.224] CoGetContextToken (in: pToken=0x4e4f4b8 | out: pToken=0x4e4f4b8) returned 0x0
	[0154.224] WbemLocator:IUnknown:QueryInterface (in: This=0x7495c8, riid=0x4e4f588*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x4e4f584 | out: ppvObject=0x4e4f584*=0x726ac8) returned 0x0
	[0154.224] WbemLocator:IUnknown:AddRef (This=0x726ac8) returned 0x4
	[0154.224] WbemLocator:IUnknown:Release (This=0x726ac8) returned 0x3
	[0154.224] WbemLocator:IUnknown:Release (This=0x726ac8) returned 0x2
	[0154.224] SysStringLen (param_1=0x0) returned 0x0
	[0154.225] CoUninitialize () 

Thread:
	id = 138
	os_tid = 0x11f0


Thread:
	id = 139
	os_tid = 0xa40

	[0160.214] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0160.214] RoInitialize () returned 0x1
	[0160.214] RoUninitialize () returned 0x0
	[0160.215] ResetEvent (hEvent=0x420) returned 1

Thread:
	id = 140
	os_tid = 0x980

	[0161.978] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0161.978] RoInitialize () returned 0x1
	[0161.978] RoUninitialize () returned 0x0
	[0161.979] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x51bf390 | out: ppv=0x51bf390*=0x76e630) returned 0x0
	[0161.980] WbemLocator:IUnknown:QueryInterface (in: This=0x76e630, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51bf5a8 | out: ppvObject=0x51bf5a8*=0x0) returned 0x80004002
	[0161.980] WbemLocator:IClassFactory:CreateInstance (in: This=0x76e630, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf5bc | out: ppvObject=0x51bf5bc*=0x754808) returned 0x0
	[0161.980] WbemLocator:IUnknown:Release (This=0x76e630) returned 0x0
	[0161.980] WbemLocator:IUnknown:QueryInterface (in: This=0x754808, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf1dc | out: ppvObject=0x51bf1dc*=0x754808) returned 0x0
	[0161.980] WbemLocator:IUnknown:QueryInterface (in: This=0x754808, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51bf198 | out: ppvObject=0x51bf198*=0x0) returned 0x80004002
	[0161.980] WbemLocator:IUnknown:QueryInterface (in: This=0x754808, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x51bed8c | out: ppvObject=0x51bed8c*=0x0) returned 0x80004002
	[0161.981] WbemLocator:IUnknown:AddRef (This=0x754808) returned 0x3
	[0161.981] WbemLocator:IUnknown:QueryInterface (in: This=0x754808, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x51beaf4 | out: ppvObject=0x51beaf4*=0x0) returned 0x80004002
	[0161.981] WbemLocator:IUnknown:QueryInterface (in: This=0x754808, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x51beaa4 | out: ppvObject=0x51beaa4*=0x0) returned 0x80004002
	[0161.981] WbemLocator:IUnknown:QueryInterface (in: This=0x754808, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51beab0 | out: ppvObject=0x51beab0*=0x0) returned 0x80004002
	[0161.981] CoGetContextToken (in: pToken=0x51beb10 | out: pToken=0x51beb10) returned 0x0
	[0161.982] CoGetContextToken (in: pToken=0x51bef18 | out: pToken=0x51bef18) returned 0x0
	[0161.982] WbemLocator:IUnknown:QueryInterface (in: This=0x754808, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51befa8 | out: ppvObject=0x51befa8*=0x0) returned 0x80004002
	[0161.982] WbemLocator:IUnknown:Release (This=0x754808) returned 0x2
	[0161.982] WbemLocator:IUnknown:Release (This=0x754808) returned 0x1
	[0161.982] CoGetContextToken (in: pToken=0x51bf588 | out: pToken=0x51bf588) returned 0x0
	[0161.982] CoGetContextToken (in: pToken=0x51bf4e8 | out: pToken=0x51bf4e8) returned 0x0
	[0161.982] WbemLocator:IUnknown:QueryInterface (in: This=0x754808, riid=0x51bf5b8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x51bf5b4 | out: ppvObject=0x51bf5b4*=0x754808) returned 0x0
	[0161.983] WbemLocator:IUnknown:AddRef (This=0x754808) returned 0x3
	[0161.983] WbemLocator:IUnknown:Release (This=0x754808) returned 0x2
	[0161.983] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x51bf74c | out: puCount=0x51bf74c*=0x2) returned 0x0
	[0161.983] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=8, puBuffLength=0x51bf748*=0x0, pszText=0x0 | out: puBuffLength=0x51bf748*=0xf, pszText=0x0) returned 0x0
	[0161.983] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=8, puBuffLength=0x51bf748*=0xf, pszText="00000000000000" | out: puBuffLength=0x51bf748*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0161.983] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x51bf624 | out: ppv=0x51bf624*=0x754908) returned 0x0
	[0161.983] WbemLocator:IWbemLocator:ConnectServer (in: This=0x754908, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x51bf6b8 | out: ppNamespace=0x51bf6b8*=0x776858) returned 0x0
	[0162.215] WbemLocator:IUnknown:QueryInterface (in: This=0x776858, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf554 | out: ppvObject=0x51bf554*=0x74a6a4) returned 0x0
	[0162.216] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x74a6a4, pProxy=0x776858, pAuthnSvc=0x51bf5a4, pAuthzSvc=0x51bf5a0, pServerPrincName=0x51bf598, pAuthnLevel=0x51bf59c, pImpLevel=0x51bf58c, pAuthInfo=0x51bf590, pCapabilites=0x51bf594 | out: pAuthnSvc=0x51bf5a4*=0xa, pAuthzSvc=0x51bf5a0*=0x0, pServerPrincName=0x51bf598, pAuthnLevel=0x51bf59c*=0x6, pImpLevel=0x51bf58c*=0x2, pAuthInfo=0x51bf590, pCapabilites=0x51bf594*=0x1) returned 0x0
	[0162.216] WbemLocator:IUnknown:Release (This=0x74a6a4) returned 0x1
	[0162.216] WbemLocator:IUnknown:QueryInterface (in: This=0x776858, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf548 | out: ppvObject=0x51bf548*=0x74a6c8) returned 0x0
	[0162.216] WbemLocator:IUnknown:QueryInterface (in: This=0x776858, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf544 | out: ppvObject=0x51bf544*=0x74a6a4) returned 0x0
	[0162.216] WbemLocator:IClientSecurity:SetBlanket (This=0x74a6a4, pProxy=0x776858, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.217] WbemLocator:IUnknown:Release (This=0x74a6a4) returned 0x2
	[0162.217] WbemLocator:IUnknown:Release (This=0x74a6c8) returned 0x1
	[0162.217] CoTaskMemFree (pv=0x748080) 
	[0162.217] WbemLocator:IUnknown:Release (This=0x754908) returned 0x0
	[0162.217] WbemLocator:IUnknown:QueryInterface (in: This=0x776858, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf144 | out: ppvObject=0x51bf144*=0x74a6c8) returned 0x0
	[0162.217] WbemLocator:IUnknown:QueryInterface (in: This=0x74a6c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51bf100 | out: ppvObject=0x51bf100*=0x0) returned 0x80004002
	[0162.218] WbemLocator:IUnknown:QueryInterface (in: This=0x74a6c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51bef1c | out: ppvObject=0x51bef1c*=0x0) returned 0x80004002
	[0162.218] WbemLocator:IUnknown:QueryInterface (in: This=0x776858, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x51becf4 | out: ppvObject=0x51becf4*=0x0) returned 0x80004002
	[0162.219] WbemLocator:IUnknown:AddRef (This=0x74a6c8) returned 0x3
	[0162.219] WbemLocator:IUnknown:QueryInterface (in: This=0x74a6c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x51bea5c | out: ppvObject=0x51bea5c*=0x0) returned 0x80004002
	[0162.219] WbemLocator:IUnknown:QueryInterface (in: This=0x74a6c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x51bea0c | out: ppvObject=0x51bea0c*=0x0) returned 0x80004002
	[0162.219] WbemLocator:IUnknown:QueryInterface (in: This=0x74a6c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bea18 | out: ppvObject=0x51bea18*=0x74a624) returned 0x0
	[0162.219] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74a624, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x51bea20 | out: pCid=0x51bea20*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.219] WbemLocator:IUnknown:Release (This=0x74a624) returned 0x3
	[0162.219] CoGetContextToken (in: pToken=0x51bea78 | out: pToken=0x51bea78) returned 0x0
	[0162.219] CoGetContextToken (in: pToken=0x51bee80 | out: pToken=0x51bee80) returned 0x0
	[0162.219] WbemLocator:IUnknown:QueryInterface (in: This=0x74a6c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bef10 | out: ppvObject=0x51bef10*=0x74a6ac) returned 0x0
	[0162.219] WbemLocator:IRpcOptions:Query (in: This=0x74a6ac, pPrx=0x74a6c8, dwProperty=2, pdwValue=0x51bef38 | out: pdwValue=0x51bef38) returned 0x80004002
	[0162.219] WbemLocator:IUnknown:Release (This=0x74a6ac) returned 0x3
	[0162.220] WbemLocator:IUnknown:Release (This=0x74a6c8) returned 0x2
	[0162.220] CoGetContextToken (in: pToken=0x51bf458 | out: pToken=0x51bf458) returned 0x0
	[0162.220] CoGetContextToken (in: pToken=0x51bf3b8 | out: pToken=0x51bf3b8) returned 0x0
	[0162.220] WbemLocator:IUnknown:QueryInterface (in: This=0x74a6c8, riid=0x51bf488*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x51bf484 | out: ppvObject=0x51bf484*=0x776858) returned 0x0
	[0162.220] WbemLocator:IUnknown:AddRef (This=0x776858) returned 0x4
	[0162.220] WbemLocator:IUnknown:Release (This=0x776858) returned 0x3
	[0162.220] WbemLocator:IUnknown:Release (This=0x776858) returned 0x2
	[0162.220] SysStringLen (param_1=0x0) returned 0x0
	[0162.220] CoUninitialize () 

Thread:
	id = 141
	os_tid = 0x998

	[0162.435] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0162.435] RoInitialize () returned 0x1
	[0162.435] RoUninitialize () returned 0x0
	[0162.436] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x51bf310 | out: ppv=0x51bf310*=0x76e330) returned 0x0
	[0162.436] WbemLocator:IUnknown:QueryInterface (in: This=0x76e330, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51bf528 | out: ppvObject=0x51bf528*=0x0) returned 0x80004002
	[0162.436] WbemLocator:IClassFactory:CreateInstance (in: This=0x76e330, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf53c | out: ppvObject=0x51bf53c*=0x754818) returned 0x0
	[0162.436] WbemLocator:IUnknown:Release (This=0x76e330) returned 0x0
	[0162.437] WbemLocator:IUnknown:QueryInterface (in: This=0x754818, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf15c | out: ppvObject=0x51bf15c*=0x754818) returned 0x0
	[0162.437] WbemLocator:IUnknown:QueryInterface (in: This=0x754818, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51bf118 | out: ppvObject=0x51bf118*=0x0) returned 0x80004002
	[0162.437] WbemLocator:IUnknown:QueryInterface (in: This=0x754818, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x51bed0c | out: ppvObject=0x51bed0c*=0x0) returned 0x80004002
	[0162.437] WbemLocator:IUnknown:AddRef (This=0x754818) returned 0x3
	[0162.437] WbemLocator:IUnknown:QueryInterface (in: This=0x754818, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x51bea74 | out: ppvObject=0x51bea74*=0x0) returned 0x80004002
	[0162.437] WbemLocator:IUnknown:QueryInterface (in: This=0x754818, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x51bea24 | out: ppvObject=0x51bea24*=0x0) returned 0x80004002
	[0162.437] WbemLocator:IUnknown:QueryInterface (in: This=0x754818, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bea30 | out: ppvObject=0x51bea30*=0x0) returned 0x80004002
	[0162.437] CoGetContextToken (in: pToken=0x51bea90 | out: pToken=0x51bea90) returned 0x0
	[0162.438] CoGetContextToken (in: pToken=0x51bee98 | out: pToken=0x51bee98) returned 0x0
	[0162.438] WbemLocator:IUnknown:QueryInterface (in: This=0x754818, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bef28 | out: ppvObject=0x51bef28*=0x0) returned 0x80004002
	[0162.438] WbemLocator:IUnknown:Release (This=0x754818) returned 0x2
	[0162.438] WbemLocator:IUnknown:Release (This=0x754818) returned 0x1
	[0162.438] CoGetContextToken (in: pToken=0x51bf508 | out: pToken=0x51bf508) returned 0x0
	[0162.438] CoGetContextToken (in: pToken=0x51bf468 | out: pToken=0x51bf468) returned 0x0
	[0162.438] WbemLocator:IUnknown:QueryInterface (in: This=0x754818, riid=0x51bf538*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x51bf534 | out: ppvObject=0x51bf534*=0x754818) returned 0x0
	[0162.438] WbemLocator:IUnknown:AddRef (This=0x754818) returned 0x3
	[0162.438] WbemLocator:IUnknown:Release (This=0x754818) returned 0x2
	[0162.438] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7640f8, puCount=0x51bf6cc | out: puCount=0x51bf6cc*=0x2) returned 0x0
	[0162.438] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=8, puBuffLength=0x51bf6c8*=0x0, pszText=0x0 | out: puBuffLength=0x51bf6c8*=0xf, pszText=0x0) returned 0x0
	[0162.438] WbemDefPath:IWbemPath:GetText (in: This=0x7640f8, lFlags=8, puBuffLength=0x51bf6c8*=0xf, pszText="00000000000000" | out: puBuffLength=0x51bf6c8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0162.439] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x51bf5a4 | out: ppv=0x51bf5a4*=0x7548c8) returned 0x0
	[0162.439] WbemLocator:IWbemLocator:ConnectServer (in: This=0x7548c8, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x51bf638 | out: ppNamespace=0x51bf638*=0x776cb8) returned 0x0
	[0162.494] WbemLocator:IUnknown:QueryInterface (in: This=0x776cb8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf4d4 | out: ppvObject=0x51bf4d4*=0x74a5a4) returned 0x0
	[0162.494] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x74a5a4, pProxy=0x776cb8, pAuthnSvc=0x51bf524, pAuthzSvc=0x51bf520, pServerPrincName=0x51bf518, pAuthnLevel=0x51bf51c, pImpLevel=0x51bf50c, pAuthInfo=0x51bf510, pCapabilites=0x51bf514 | out: pAuthnSvc=0x51bf524*=0xa, pAuthzSvc=0x51bf520*=0x0, pServerPrincName=0x51bf518, pAuthnLevel=0x51bf51c*=0x6, pImpLevel=0x51bf50c*=0x2, pAuthInfo=0x51bf510, pCapabilites=0x51bf514*=0x1) returned 0x0
	[0162.495] WbemLocator:IUnknown:Release (This=0x74a5a4) returned 0x1
	[0162.495] WbemLocator:IUnknown:QueryInterface (in: This=0x776cb8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf4c8 | out: ppvObject=0x51bf4c8*=0x74a5c8) returned 0x0
	[0162.495] WbemLocator:IUnknown:QueryInterface (in: This=0x776cb8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf4c4 | out: ppvObject=0x51bf4c4*=0x74a5a4) returned 0x0
	[0162.495] WbemLocator:IClientSecurity:SetBlanket (This=0x74a5a4, pProxy=0x776cb8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0162.495] WbemLocator:IUnknown:Release (This=0x74a5a4) returned 0x2
	[0162.495] WbemLocator:IUnknown:Release (This=0x74a5c8) returned 0x1
	[0162.495] CoTaskMemFree (pv=0x748080) 
	[0162.496] WbemLocator:IUnknown:Release (This=0x7548c8) returned 0x0
	[0162.496] WbemLocator:IUnknown:QueryInterface (in: This=0x776cb8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bf0c4 | out: ppvObject=0x51bf0c4*=0x74a5c8) returned 0x0
	[0162.496] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x51bf080 | out: ppvObject=0x51bf080*=0x0) returned 0x80004002
	[0162.501] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x51bee9c | out: ppvObject=0x51bee9c*=0x0) returned 0x80004002
	[0162.503] WbemLocator:IUnknown:QueryInterface (in: This=0x776cb8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x51bec74 | out: ppvObject=0x51bec74*=0x0) returned 0x80004002
	[0162.508] WbemLocator:IUnknown:AddRef (This=0x74a5c8) returned 0x3
	[0162.508] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x51be9dc | out: ppvObject=0x51be9dc*=0x0) returned 0x80004002
	[0162.508] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x51be98c | out: ppvObject=0x51be98c*=0x0) returned 0x80004002
	[0162.509] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51be998 | out: ppvObject=0x51be998*=0x74a524) returned 0x0
	[0162.511] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74a524, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x51be9a0 | out: pCid=0x51be9a0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0162.511] WbemLocator:IUnknown:Release (This=0x74a524) returned 0x3
	[0162.511] CoGetContextToken (in: pToken=0x51be9f8 | out: pToken=0x51be9f8) returned 0x0
	[0162.518] CoGetContextToken (in: pToken=0x51bee00 | out: pToken=0x51bee00) returned 0x0
	[0162.518] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x51bee90 | out: ppvObject=0x51bee90*=0x74a5ac) returned 0x0
	[0162.518] WbemLocator:IRpcOptions:Query (in: This=0x74a5ac, pPrx=0x74a5c8, dwProperty=2, pdwValue=0x51beeb8 | out: pdwValue=0x51beeb8) returned 0x80004002
	[0162.518] WbemLocator:IUnknown:Release (This=0x74a5ac) returned 0x3
	[0162.518] WbemLocator:IUnknown:Release (This=0x74a5c8) returned 0x2
	[0162.518] CoGetContextToken (in: pToken=0x51bf3d8 | out: pToken=0x51bf3d8) returned 0x0
	[0162.518] CoGetContextToken (in: pToken=0x51bf338 | out: pToken=0x51bf338) returned 0x0
	[0162.518] WbemLocator:IUnknown:QueryInterface (in: This=0x74a5c8, riid=0x51bf408*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x51bf404 | out: ppvObject=0x51bf404*=0x776cb8) returned 0x0
	[0162.519] WbemLocator:IUnknown:AddRef (This=0x776cb8) returned 0x4
	[0162.519] WbemLocator:IUnknown:Release (This=0x776cb8) returned 0x3
	[0162.519] WbemLocator:IUnknown:Release (This=0x776cb8) returned 0x2
	[0162.519] SysStringLen (param_1=0x0) returned 0x0
	[0162.519] CoUninitialize () 

Thread:
	id = 142
	os_tid = 0x57c

	[0162.919] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0162.919] RoInitialize () returned 0x1
	[0162.919] RoUninitialize () returned 0x0
	[0162.923] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x52bf290 | out: ppv=0x52bf290*=0x788c88) returned 0x0
	[0162.924] WbemLocator:IUnknown:QueryInterface (in: This=0x788c88, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52bf4a8 | out: ppvObject=0x52bf4a8*=0x0) returned 0x80004002
	[0162.924] WbemLocator:IClassFactory:CreateInstance (in: This=0x788c88, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52bf4bc | out: ppvObject=0x52bf4bc*=0x754958) returned 0x0
	[0162.925] WbemLocator:IUnknown:Release (This=0x788c88) returned 0x0
	[0162.925] WbemLocator:IUnknown:QueryInterface (in: This=0x754958, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52bf0dc | out: ppvObject=0x52bf0dc*=0x754958) returned 0x0
	[0162.925] WbemLocator:IUnknown:QueryInterface (in: This=0x754958, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52bf098 | out: ppvObject=0x52bf098*=0x0) returned 0x80004002
	[0162.925] WbemLocator:IUnknown:QueryInterface (in: This=0x754958, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x52bec8c | out: ppvObject=0x52bec8c*=0x0) returned 0x80004002
	[0162.925] WbemLocator:IUnknown:AddRef (This=0x754958) returned 0x3
	[0162.925] WbemLocator:IUnknown:QueryInterface (in: This=0x754958, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x52be9f4 | out: ppvObject=0x52be9f4*=0x0) returned 0x80004002
	[0162.925] WbemLocator:IUnknown:QueryInterface (in: This=0x754958, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x52be9a4 | out: ppvObject=0x52be9a4*=0x0) returned 0x80004002
	[0162.925] WbemLocator:IUnknown:QueryInterface (in: This=0x754958, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be9b0 | out: ppvObject=0x52be9b0*=0x0) returned 0x80004002
	[0162.925] CoGetContextToken (in: pToken=0x52bea10 | out: pToken=0x52bea10) returned 0x0
	[0162.926] CoGetContextToken (in: pToken=0x52bee18 | out: pToken=0x52bee18) returned 0x0
	[0162.926] WbemLocator:IUnknown:QueryInterface (in: This=0x754958, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52beea8 | out: ppvObject=0x52beea8*=0x0) returned 0x80004002
	[0162.926] WbemLocator:IUnknown:Release (This=0x754958) returned 0x2
	[0162.926] WbemLocator:IUnknown:Release (This=0x754958) returned 0x1
	[0162.926] CoGetContextToken (in: pToken=0x52bf488 | out: pToken=0x52bf488) returned 0x0
	[0162.926] CoGetContextToken (in: pToken=0x52bf3e8 | out: pToken=0x52bf3e8) returned 0x0
	[0162.926] WbemLocator:IUnknown:QueryInterface (in: This=0x754958, riid=0x52bf4b8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x52bf4b4 | out: ppvObject=0x52bf4b4*=0x754958) returned 0x0
	[0162.926] WbemLocator:IUnknown:AddRef (This=0x754958) returned 0x3
	[0162.926] WbemLocator:IUnknown:Release (This=0x754958) returned 0x2
	[0162.927] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x763d78, puCount=0x52bf64c | out: puCount=0x52bf64c*=0x2) returned 0x0
	[0162.927] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=8, puBuffLength=0x52bf648*=0x0, pszText=0x0 | out: puBuffLength=0x52bf648*=0xf, pszText=0x0) returned 0x0
	[0162.927] WbemDefPath:IWbemPath:GetText (in: This=0x763d78, lFlags=8, puBuffLength=0x52bf648*=0xf, pszText="00000000000000" | out: puBuffLength=0x52bf648*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0162.927] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x52bf524 | out: ppv=0x52bf524*=0x7548c8) returned 0x0
	[0162.927] WbemLocator:IWbemLocator:ConnectServer (in: This=0x7548c8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x52bf5b8 | out: ppNamespace=0x52bf5b8*=0x776bc8) returned 0x0
	[0163.036] WbemLocator:IUnknown:QueryInterface (in: This=0x776bc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52bf454 | out: ppvObject=0x52bf454*=0x7497a4) returned 0x0
	[0163.036] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7497a4, pProxy=0x776bc8, pAuthnSvc=0x52bf4a4, pAuthzSvc=0x52bf4a0, pServerPrincName=0x52bf498, pAuthnLevel=0x52bf49c, pImpLevel=0x52bf48c, pAuthInfo=0x52bf490, pCapabilites=0x52bf494 | out: pAuthnSvc=0x52bf4a4*=0xa, pAuthzSvc=0x52bf4a0*=0x0, pServerPrincName=0x52bf498, pAuthnLevel=0x52bf49c*=0x6, pImpLevel=0x52bf48c*=0x2, pAuthInfo=0x52bf490, pCapabilites=0x52bf494*=0x1) returned 0x0
	[0163.036] WbemLocator:IUnknown:Release (This=0x7497a4) returned 0x1
	[0163.036] WbemLocator:IUnknown:QueryInterface (in: This=0x776bc8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52bf448 | out: ppvObject=0x52bf448*=0x7497c8) returned 0x0
	[0163.036] WbemLocator:IUnknown:QueryInterface (in: This=0x776bc8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52bf444 | out: ppvObject=0x52bf444*=0x7497a4) returned 0x0
	[0163.037] WbemLocator:IClientSecurity:SetBlanket (This=0x7497a4, pProxy=0x776bc8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0163.037] WbemLocator:IUnknown:Release (This=0x7497a4) returned 0x2
	[0163.037] WbemLocator:IUnknown:Release (This=0x7497c8) returned 0x1
	[0163.037] CoTaskMemFree (pv=0x7481d0) 
	[0163.037] WbemLocator:IUnknown:Release (This=0x7548c8) returned 0x0
	[0163.037] WbemLocator:IUnknown:QueryInterface (in: This=0x776bc8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52bf044 | out: ppvObject=0x52bf044*=0x7497c8) returned 0x0
	[0163.037] WbemLocator:IUnknown:QueryInterface (in: This=0x7497c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52bf000 | out: ppvObject=0x52bf000*=0x0) returned 0x80004002
	[0163.038] WbemLocator:IUnknown:QueryInterface (in: This=0x7497c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52bee1c | out: ppvObject=0x52bee1c*=0x0) returned 0x80004002
	[0163.038] WbemLocator:IUnknown:QueryInterface (in: This=0x776bc8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x52bebf4 | out: ppvObject=0x52bebf4*=0x0) returned 0x80004002
	[0163.039] WbemLocator:IUnknown:AddRef (This=0x7497c8) returned 0x3
	[0163.039] WbemLocator:IUnknown:QueryInterface (in: This=0x7497c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x52be95c | out: ppvObject=0x52be95c*=0x0) returned 0x80004002
	[0163.039] WbemLocator:IUnknown:QueryInterface (in: This=0x7497c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x52be90c | out: ppvObject=0x52be90c*=0x0) returned 0x80004002
	[0163.039] WbemLocator:IUnknown:QueryInterface (in: This=0x7497c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be918 | out: ppvObject=0x52be918*=0x749724) returned 0x0
	[0163.039] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749724, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x52be920 | out: pCid=0x52be920*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0163.039] WbemLocator:IUnknown:Release (This=0x749724) returned 0x3
	[0163.039] CoGetContextToken (in: pToken=0x52be978 | out: pToken=0x52be978) returned 0x0
	[0163.039] CoGetContextToken (in: pToken=0x52bed80 | out: pToken=0x52bed80) returned 0x0
	[0163.039] WbemLocator:IUnknown:QueryInterface (in: This=0x7497c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52bee10 | out: ppvObject=0x52bee10*=0x7497ac) returned 0x0
	[0163.039] WbemLocator:IRpcOptions:Query (in: This=0x7497ac, pPrx=0x7497c8, dwProperty=2, pdwValue=0x52bee38 | out: pdwValue=0x52bee38) returned 0x80004002
	[0163.039] WbemLocator:IUnknown:Release (This=0x7497ac) returned 0x3
	[0163.040] WbemLocator:IUnknown:Release (This=0x7497c8) returned 0x2
	[0163.040] CoGetContextToken (in: pToken=0x52bf358 | out: pToken=0x52bf358) returned 0x0
	[0163.040] CoGetContextToken (in: pToken=0x52bf2b8 | out: pToken=0x52bf2b8) returned 0x0
	[0163.040] WbemLocator:IUnknown:QueryInterface (in: This=0x7497c8, riid=0x52bf388*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x52bf384 | out: ppvObject=0x52bf384*=0x776bc8) returned 0x0
	[0163.040] WbemLocator:IUnknown:AddRef (This=0x776bc8) returned 0x4
	[0163.040] WbemLocator:IUnknown:Release (This=0x776bc8) returned 0x3
	[0163.040] WbemLocator:IUnknown:Release (This=0x776bc8) returned 0x2
	[0163.040] SysStringLen (param_1=0x0) returned 0x0
	[0163.040] CoUninitialize () 

Thread:
	id = 143
	os_tid = 0x69c

	[0169.433] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0169.433] RoInitialize () returned 0x1
	[0169.433] RoUninitialize () returned 0x0
	[0169.435] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x57df210 | out: ppv=0x57df210*=0x55a1430) returned 0x0
	[0169.435] WbemLocator:IUnknown:QueryInterface (in: This=0x55a1430, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57df428 | out: ppvObject=0x57df428*=0x0) returned 0x80004002
	[0169.435] WbemLocator:IClassFactory:CreateInstance (in: This=0x55a1430, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df43c | out: ppvObject=0x57df43c*=0x782fe0) returned 0x0
	[0169.436] WbemLocator:IUnknown:Release (This=0x55a1430) returned 0x0
	[0169.436] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df05c | out: ppvObject=0x57df05c*=0x782fe0) returned 0x0
	[0169.436] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57df018 | out: ppvObject=0x57df018*=0x0) returned 0x80004002
	[0169.436] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57dec0c | out: ppvObject=0x57dec0c*=0x0) returned 0x80004002
	[0169.436] WbemLocator:IUnknown:AddRef (This=0x782fe0) returned 0x3
	[0169.436] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de974 | out: ppvObject=0x57de974*=0x0) returned 0x80004002
	[0169.436] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de924 | out: ppvObject=0x57de924*=0x0) returned 0x80004002
	[0169.436] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de930 | out: ppvObject=0x57de930*=0x0) returned 0x80004002
	[0169.436] CoGetContextToken (in: pToken=0x57de990 | out: pToken=0x57de990) returned 0x0
	[0169.438] CoGetContextToken (in: pToken=0x57ded98 | out: pToken=0x57ded98) returned 0x0
	[0169.438] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57dee28 | out: ppvObject=0x57dee28*=0x0) returned 0x80004002
	[0169.438] WbemLocator:IUnknown:Release (This=0x782fe0) returned 0x2
	[0169.438] WbemLocator:IUnknown:Release (This=0x782fe0) returned 0x1
	[0169.439] CoGetContextToken (in: pToken=0x57df408 | out: pToken=0x57df408) returned 0x0
	[0169.439] CoGetContextToken (in: pToken=0x57df368 | out: pToken=0x57df368) returned 0x0
	[0169.439] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x57df438*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x57df434 | out: ppvObject=0x57df434*=0x782fe0) returned 0x0
	[0169.439] WbemLocator:IUnknown:AddRef (This=0x782fe0) returned 0x3
	[0169.439] WbemLocator:IUnknown:Release (This=0x782fe0) returned 0x2
	[0169.439] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcce8, puCount=0x57df5cc | out: puCount=0x57df5cc*=0x2) returned 0x0
	[0169.439] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=8, puBuffLength=0x57df5c8*=0x0, pszText=0x0 | out: puBuffLength=0x57df5c8*=0xf, pszText=0x0) returned 0x0
	[0169.439] WbemDefPath:IWbemPath:GetText (in: This=0x7bcce8, lFlags=8, puBuffLength=0x57df5c8*=0xf, pszText="00000000000000" | out: puBuffLength=0x57df5c8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0169.439] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x57df4a4 | out: ppv=0x57df4a4*=0x783170) returned 0x0
	[0169.439] WbemLocator:IWbemLocator:ConnectServer (in: This=0x783170, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x57df538 | out: ppNamespace=0x57df538*=0x7c83c0) returned 0x0
	[0169.482] WbemLocator:IUnknown:QueryInterface (in: This=0x7c83c0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df3d4 | out: ppvObject=0x57df3d4*=0x749ca4) returned 0x0
	[0169.483] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x749ca4, pProxy=0x7c83c0, pAuthnSvc=0x57df424, pAuthzSvc=0x57df420, pServerPrincName=0x57df418, pAuthnLevel=0x57df41c, pImpLevel=0x57df40c, pAuthInfo=0x57df410, pCapabilites=0x57df414 | out: pAuthnSvc=0x57df424*=0xa, pAuthzSvc=0x57df420*=0x0, pServerPrincName=0x57df418, pAuthnLevel=0x57df41c*=0x6, pImpLevel=0x57df40c*=0x2, pAuthInfo=0x57df410, pCapabilites=0x57df414*=0x1) returned 0x0
	[0169.483] WbemLocator:IUnknown:Release (This=0x749ca4) returned 0x1
	[0169.483] WbemLocator:IUnknown:QueryInterface (in: This=0x7c83c0, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df3c8 | out: ppvObject=0x57df3c8*=0x749cc8) returned 0x0
	[0169.483] WbemLocator:IUnknown:QueryInterface (in: This=0x7c83c0, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df3c4 | out: ppvObject=0x57df3c4*=0x749ca4) returned 0x0
	[0169.483] WbemLocator:IClientSecurity:SetBlanket (This=0x749ca4, pProxy=0x7c83c0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0169.484] WbemLocator:IUnknown:Release (This=0x749ca4) returned 0x2
	[0169.484] WbemLocator:IUnknown:Release (This=0x749cc8) returned 0x1
	[0169.484] CoTaskMemFree (pv=0x7483b0) 
	[0169.484] WbemLocator:IUnknown:Release (This=0x783170) returned 0x0
	[0169.484] WbemLocator:IUnknown:QueryInterface (in: This=0x7c83c0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57defc4 | out: ppvObject=0x57defc4*=0x749cc8) returned 0x0
	[0169.484] WbemLocator:IUnknown:QueryInterface (in: This=0x749cc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57def80 | out: ppvObject=0x57def80*=0x0) returned 0x80004002
	[0169.490] WbemLocator:IUnknown:QueryInterface (in: This=0x749cc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57ded9c | out: ppvObject=0x57ded9c*=0x0) returned 0x80004002
	[0169.491] WbemLocator:IUnknown:QueryInterface (in: This=0x7c83c0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57deb74 | out: ppvObject=0x57deb74*=0x0) returned 0x80004002
	[0169.492] WbemLocator:IUnknown:AddRef (This=0x749cc8) returned 0x3
	[0169.492] WbemLocator:IUnknown:QueryInterface (in: This=0x749cc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de8dc | out: ppvObject=0x57de8dc*=0x0) returned 0x80004002
	[0169.492] WbemLocator:IUnknown:QueryInterface (in: This=0x749cc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de88c | out: ppvObject=0x57de88c*=0x0) returned 0x80004002
	[0169.492] WbemLocator:IUnknown:QueryInterface (in: This=0x749cc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de898 | out: ppvObject=0x57de898*=0x749c24) returned 0x0
	[0169.492] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749c24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x57de8a0 | out: pCid=0x57de8a0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0169.492] WbemLocator:IUnknown:Release (This=0x749c24) returned 0x3
	[0169.493] CoGetContextToken (in: pToken=0x57de8f8 | out: pToken=0x57de8f8) returned 0x0
	[0169.493] CoGetContextToken (in: pToken=0x57ded00 | out: pToken=0x57ded00) returned 0x0
	[0169.493] WbemLocator:IUnknown:QueryInterface (in: This=0x749cc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57ded90 | out: ppvObject=0x57ded90*=0x749cac) returned 0x0
	[0169.493] WbemLocator:IRpcOptions:Query (in: This=0x749cac, pPrx=0x749cc8, dwProperty=2, pdwValue=0x57dedb8 | out: pdwValue=0x57dedb8) returned 0x80004002
	[0169.493] WbemLocator:IUnknown:Release (This=0x749cac) returned 0x3
	[0169.495] WbemLocator:IUnknown:Release (This=0x749cc8) returned 0x2
	[0169.495] CoGetContextToken (in: pToken=0x57df2d8 | out: pToken=0x57df2d8) returned 0x0
	[0169.495] CoGetContextToken (in: pToken=0x57df238 | out: pToken=0x57df238) returned 0x0
	[0169.495] WbemLocator:IUnknown:QueryInterface (in: This=0x749cc8, riid=0x57df308*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x57df304 | out: ppvObject=0x57df304*=0x7c83c0) returned 0x0
	[0169.495] WbemLocator:IUnknown:AddRef (This=0x7c83c0) returned 0x4
	[0169.495] WbemLocator:IUnknown:Release (This=0x7c83c0) returned 0x3
	[0169.495] WbemLocator:IUnknown:Release (This=0x7c83c0) returned 0x2
	[0169.495] SysStringLen (param_1=0x0) returned 0x0
	[0169.496] CoUninitialize () 

Thread:
	id = 144
	os_tid = 0xa30

	[0170.772] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0170.772] RoInitialize () returned 0x1
	[0170.772] RoUninitialize () returned 0x0
	[0170.773] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x57df190 | out: ppv=0x57df190*=0x55a1af0) returned 0x0
	[0170.774] WbemLocator:IUnknown:QueryInterface (in: This=0x55a1af0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57df3a8 | out: ppvObject=0x57df3a8*=0x0) returned 0x80004002
	[0170.774] WbemLocator:IClassFactory:CreateInstance (in: This=0x55a1af0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df3bc | out: ppvObject=0x57df3bc*=0x783020) returned 0x0
	[0170.774] WbemLocator:IUnknown:Release (This=0x55a1af0) returned 0x0
	[0170.774] WbemLocator:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57defdc | out: ppvObject=0x57defdc*=0x783020) returned 0x0
	[0170.774] WbemLocator:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57def98 | out: ppvObject=0x57def98*=0x0) returned 0x80004002
	[0170.774] WbemLocator:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57deb8c | out: ppvObject=0x57deb8c*=0x0) returned 0x80004002
	[0170.774] WbemLocator:IUnknown:AddRef (This=0x783020) returned 0x3
	[0170.774] WbemLocator:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de8f4 | out: ppvObject=0x57de8f4*=0x0) returned 0x80004002
	[0170.775] WbemLocator:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de8a4 | out: ppvObject=0x57de8a4*=0x0) returned 0x80004002
	[0170.775] WbemLocator:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de8b0 | out: ppvObject=0x57de8b0*=0x0) returned 0x80004002
	[0170.775] CoGetContextToken (in: pToken=0x57de910 | out: pToken=0x57de910) returned 0x0
	[0170.775] CoGetContextToken (in: pToken=0x57ded18 | out: pToken=0x57ded18) returned 0x0
	[0170.775] WbemLocator:IUnknown:QueryInterface (in: This=0x783020, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57deda8 | out: ppvObject=0x57deda8*=0x0) returned 0x80004002
	[0170.775] WbemLocator:IUnknown:Release (This=0x783020) returned 0x2
	[0170.775] WbemLocator:IUnknown:Release (This=0x783020) returned 0x1
	[0170.775] CoGetContextToken (in: pToken=0x57df388 | out: pToken=0x57df388) returned 0x0
	[0170.775] CoGetContextToken (in: pToken=0x57df2e8 | out: pToken=0x57df2e8) returned 0x0
	[0170.776] WbemLocator:IUnknown:QueryInterface (in: This=0x783020, riid=0x57df3b8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x57df3b4 | out: ppvObject=0x57df3b4*=0x783020) returned 0x0
	[0170.776] WbemLocator:IUnknown:AddRef (This=0x783020) returned 0x3
	[0170.776] WbemLocator:IUnknown:Release (This=0x783020) returned 0x2
	[0170.776] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bcf18, puCount=0x57df54c | out: puCount=0x57df54c*=0x2) returned 0x0
	[0170.776] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=8, puBuffLength=0x57df548*=0x0, pszText=0x0 | out: puBuffLength=0x57df548*=0xf, pszText=0x0) returned 0x0
	[0170.776] WbemDefPath:IWbemPath:GetText (in: This=0x7bcf18, lFlags=8, puBuffLength=0x57df548*=0xf, pszText="00000000000000" | out: puBuffLength=0x57df548*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0170.776] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x57df424 | out: ppv=0x57df424*=0x782fa0) returned 0x0
	[0170.776] WbemLocator:IWbemLocator:ConnectServer (in: This=0x782fa0, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x57df4b8 | out: ppNamespace=0x57df4b8*=0x7c8050) returned 0x0
	[0170.824] WbemLocator:IUnknown:QueryInterface (in: This=0x7c8050, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df354 | out: ppvObject=0x57df354*=0x749ea4) returned 0x0
	[0170.825] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x749ea4, pProxy=0x7c8050, pAuthnSvc=0x57df3a4, pAuthzSvc=0x57df3a0, pServerPrincName=0x57df398, pAuthnLevel=0x57df39c, pImpLevel=0x57df38c, pAuthInfo=0x57df390, pCapabilites=0x57df394 | out: pAuthnSvc=0x57df3a4*=0xa, pAuthzSvc=0x57df3a0*=0x0, pServerPrincName=0x57df398, pAuthnLevel=0x57df39c*=0x6, pImpLevel=0x57df38c*=0x2, pAuthInfo=0x57df390, pCapabilites=0x57df394*=0x1) returned 0x0
	[0170.825] WbemLocator:IUnknown:Release (This=0x749ea4) returned 0x1
	[0170.825] WbemLocator:IUnknown:QueryInterface (in: This=0x7c8050, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df348 | out: ppvObject=0x57df348*=0x749ec8) returned 0x0
	[0170.825] WbemLocator:IUnknown:QueryInterface (in: This=0x7c8050, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df344 | out: ppvObject=0x57df344*=0x749ea4) returned 0x0
	[0170.825] WbemLocator:IClientSecurity:SetBlanket (This=0x749ea4, pProxy=0x7c8050, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0170.825] WbemLocator:IUnknown:Release (This=0x749ea4) returned 0x2
	[0170.825] WbemLocator:IUnknown:Release (This=0x749ec8) returned 0x1
	[0170.825] CoTaskMemFree (pv=0x748440) 
	[0170.826] WbemLocator:IUnknown:Release (This=0x782fa0) returned 0x0
	[0170.826] WbemLocator:IUnknown:QueryInterface (in: This=0x7c8050, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57def44 | out: ppvObject=0x57def44*=0x749ec8) returned 0x0
	[0170.826] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57def00 | out: ppvObject=0x57def00*=0x0) returned 0x80004002
	[0170.828] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57ded1c | out: ppvObject=0x57ded1c*=0x0) returned 0x80004002
	[0170.829] WbemLocator:IUnknown:QueryInterface (in: This=0x7c8050, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57deaf4 | out: ppvObject=0x57deaf4*=0x0) returned 0x80004002
	[0170.832] WbemLocator:IUnknown:AddRef (This=0x749ec8) returned 0x3
	[0170.832] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de85c | out: ppvObject=0x57de85c*=0x0) returned 0x80004002
	[0170.832] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de80c | out: ppvObject=0x57de80c*=0x0) returned 0x80004002
	[0170.832] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de818 | out: ppvObject=0x57de818*=0x749e24) returned 0x0
	[0170.832] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749e24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x57de820 | out: pCid=0x57de820*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0170.832] WbemLocator:IUnknown:Release (This=0x749e24) returned 0x3
	[0170.832] CoGetContextToken (in: pToken=0x57de878 | out: pToken=0x57de878) returned 0x0
	[0170.832] CoGetContextToken (in: pToken=0x57dec80 | out: pToken=0x57dec80) returned 0x0
	[0170.832] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57ded10 | out: ppvObject=0x57ded10*=0x749eac) returned 0x0
	[0170.832] WbemLocator:IRpcOptions:Query (in: This=0x749eac, pPrx=0x749ec8, dwProperty=2, pdwValue=0x57ded38 | out: pdwValue=0x57ded38) returned 0x80004002
	[0170.833] WbemLocator:IUnknown:Release (This=0x749eac) returned 0x3
	[0170.833] WbemLocator:IUnknown:Release (This=0x749ec8) returned 0x2
	[0170.833] CoGetContextToken (in: pToken=0x57df258 | out: pToken=0x57df258) returned 0x0
	[0170.833] CoGetContextToken (in: pToken=0x57df1b8 | out: pToken=0x57df1b8) returned 0x0
	[0170.833] WbemLocator:IUnknown:QueryInterface (in: This=0x749ec8, riid=0x57df288*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x57df284 | out: ppvObject=0x57df284*=0x7c8050) returned 0x0
	[0170.833] WbemLocator:IUnknown:AddRef (This=0x7c8050) returned 0x4
	[0170.833] WbemLocator:IUnknown:Release (This=0x7c8050) returned 0x3
	[0170.833] WbemLocator:IUnknown:Release (This=0x7c8050) returned 0x2
	[0170.833] SysStringLen (param_1=0x0) returned 0x0
	[0170.834] CoUninitialize () 

Thread:
	id = 145
	os_tid = 0xa08

	[0171.768] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0171.768] RoInitialize () returned 0x1
	[0171.768] RoUninitialize () returned 0x0
	[0171.769] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x57df110 | out: ppv=0x57df110*=0x55a1e08) returned 0x0
	[0171.769] WbemLocator:IUnknown:QueryInterface (in: This=0x55a1e08, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57df328 | out: ppvObject=0x57df328*=0x0) returned 0x80004002
	[0171.769] WbemLocator:IClassFactory:CreateInstance (in: This=0x55a1e08, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df33c | out: ppvObject=0x57df33c*=0x782fe0) returned 0x0
	[0171.770] WbemLocator:IUnknown:Release (This=0x55a1e08) returned 0x0
	[0171.770] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57def5c | out: ppvObject=0x57def5c*=0x782fe0) returned 0x0
	[0171.770] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57def18 | out: ppvObject=0x57def18*=0x0) returned 0x80004002
	[0171.770] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57deb0c | out: ppvObject=0x57deb0c*=0x0) returned 0x80004002
	[0171.770] WbemLocator:IUnknown:AddRef (This=0x782fe0) returned 0x3
	[0171.770] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de874 | out: ppvObject=0x57de874*=0x0) returned 0x80004002
	[0171.770] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de824 | out: ppvObject=0x57de824*=0x0) returned 0x80004002
	[0171.770] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de830 | out: ppvObject=0x57de830*=0x0) returned 0x80004002
	[0171.770] CoGetContextToken (in: pToken=0x57de890 | out: pToken=0x57de890) returned 0x0
	[0171.771] CoGetContextToken (in: pToken=0x57dec98 | out: pToken=0x57dec98) returned 0x0
	[0171.771] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57ded28 | out: ppvObject=0x57ded28*=0x0) returned 0x80004002
	[0171.771] WbemLocator:IUnknown:Release (This=0x782fe0) returned 0x2
	[0171.771] WbemLocator:IUnknown:Release (This=0x782fe0) returned 0x1
	[0171.771] CoGetContextToken (in: pToken=0x57df308 | out: pToken=0x57df308) returned 0x0
	[0171.771] CoGetContextToken (in: pToken=0x57df268 | out: pToken=0x57df268) returned 0x0
	[0171.771] WbemLocator:IUnknown:QueryInterface (in: This=0x782fe0, riid=0x57df338*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x57df334 | out: ppvObject=0x57df334*=0x782fe0) returned 0x0
	[0171.771] WbemLocator:IUnknown:AddRef (This=0x782fe0) returned 0x3
	[0171.771] WbemLocator:IUnknown:Release (This=0x782fe0) returned 0x2
	[0171.771] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd068, puCount=0x57df4cc | out: puCount=0x57df4cc*=0x2) returned 0x0
	[0171.771] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=8, puBuffLength=0x57df4c8*=0x0, pszText=0x0 | out: puBuffLength=0x57df4c8*=0xf, pszText=0x0) returned 0x0
	[0171.771] WbemDefPath:IWbemPath:GetText (in: This=0x7bd068, lFlags=8, puBuffLength=0x57df4c8*=0xf, pszText="00000000000000" | out: puBuffLength=0x57df4c8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0171.771] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x57df3a4 | out: ppv=0x57df3a4*=0x783020) returned 0x0
	[0171.772] WbemLocator:IWbemLocator:ConnectServer (in: This=0x783020, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x57df438 | out: ppNamespace=0x57df438*=0x776498) returned 0x0
	[0171.810] WbemLocator:IUnknown:QueryInterface (in: This=0x776498, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df2d4 | out: ppvObject=0x57df2d4*=0x749da4) returned 0x0
	[0171.810] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x749da4, pProxy=0x776498, pAuthnSvc=0x57df324, pAuthzSvc=0x57df320, pServerPrincName=0x57df318, pAuthnLevel=0x57df31c, pImpLevel=0x57df30c, pAuthInfo=0x57df310, pCapabilites=0x57df314 | out: pAuthnSvc=0x57df324*=0xa, pAuthzSvc=0x57df320*=0x0, pServerPrincName=0x57df318, pAuthnLevel=0x57df31c*=0x6, pImpLevel=0x57df30c*=0x2, pAuthInfo=0x57df310, pCapabilites=0x57df314*=0x1) returned 0x0
	[0171.810] WbemLocator:IUnknown:Release (This=0x749da4) returned 0x1
	[0171.810] WbemLocator:IUnknown:QueryInterface (in: This=0x776498, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df2c8 | out: ppvObject=0x57df2c8*=0x749dc8) returned 0x0
	[0171.810] WbemLocator:IUnknown:QueryInterface (in: This=0x776498, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df2c4 | out: ppvObject=0x57df2c4*=0x749da4) returned 0x0
	[0171.810] WbemLocator:IClientSecurity:SetBlanket (This=0x749da4, pProxy=0x776498, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0171.811] WbemLocator:IUnknown:Release (This=0x749da4) returned 0x2
	[0171.811] WbemLocator:IUnknown:Release (This=0x749dc8) returned 0x1
	[0171.811] CoTaskMemFree (pv=0x7482c0) 
	[0171.811] WbemLocator:IUnknown:Release (This=0x783020) returned 0x0
	[0171.811] WbemLocator:IUnknown:QueryInterface (in: This=0x776498, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57deec4 | out: ppvObject=0x57deec4*=0x749dc8) returned 0x0
	[0171.811] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57dee80 | out: ppvObject=0x57dee80*=0x0) returned 0x80004002
	[0171.812] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57dec9c | out: ppvObject=0x57dec9c*=0x0) returned 0x80004002
	[0171.815] WbemLocator:IUnknown:QueryInterface (in: This=0x776498, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57dea74 | out: ppvObject=0x57dea74*=0x0) returned 0x80004002
	[0171.816] WbemLocator:IUnknown:AddRef (This=0x749dc8) returned 0x3
	[0171.816] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de7dc | out: ppvObject=0x57de7dc*=0x0) returned 0x80004002
	[0171.816] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de78c | out: ppvObject=0x57de78c*=0x0) returned 0x80004002
	[0171.816] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de798 | out: ppvObject=0x57de798*=0x749d24) returned 0x0
	[0171.817] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749d24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x57de7a0 | out: pCid=0x57de7a0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0171.817] WbemLocator:IUnknown:Release (This=0x749d24) returned 0x3
	[0171.817] CoGetContextToken (in: pToken=0x57de7f8 | out: pToken=0x57de7f8) returned 0x0
	[0171.817] CoGetContextToken (in: pToken=0x57dec00 | out: pToken=0x57dec00) returned 0x0
	[0171.817] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57dec90 | out: ppvObject=0x57dec90*=0x749dac) returned 0x0
	[0171.817] WbemLocator:IRpcOptions:Query (in: This=0x749dac, pPrx=0x749dc8, dwProperty=2, pdwValue=0x57decb8 | out: pdwValue=0x57decb8) returned 0x80004002
	[0171.817] WbemLocator:IUnknown:Release (This=0x749dac) returned 0x3
	[0171.817] WbemLocator:IUnknown:Release (This=0x749dc8) returned 0x2
	[0171.817] CoGetContextToken (in: pToken=0x57df1d8 | out: pToken=0x57df1d8) returned 0x0
	[0171.817] CoGetContextToken (in: pToken=0x57df138 | out: pToken=0x57df138) returned 0x0
	[0171.817] WbemLocator:IUnknown:QueryInterface (in: This=0x749dc8, riid=0x57df208*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x57df204 | out: ppvObject=0x57df204*=0x776498) returned 0x0
	[0171.817] WbemLocator:IUnknown:AddRef (This=0x776498) returned 0x4
	[0171.817] WbemLocator:IUnknown:Release (This=0x776498) returned 0x3
	[0171.817] WbemLocator:IUnknown:Release (This=0x776498) returned 0x2
	[0171.817] SysStringLen (param_1=0x0) returned 0x0
	[0171.818] CoUninitialize () 

Thread:
	id = 148
	os_tid = 0x49c

	[0173.130] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0173.130] RoInitialize () returned 0x1
	[0173.130] RoUninitialize () returned 0x0
	[0173.131] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x57df090 | out: ppv=0x57df090*=0x55a2030) returned 0x0
	[0173.132] WbemLocator:IUnknown:QueryInterface (in: This=0x55a2030, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57df2a8 | out: ppvObject=0x57df2a8*=0x0) returned 0x80004002
	[0173.132] WbemLocator:IClassFactory:CreateInstance (in: This=0x55a2030, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df2bc | out: ppvObject=0x57df2bc*=0x783030) returned 0x0
	[0173.132] WbemLocator:IUnknown:Release (This=0x55a2030) returned 0x0
	[0173.132] WbemLocator:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57deedc | out: ppvObject=0x57deedc*=0x783030) returned 0x0
	[0173.132] WbemLocator:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57dee98 | out: ppvObject=0x57dee98*=0x0) returned 0x80004002
	[0173.132] WbemLocator:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57dea8c | out: ppvObject=0x57dea8c*=0x0) returned 0x80004002
	[0173.132] WbemLocator:IUnknown:AddRef (This=0x783030) returned 0x3
	[0173.133] WbemLocator:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de7f4 | out: ppvObject=0x57de7f4*=0x0) returned 0x80004002
	[0173.133] WbemLocator:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de7a4 | out: ppvObject=0x57de7a4*=0x0) returned 0x80004002
	[0173.133] WbemLocator:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de7b0 | out: ppvObject=0x57de7b0*=0x0) returned 0x80004002
	[0173.133] CoGetContextToken (in: pToken=0x57de810 | out: pToken=0x57de810) returned 0x0
	[0173.133] CoGetContextToken (in: pToken=0x57dec18 | out: pToken=0x57dec18) returned 0x0
	[0173.133] WbemLocator:IUnknown:QueryInterface (in: This=0x783030, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57deca8 | out: ppvObject=0x57deca8*=0x0) returned 0x80004002
	[0173.133] WbemLocator:IUnknown:Release (This=0x783030) returned 0x2
	[0173.133] WbemLocator:IUnknown:Release (This=0x783030) returned 0x1
	[0173.133] CoGetContextToken (in: pToken=0x57df288 | out: pToken=0x57df288) returned 0x0
	[0173.134] CoGetContextToken (in: pToken=0x57df1e8 | out: pToken=0x57df1e8) returned 0x0
	[0173.134] WbemLocator:IUnknown:QueryInterface (in: This=0x783030, riid=0x57df2b8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x57df2b4 | out: ppvObject=0x57df2b4*=0x783030) returned 0x0
	[0173.134] WbemLocator:IUnknown:AddRef (This=0x783030) returned 0x3
	[0173.134] WbemLocator:IUnknown:Release (This=0x783030) returned 0x2
	[0173.134] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd5a8, puCount=0x57df44c | out: puCount=0x57df44c*=0x2) returned 0x0
	[0173.134] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=8, puBuffLength=0x57df448*=0x0, pszText=0x0 | out: puBuffLength=0x57df448*=0xf, pszText=0x0) returned 0x0
	[0173.134] WbemDefPath:IWbemPath:GetText (in: This=0x7bd5a8, lFlags=8, puBuffLength=0x57df448*=0xf, pszText="00000000000000" | out: puBuffLength=0x57df448*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.134] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x57df324 | out: ppv=0x57df324*=0x783040) returned 0x0
	[0173.134] WbemLocator:IWbemLocator:ConnectServer (in: This=0x783040, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x57df3b8 | out: ppNamespace=0x57df3b8*=0x55a4f68) returned 0x0
	[0173.150] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4f68, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df254 | out: ppvObject=0x57df254*=0x7491a4) returned 0x0
	[0173.151] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7491a4, pProxy=0x55a4f68, pAuthnSvc=0x57df2a4, pAuthzSvc=0x57df2a0, pServerPrincName=0x57df298, pAuthnLevel=0x57df29c, pImpLevel=0x57df28c, pAuthInfo=0x57df290, pCapabilites=0x57df294 | out: pAuthnSvc=0x57df2a4*=0xa, pAuthzSvc=0x57df2a0*=0x0, pServerPrincName=0x57df298, pAuthnLevel=0x57df29c*=0x6, pImpLevel=0x57df28c*=0x2, pAuthInfo=0x57df290, pCapabilites=0x57df294*=0x1) returned 0x0
	[0173.151] WbemLocator:IUnknown:Release (This=0x7491a4) returned 0x1
	[0173.151] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4f68, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df248 | out: ppvObject=0x57df248*=0x7491c8) returned 0x0
	[0173.151] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4f68, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df244 | out: ppvObject=0x57df244*=0x7491a4) returned 0x0
	[0173.151] WbemLocator:IClientSecurity:SetBlanket (This=0x7491a4, pProxy=0x55a4f68, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.151] WbemLocator:IUnknown:Release (This=0x7491a4) returned 0x2
	[0173.151] WbemLocator:IUnknown:Release (This=0x7491c8) returned 0x1
	[0173.151] CoTaskMemFree (pv=0x7482c0) 
	[0173.151] WbemLocator:IUnknown:Release (This=0x783040) returned 0x0
	[0173.151] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4f68, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57dee44 | out: ppvObject=0x57dee44*=0x7491c8) returned 0x0
	[0173.152] WbemLocator:IUnknown:QueryInterface (in: This=0x7491c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57dee00 | out: ppvObject=0x57dee00*=0x0) returned 0x80004002
	[0173.154] WbemLocator:IUnknown:QueryInterface (in: This=0x7491c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57dec1c | out: ppvObject=0x57dec1c*=0x0) returned 0x80004002
	[0173.156] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4f68, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57de9f4 | out: ppvObject=0x57de9f4*=0x0) returned 0x80004002
	[0173.157] WbemLocator:IUnknown:AddRef (This=0x7491c8) returned 0x3
	[0173.157] WbemLocator:IUnknown:QueryInterface (in: This=0x7491c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de75c | out: ppvObject=0x57de75c*=0x0) returned 0x80004002
	[0173.157] WbemLocator:IUnknown:QueryInterface (in: This=0x7491c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de70c | out: ppvObject=0x57de70c*=0x0) returned 0x80004002
	[0173.157] WbemLocator:IUnknown:QueryInterface (in: This=0x7491c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de718 | out: ppvObject=0x57de718*=0x749124) returned 0x0
	[0173.158] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749124, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x57de720 | out: pCid=0x57de720*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.158] WbemLocator:IUnknown:Release (This=0x749124) returned 0x3
	[0173.158] CoGetContextToken (in: pToken=0x57de778 | out: pToken=0x57de778) returned 0x0
	[0173.158] CoGetContextToken (in: pToken=0x57deb80 | out: pToken=0x57deb80) returned 0x0
	[0173.158] WbemLocator:IUnknown:QueryInterface (in: This=0x7491c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57dec10 | out: ppvObject=0x57dec10*=0x7491ac) returned 0x0
	[0173.158] WbemLocator:IRpcOptions:Query (in: This=0x7491ac, pPrx=0x7491c8, dwProperty=2, pdwValue=0x57dec38 | out: pdwValue=0x57dec38) returned 0x80004002
	[0173.158] WbemLocator:IUnknown:Release (This=0x7491ac) returned 0x3
	[0173.158] WbemLocator:IUnknown:Release (This=0x7491c8) returned 0x2
	[0173.158] CoGetContextToken (in: pToken=0x57df158 | out: pToken=0x57df158) returned 0x0
	[0173.158] CoGetContextToken (in: pToken=0x57df0b8 | out: pToken=0x57df0b8) returned 0x0
	[0173.158] WbemLocator:IUnknown:QueryInterface (in: This=0x7491c8, riid=0x57df188*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x57df184 | out: ppvObject=0x57df184*=0x55a4f68) returned 0x0
	[0173.158] WbemLocator:IUnknown:AddRef (This=0x55a4f68) returned 0x4
	[0173.158] WbemLocator:IUnknown:Release (This=0x55a4f68) returned 0x3
	[0173.158] WbemLocator:IUnknown:Release (This=0x55a4f68) returned 0x2
	[0173.158] SysStringLen (param_1=0x0) returned 0x0
	[0173.158] CoUninitialize () 

Thread:
	id = 149
	os_tid = 0x970

	[0173.743] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0173.743] RoInitialize () returned 0x1
	[0173.743] RoUninitialize () returned 0x0
	[0173.745] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x57df010 | out: ppv=0x57df010*=0x55a02f0) returned 0x0
	[0173.745] WbemLocator:IUnknown:QueryInterface (in: This=0x55a02f0, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57df228 | out: ppvObject=0x57df228*=0x0) returned 0x80004002
	[0173.745] WbemLocator:IClassFactory:CreateInstance (in: This=0x55a02f0, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df23c | out: ppvObject=0x57df23c*=0x7831e0) returned 0x0
	[0173.745] WbemLocator:IUnknown:Release (This=0x55a02f0) returned 0x0
	[0173.746] WbemLocator:IUnknown:QueryInterface (in: This=0x7831e0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57dee5c | out: ppvObject=0x57dee5c*=0x7831e0) returned 0x0
	[0173.746] WbemLocator:IUnknown:QueryInterface (in: This=0x7831e0, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57dee18 | out: ppvObject=0x57dee18*=0x0) returned 0x80004002
	[0173.746] WbemLocator:IUnknown:QueryInterface (in: This=0x7831e0, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57dea0c | out: ppvObject=0x57dea0c*=0x0) returned 0x80004002
	[0173.746] WbemLocator:IUnknown:AddRef (This=0x7831e0) returned 0x3
	[0173.746] WbemLocator:IUnknown:QueryInterface (in: This=0x7831e0, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de774 | out: ppvObject=0x57de774*=0x0) returned 0x80004002
	[0173.746] WbemLocator:IUnknown:QueryInterface (in: This=0x7831e0, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de724 | out: ppvObject=0x57de724*=0x0) returned 0x80004002
	[0173.746] WbemLocator:IUnknown:QueryInterface (in: This=0x7831e0, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de730 | out: ppvObject=0x57de730*=0x0) returned 0x80004002
	[0173.746] CoGetContextToken (in: pToken=0x57de790 | out: pToken=0x57de790) returned 0x0
	[0173.746] CoGetContextToken (in: pToken=0x57deb98 | out: pToken=0x57deb98) returned 0x0
	[0173.747] WbemLocator:IUnknown:QueryInterface (in: This=0x7831e0, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57dec28 | out: ppvObject=0x57dec28*=0x0) returned 0x80004002
	[0173.747] WbemLocator:IUnknown:Release (This=0x7831e0) returned 0x2
	[0173.747] WbemLocator:IUnknown:Release (This=0x7831e0) returned 0x1
	[0173.747] CoGetContextToken (in: pToken=0x57df208 | out: pToken=0x57df208) returned 0x0
	[0173.747] CoGetContextToken (in: pToken=0x57df168 | out: pToken=0x57df168) returned 0x0
	[0173.747] WbemLocator:IUnknown:QueryInterface (in: This=0x7831e0, riid=0x57df238*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x57df234 | out: ppvObject=0x57df234*=0x7831e0) returned 0x0
	[0173.747] WbemLocator:IUnknown:AddRef (This=0x7831e0) returned 0x3
	[0173.747] WbemLocator:IUnknown:Release (This=0x7831e0) returned 0x2
	[0173.747] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7bd688, puCount=0x57df3cc | out: puCount=0x57df3cc*=0x2) returned 0x0
	[0173.747] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=8, puBuffLength=0x57df3c8*=0x0, pszText=0x0 | out: puBuffLength=0x57df3c8*=0xf, pszText=0x0) returned 0x0
	[0173.747] WbemDefPath:IWbemPath:GetText (in: This=0x7bd688, lFlags=8, puBuffLength=0x57df3c8*=0xf, pszText="00000000000000" | out: puBuffLength=0x57df3c8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0173.747] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x57df2a4 | out: ppv=0x57df2a4*=0x783240) returned 0x0
	[0173.747] WbemLocator:IWbemLocator:ConnectServer (in: This=0x783240, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x57df338 | out: ppNamespace=0x57df338*=0x55a4a68) returned 0x0
	[0173.782] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4a68, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df1d4 | out: ppvObject=0x57df1d4*=0x7498a4) returned 0x0
	[0173.783] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7498a4, pProxy=0x55a4a68, pAuthnSvc=0x57df224, pAuthzSvc=0x57df220, pServerPrincName=0x57df218, pAuthnLevel=0x57df21c, pImpLevel=0x57df20c, pAuthInfo=0x57df210, pCapabilites=0x57df214 | out: pAuthnSvc=0x57df224*=0xa, pAuthzSvc=0x57df220*=0x0, pServerPrincName=0x57df218, pAuthnLevel=0x57df21c*=0x6, pImpLevel=0x57df20c*=0x2, pAuthInfo=0x57df210, pCapabilites=0x57df214*=0x1) returned 0x0
	[0173.783] WbemLocator:IUnknown:Release (This=0x7498a4) returned 0x1
	[0173.783] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4a68, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df1c8 | out: ppvObject=0x57df1c8*=0x7498c8) returned 0x0
	[0173.783] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4a68, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df1c4 | out: ppvObject=0x57df1c4*=0x7498a4) returned 0x0
	[0173.783] WbemLocator:IClientSecurity:SetBlanket (This=0x7498a4, pProxy=0x55a4a68, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0173.783] WbemLocator:IUnknown:Release (This=0x7498a4) returned 0x2
	[0173.783] WbemLocator:IUnknown:Release (This=0x7498c8) returned 0x1
	[0173.783] CoTaskMemFree (pv=0x7483b0) 
	[0173.783] WbemLocator:IUnknown:Release (This=0x783240) returned 0x0
	[0173.783] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4a68, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57dedc4 | out: ppvObject=0x57dedc4*=0x7498c8) returned 0x0
	[0173.784] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57ded80 | out: ppvObject=0x57ded80*=0x0) returned 0x80004002
	[0173.786] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57deb9c | out: ppvObject=0x57deb9c*=0x0) returned 0x80004002
	[0173.787] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4a68, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57de974 | out: ppvObject=0x57de974*=0x0) returned 0x80004002
	[0173.800] WbemLocator:IUnknown:AddRef (This=0x7498c8) returned 0x3
	[0173.800] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de6dc | out: ppvObject=0x57de6dc*=0x0) returned 0x80004002
	[0173.800] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de68c | out: ppvObject=0x57de68c*=0x0) returned 0x80004002
	[0173.800] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de698 | out: ppvObject=0x57de698*=0x749824) returned 0x0
	[0173.801] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749824, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x57de6a0 | out: pCid=0x57de6a0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0173.801] WbemLocator:IUnknown:Release (This=0x749824) returned 0x3
	[0173.801] CoGetContextToken (in: pToken=0x57de6f8 | out: pToken=0x57de6f8) returned 0x0
	[0173.818] CoGetContextToken (in: pToken=0x57deb00 | out: pToken=0x57deb00) returned 0x0
	[0173.818] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57deb90 | out: ppvObject=0x57deb90*=0x7498ac) returned 0x0
	[0173.819] WbemLocator:IRpcOptions:Query (in: This=0x7498ac, pPrx=0x7498c8, dwProperty=2, pdwValue=0x57debb8 | out: pdwValue=0x57debb8) returned 0x80004002
	[0173.819] WbemLocator:IUnknown:Release (This=0x7498ac) returned 0x3
	[0173.819] WbemLocator:IUnknown:Release (This=0x7498c8) returned 0x2
	[0173.819] CoGetContextToken (in: pToken=0x57df0d8 | out: pToken=0x57df0d8) returned 0x0
	[0173.819] CoGetContextToken (in: pToken=0x57df038 | out: pToken=0x57df038) returned 0x0
	[0173.819] WbemLocator:IUnknown:QueryInterface (in: This=0x7498c8, riid=0x57df108*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x57df104 | out: ppvObject=0x57df104*=0x55a4a68) returned 0x0
	[0173.819] WbemLocator:IUnknown:AddRef (This=0x55a4a68) returned 0x4
	[0173.819] WbemLocator:IUnknown:Release (This=0x55a4a68) returned 0x3
	[0173.819] WbemLocator:IUnknown:Release (This=0x55a4a68) returned 0x2
	[0173.819] SysStringLen (param_1=0x0) returned 0x0
	[0173.819] CoUninitialize () 

Thread:
	id = 150
	os_tid = 0xc6c

	[0175.126] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0175.126] RoInitialize () returned 0x1
	[0175.126] RoUninitialize () returned 0x0
	[0175.127] CoGetClassObject (in: rclsid=0x7393dc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c6054e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x57def90 | out: ppv=0x57def90*=0x55a0440) returned 0x0
	[0175.128] WbemLocator:IUnknown:QueryInterface (in: This=0x55a0440, riid=0x6c5b95e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57df1a8 | out: ppvObject=0x57df1a8*=0x0) returned 0x80004002
	[0175.128] WbemLocator:IClassFactory:CreateInstance (in: This=0x55a0440, pUnkOuter=0x0, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df1bc | out: ppvObject=0x57df1bc*=0x783260) returned 0x0
	[0175.128] WbemLocator:IUnknown:Release (This=0x55a0440) returned 0x0
	[0175.128] WbemLocator:IUnknown:QueryInterface (in: This=0x783260, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57deddc | out: ppvObject=0x57deddc*=0x783260) returned 0x0
	[0175.128] WbemLocator:IUnknown:QueryInterface (in: This=0x783260, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57ded98 | out: ppvObject=0x57ded98*=0x0) returned 0x80004002
	[0175.128] WbemLocator:IUnknown:QueryInterface (in: This=0x783260, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57de98c | out: ppvObject=0x57de98c*=0x0) returned 0x80004002
	[0175.128] WbemLocator:IUnknown:AddRef (This=0x783260) returned 0x3
	[0175.128] WbemLocator:IUnknown:QueryInterface (in: This=0x783260, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de6f4 | out: ppvObject=0x57de6f4*=0x0) returned 0x80004002
	[0175.128] WbemLocator:IUnknown:QueryInterface (in: This=0x783260, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de6a4 | out: ppvObject=0x57de6a4*=0x0) returned 0x80004002
	[0175.128] WbemLocator:IUnknown:QueryInterface (in: This=0x783260, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de6b0 | out: ppvObject=0x57de6b0*=0x0) returned 0x80004002
	[0175.128] CoGetContextToken (in: pToken=0x57de710 | out: pToken=0x57de710) returned 0x0
	[0175.129] CoGetContextToken (in: pToken=0x57deb18 | out: pToken=0x57deb18) returned 0x0
	[0175.129] WbemLocator:IUnknown:QueryInterface (in: This=0x783260, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57deba8 | out: ppvObject=0x57deba8*=0x0) returned 0x80004002
	[0175.129] WbemLocator:IUnknown:Release (This=0x783260) returned 0x2
	[0175.129] WbemLocator:IUnknown:Release (This=0x783260) returned 0x1
	[0175.129] CoGetContextToken (in: pToken=0x57df188 | out: pToken=0x57df188) returned 0x0
	[0175.129] CoGetContextToken (in: pToken=0x57df0e8 | out: pToken=0x57df0e8) returned 0x0
	[0175.129] WbemLocator:IUnknown:QueryInterface (in: This=0x783260, riid=0x57df1b8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x57df1b4 | out: ppvObject=0x57df1b4*=0x783260) returned 0x0
	[0175.129] WbemLocator:IUnknown:AddRef (This=0x783260) returned 0x3
	[0175.129] WbemLocator:IUnknown:Release (This=0x783260) returned 0x2
	[0175.129] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x796128, puCount=0x57df34c | out: puCount=0x57df34c*=0x2) returned 0x0
	[0175.129] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=8, puBuffLength=0x57df348*=0x0, pszText=0x0 | out: puBuffLength=0x57df348*=0xf, pszText=0x0) returned 0x0
	[0175.130] WbemDefPath:IWbemPath:GetText (in: This=0x796128, lFlags=8, puBuffLength=0x57df348*=0xf, pszText="00000000000000" | out: puBuffLength=0x57df348*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0175.130] CoCreateInstance (in: rclsid=0x69d81284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x69d812e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x57df224 | out: ppv=0x57df224*=0x7832b0) returned 0x0
	[0175.130] WbemLocator:IWbemLocator:ConnectServer (in: This=0x7832b0, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x57df2b8 | out: ppNamespace=0x57df2b8*=0x55a4ab8) returned 0x0
	[0175.155] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4ab8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df154 | out: ppvObject=0x57df154*=0x749ba4) returned 0x0
	[0175.156] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x749ba4, pProxy=0x55a4ab8, pAuthnSvc=0x57df1a4, pAuthzSvc=0x57df1a0, pServerPrincName=0x57df198, pAuthnLevel=0x57df19c, pImpLevel=0x57df18c, pAuthInfo=0x57df190, pCapabilites=0x57df194 | out: pAuthnSvc=0x57df1a4*=0xa, pAuthzSvc=0x57df1a0*=0x0, pServerPrincName=0x57df198, pAuthnLevel=0x57df19c*=0x6, pImpLevel=0x57df18c*=0x2, pAuthInfo=0x57df190, pCapabilites=0x57df194*=0x1) returned 0x0
	[0175.156] WbemLocator:IUnknown:Release (This=0x749ba4) returned 0x1
	[0175.156] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4ab8, riid=0x69d810f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df148 | out: ppvObject=0x57df148*=0x749bc8) returned 0x0
	[0175.156] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4ab8, riid=0x69d81104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57df144 | out: ppvObject=0x57df144*=0x749ba4) returned 0x0
	[0175.156] WbemLocator:IClientSecurity:SetBlanket (This=0x749ba4, pProxy=0x55a4ab8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0175.156] WbemLocator:IUnknown:Release (This=0x749ba4) returned 0x2
	[0175.156] WbemLocator:IUnknown:Release (This=0x749bc8) returned 0x1
	[0175.156] CoTaskMemFree (pv=0x71be70) 
	[0175.156] WbemLocator:IUnknown:Release (This=0x7832b0) returned 0x0
	[0175.157] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4ab8, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57ded44 | out: ppvObject=0x57ded44*=0x749bc8) returned 0x0
	[0175.157] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c68fdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x57ded00 | out: ppvObject=0x57ded00*=0x0) returned 0x80004002
	[0175.157] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c68fb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x57deb1c | out: ppvObject=0x57deb1c*=0x0) returned 0x80004002
	[0175.158] WbemLocator:IUnknown:QueryInterface (in: This=0x55a4ab8, riid=0x6c69056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x57de8f4 | out: ppvObject=0x57de8f4*=0x0) returned 0x80004002
	[0175.159] WbemLocator:IUnknown:AddRef (This=0x749bc8) returned 0x3
	[0175.159] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c690208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x57de65c | out: ppvObject=0x57de65c*=0x0) returned 0x80004002
	[0175.159] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c69015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x57de60c | out: ppvObject=0x57de60c*=0x0) returned 0x80004002
	[0175.159] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c5640e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57de618 | out: ppvObject=0x57de618*=0x749b24) returned 0x0
	[0175.159] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x749b24, riid=0x6c556c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x57de620 | out: pCid=0x57de620*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0175.159] WbemLocator:IUnknown:Release (This=0x749b24) returned 0x3
	[0175.159] CoGetContextToken (in: pToken=0x57de678 | out: pToken=0x57de678) returned 0x0
	[0175.159] CoGetContextToken (in: pToken=0x57dea80 | out: pToken=0x57dea80) returned 0x0
	[0175.159] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x6c690448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x57deb10 | out: ppvObject=0x57deb10*=0x749bac) returned 0x0
	[0175.159] WbemLocator:IRpcOptions:Query (in: This=0x749bac, pPrx=0x749bc8, dwProperty=2, pdwValue=0x57deb38 | out: pdwValue=0x57deb38) returned 0x80004002
	[0175.160] WbemLocator:IUnknown:Release (This=0x749bac) returned 0x3
	[0175.160] WbemLocator:IUnknown:Release (This=0x749bc8) returned 0x2
	[0175.160] CoGetContextToken (in: pToken=0x57df058 | out: pToken=0x57df058) returned 0x0
	[0175.160] CoGetContextToken (in: pToken=0x57defb8 | out: pToken=0x57defb8) returned 0x0
	[0175.160] WbemLocator:IUnknown:QueryInterface (in: This=0x749bc8, riid=0x57df088*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x57df084 | out: ppvObject=0x57df084*=0x55a4ab8) returned 0x0
	[0175.160] WbemLocator:IUnknown:AddRef (This=0x55a4ab8) returned 0x4
	[0175.160] WbemLocator:IUnknown:Release (This=0x55a4ab8) returned 0x3
	[0175.160] WbemLocator:IUnknown:Release (This=0x55a4ab8) returned 0x2
	[0175.160] SysStringLen (param_1=0x0) returned 0x0
	[0175.160] CoUninitialize () 

Thread:
	id = 151
	os_tid = 0x128c


Process:
	id = "4"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x7496b000"
	os_pid = "0x3e8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "3"
	os_parent_pid = "0x214"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c9f4" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 627
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 628
	        start_va = 0x20000
	          end_va = 0x21fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 629
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 630
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 631
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 632
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 633
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 634
	        start_va = 0x100000
	          end_va = 0x1bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 635
	        start_va = 0x1c0000
	          end_va = 0x1c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001c0000"
	        filename = ""

Region:
	              id = 636
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 637
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 638
	        start_va = 0x1f0000
	          end_va = 0x1f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 639
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 640
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 641
	        start_va = 0x410000
	          end_va = 0x452fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000410000"
	        filename = ""

Region:
	              id = 642
	        start_va = 0x460000
	          end_va = 0x460fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000460000"
	        filename = ""

Region:
	              id = 643
	        start_va = 0x470000
	          end_va = 0x470fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000470000"
	        filename = ""

Region:
	              id = 644
	        start_va = 0x480000
	          end_va = 0x53ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 645
	        start_va = 0x540000
	          end_va = 0x540fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000540000"
	        filename = ""

Region:
	              id = 646
	        start_va = 0x550000
	          end_va = 0x550fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000550000"
	        filename = ""

Region:
	              id = 647
	        start_va = 0x560000
	          end_va = 0x560fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000560000"
	        filename = ""

Region:
	              id = 648
	        start_va = 0x570000
	          end_va = 0x576fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000570000"
	        filename = ""

Region:
	              id = 649
	        start_va = 0x580000
	          end_va = 0x580fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000580000"
	        filename = ""

Region:
	              id = 650
	        start_va = 0x590000
	          end_va = 0x590fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000590000"
	        filename = ""

Region:
	              id = 651
	        start_va = 0x5a0000
	          end_va = 0x5a1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005a0000"
	        filename = ""

Region:
	              id = 652
	        start_va = 0x5b0000
	          end_va = 0x5b3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 653
	        start_va = 0x5c0000
	          end_va = 0x5c3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 654
	        start_va = 0x5d0000
	          end_va = 0x5d1fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 655
	        start_va = 0x5e0000
	          end_va = 0x5e6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005e0000"
	        filename = ""

Region:
	              id = 656
	        start_va = 0x5f0000
	          end_va = 0x5f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005f0000"
	        filename = ""

Region:
	              id = 657
	        start_va = 0x600000
	          end_va = 0x6fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 658
	        start_va = 0x700000
	          end_va = 0x887fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000700000"
	        filename = ""

Region:
	              id = 659
	        start_va = 0x890000
	          end_va = 0x891fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000890000"
	        filename = ""

Region:
	              id = 660
	        start_va = 0x8a0000
	          end_va = 0x8a6fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "newdev.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\newdev.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\newdev.dll.mui")

Region:
	              id = 661
	        start_va = 0x8b0000
	          end_va = 0x8b6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008b0000"
	        filename = ""

Region:
	              id = 662
	        start_va = 0x8c0000
	          end_va = 0x8c0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usocore.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui")

Region:
	              id = 663
	        start_va = 0x8d0000
	          end_va = 0x8d1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008d0000"
	        filename = ""

Region:
	              id = 664
	        start_va = 0x8e0000
	          end_va = 0x8e3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008e0000"
	        filename = ""

Region:
	              id = 665
	        start_va = 0x8f0000
	          end_va = 0x8fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008f0000"
	        filename = ""

Region:
	              id = 666
	        start_va = 0x900000
	          end_va = 0x9fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000900000"
	        filename = ""

Region:
	              id = 667
	        start_va = 0xa00000
	          end_va = 0xb80fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a00000"
	        filename = ""

Region:
	              id = 668
	        start_va = 0xb90000
	          end_va = 0xf8afff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b90000"
	        filename = ""

Region:
	              id = 669
	        start_va = 0xf90000
	          end_va = 0xfd4fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db")

Region:
	              id = 670
	        start_va = 0xfe0000
	          end_va = 0xff7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000fe0000"
	        filename = ""

Region:
	              id = 671
	        start_va = 0x1000000
	          end_va = 0x10fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001000000"
	        filename = ""

Region:
	              id = 672
	        start_va = 0x1100000
	          end_va = 0x117ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001100000"
	        filename = ""

Region:
	              id = 673
	        start_va = 0x1180000
	          end_va = 0x11fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001180000"
	        filename = ""

Region:
	              id = 674
	        start_va = 0x1200000
	          end_va = 0x12fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001200000"
	        filename = ""

Region:
	              id = 675
	        start_va = 0x1300000
	          end_va = 0x13fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 676
	        start_va = 0x1400000
	          end_va = 0x14fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001400000"
	        filename = ""

Region:
	              id = 677
	        start_va = 0x1500000
	          end_va = 0x15fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001500000"
	        filename = ""

Region:
	              id = 678
	        start_va = 0x1600000
	          end_va = 0x1936fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 679
	        start_va = 0x1940000
	          end_va = 0x1a3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001940000"
	        filename = ""

Region:
	              id = 680
	        start_va = 0x1a40000
	          end_va = 0x1b3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a40000"
	        filename = ""

Region:
	              id = 681
	        start_va = 0x1b40000
	          end_va = 0x1c3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b40000"
	        filename = ""

Region:
	              id = 682
	        start_va = 0x1c40000
	          end_va = 0x1d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001c40000"
	        filename = ""

Region:
	              id = 683
	        start_va = 0x1d40000
	          end_va = 0x1e3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d40000"
	        filename = ""

Region:
	              id = 684
	        start_va = 0x1e40000
	          end_va = 0x1e8dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001e40000"
	        filename = ""

Region:
	              id = 685
	        start_va = 0x1e90000
	          end_va = 0x1e96fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e90000"
	        filename = ""

Region:
	              id = 686
	        start_va = 0x1ea0000
	          end_va = 0x1eaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ea0000"
	        filename = ""

Region:
	              id = 687
	        start_va = 0x1eb0000
	          end_va = 0x1ebffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001eb0000"
	        filename = ""

Region:
	              id = 688
	        start_va = 0x1ec0000
	          end_va = 0x1ecffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ec0000"
	        filename = ""

Region:
	              id = 689
	        start_va = 0x1ed0000
	          end_va = 0x1edffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ed0000"
	        filename = ""

Region:
	              id = 690
	        start_va = 0x1ee0000
	          end_va = 0x1eeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ee0000"
	        filename = ""

Region:
	              id = 691
	        start_va = 0x1ef0000
	          end_va = 0x1efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ef0000"
	        filename = ""

Region:
	              id = 692
	        start_va = 0x1f00000
	          end_va = 0x1ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f00000"
	        filename = ""

Region:
	              id = 693
	        start_va = 0x2000000
	          end_va = 0x20fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002000000"
	        filename = ""

Region:
	              id = 694
	        start_va = 0x2100000
	          end_va = 0x21fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002100000"
	        filename = ""

Region:
	              id = 695
	        start_va = 0x2200000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002200000"
	        filename = ""

Region:
	              id = 696
	        start_va = 0x2300000
	          end_va = 0x237ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 697
	        start_va = 0x2380000
	          end_va = 0x23fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002380000"
	        filename = ""

Region:
	              id = 698
	        start_va = 0x2400000
	          end_va = 0x240ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002400000"
	        filename = ""

Region:
	              id = 699
	        start_va = 0x2410000
	          end_va = 0x2410fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002410000"
	        filename = ""

Region:
	              id = 700
	        start_va = 0x2420000
	          end_va = 0x2420fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002420000"
	        filename = ""

Region:
	              id = 701
	        start_va = 0x2430000
	          end_va = 0x2433fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002430000"
	        filename = ""

Region:
	              id = 702
	        start_va = 0x2440000
	          end_va = 0x2446fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 703
	        start_va = 0x2450000
	          end_va = 0x2450fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002450000"
	        filename = ""

Region:
	              id = 704
	        start_va = 0x2460000
	          end_va = 0x24dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002460000"
	        filename = ""

Region:
	              id = 705
	        start_va = 0x24e0000
	          end_va = 0x24e1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000024e0000"
	        filename = ""

Region:
	              id = 706
	        start_va = 0x24f0000
	          end_va = 0x24f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000024f0000"
	        filename = ""

Region:
	              id = 707
	        start_va = 0x2500000
	          end_va = 0x25fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002500000"
	        filename = ""

Region:
	              id = 708
	        start_va = 0x2600000
	          end_va = 0x26fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002600000"
	        filename = ""

Region:
	              id = 709
	        start_va = 0x2700000
	          end_va = 0x27fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002700000"
	        filename = ""

Region:
	              id = 710
	        start_va = 0x2800000
	          end_va = 0x28fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002800000"
	        filename = ""

Region:
	              id = 711
	        start_va = 0x2900000
	          end_va = 0x29dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 712
	        start_va = 0x29e0000
	          end_va = 0x2adffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000029e0000"
	        filename = ""

Region:
	              id = 713
	        start_va = 0x2ae0000
	          end_va = 0x2b6dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db")

Region:
	              id = 714
	        start_va = 0x2b70000
	          end_va = 0x2beffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b70000"
	        filename = ""

Region:
	              id = 715
	        start_va = 0x2bf0000
	          end_va = 0x2c3dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002bf0000"
	        filename = ""

Region:
	              id = 716
	        start_va = 0x2c40000
	          end_va = 0x2c4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c40000"
	        filename = ""

Region:
	              id = 717
	        start_va = 0x2c50000
	          end_va = 0x2c53fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c50000"
	        filename = ""

Region:
	              id = 718
	        start_va = 0x2c60000
	          end_va = 0x2cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c60000"
	        filename = ""

Region:
	              id = 719
	        start_va = 0x2ce0000
	          end_va = 0x2cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ce0000"
	        filename = ""

Region:
	              id = 720
	        start_va = 0x2d00000
	          end_va = 0x2dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d00000"
	        filename = ""

Region:
	              id = 721
	        start_va = 0x2e00000
	          end_va = 0x2efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e00000"
	        filename = ""

Region:
	              id = 722
	        start_va = 0x2f00000
	          end_va = 0x2ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002f00000"
	        filename = ""

Region:
	              id = 723
	        start_va = 0x3000000
	          end_va = 0x30fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003000000"
	        filename = ""

Region:
	              id = 724
	        start_va = 0x3100000
	          end_va = 0x31fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003100000"
	        filename = ""

Region:
	              id = 725
	        start_va = 0x3200000
	          end_va = 0x32fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003200000"
	        filename = ""

Region:
	              id = 726
	        start_va = 0x3300000
	          end_va = 0x337ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003300000"
	        filename = ""

Region:
	              id = 727
	        start_va = 0x3380000
	          end_va = 0x347ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003380000"
	        filename = ""

Region:
	              id = 728
	        start_va = 0x3480000
	          end_va = 0x3486fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003480000"
	        filename = ""

Region:
	              id = 729
	        start_va = 0x3490000
	          end_va = 0x3491fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003490000"
	        filename = ""

Region:
	              id = 730
	        start_va = 0x34a0000
	          end_va = 0x34affff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 731
	        start_va = 0x34b0000
	          end_va = 0x34b6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034b0000"
	        filename = ""

Region:
	              id = 732
	        start_va = 0x34c0000
	          end_va = 0x34cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034c0000"
	        filename = ""

Region:
	              id = 733
	        start_va = 0x34d0000
	          end_va = 0x34dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034d0000"
	        filename = ""

Region:
	              id = 734
	        start_va = 0x34e0000
	          end_va = 0x34effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034e0000"
	        filename = ""

Region:
	              id = 735
	        start_va = 0x34f0000
	          end_va = 0x34fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034f0000"
	        filename = ""

Region:
	              id = 736
	        start_va = 0x3500000
	          end_va = 0x35fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003500000"
	        filename = ""

Region:
	              id = 737
	        start_va = 0x3600000
	          end_va = 0x36fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003600000"
	        filename = ""

Region:
	              id = 738
	        start_va = 0x3700000
	          end_va = 0x37fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003700000"
	        filename = ""

Region:
	              id = 739
	        start_va = 0x3800000
	          end_va = 0x38fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003800000"
	        filename = ""

Region:
	              id = 740
	        start_va = 0x3900000
	          end_va = 0x39fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003900000"
	        filename = ""

Region:
	              id = 741
	        start_va = 0x3a00000
	          end_va = 0x3afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a00000"
	        filename = ""

Region:
	              id = 742
	        start_va = 0x3b00000
	          end_va = 0x3bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b00000"
	        filename = ""

Region:
	              id = 743
	        start_va = 0x3c00000
	          end_va = 0x3cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c00000"
	        filename = ""

Region:
	              id = 744
	        start_va = 0x3d00000
	          end_va = 0x3dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d00000"
	        filename = ""

Region:
	              id = 745
	        start_va = 0x3e00000
	          end_va = 0x3efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e00000"
	        filename = ""

Region:
	              id = 746
	        start_va = 0x3f00000
	          end_va = 0x3ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f00000"
	        filename = ""

Region:
	              id = 747
	        start_va = 0x4000000
	          end_va = 0x40fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004000000"
	        filename = ""

Region:
	              id = 748
	        start_va = 0x4100000
	          end_va = 0x41fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004100000"
	        filename = ""

Region:
	              id = 749
	        start_va = 0x4200000
	          end_va = 0x42fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004200000"
	        filename = ""

Region:
	              id = 750
	        start_va = 0x4300000
	          end_va = 0x43fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004300000"
	        filename = ""

Region:
	              id = 751
	        start_va = 0x4400000
	          end_va = 0x447ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004400000"
	        filename = ""

Region:
	              id = 752
	        start_va = 0x4480000
	          end_va = 0x44fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004480000"
	        filename = ""

Region:
	              id = 753
	        start_va = 0x4500000
	          end_va = 0x450ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004500000"
	        filename = ""

Region:
	              id = 754
	        start_va = 0x4510000
	          end_va = 0x451ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004510000"
	        filename = ""

Region:
	              id = 755
	        start_va = 0x4520000
	          end_va = 0x452ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004520000"
	        filename = ""

Region:
	              id = 756
	        start_va = 0x4530000
	          end_va = 0x453ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004530000"
	        filename = ""

Region:
	              id = 757
	        start_va = 0x4540000
	          end_va = 0x454ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004540000"
	        filename = ""

Region:
	              id = 758
	        start_va = 0x4550000
	          end_va = 0x455ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004550000"
	        filename = ""

Region:
	              id = 759
	        start_va = 0x4560000
	          end_va = 0x456ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004560000"
	        filename = ""

Region:
	              id = 760
	        start_va = 0x4570000
	          end_va = 0x457ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 761
	        start_va = 0x4580000
	          end_va = 0x458ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 762
	        start_va = 0x4590000
	          end_va = 0x4593fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004590000"
	        filename = ""

Region:
	              id = 763
	        start_va = 0x45a0000
	          end_va = 0x45a1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000045a0000"
	        filename = ""

Region:
	              id = 764
	        start_va = 0x45b0000
	          end_va = 0x45bffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 765
	        start_va = 0x45c0000
	          end_va = 0x45cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 766
	        start_va = 0x45d0000
	          end_va = 0x45dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000045d0000"
	        filename = ""

Region:
	              id = 767
	        start_va = 0x45e0000
	          end_va = 0x45effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 768
	        start_va = 0x45f0000
	          end_va = 0x45fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 769
	        start_va = 0x4600000
	          end_va = 0x467ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004600000"
	        filename = ""

Region:
	              id = 770
	        start_va = 0x4680000
	          end_va = 0x468ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 771
	        start_va = 0x4690000
	          end_va = 0x469ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 772
	        start_va = 0x46a0000
	          end_va = 0x46affff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 773
	        start_va = 0x46b0000
	          end_va = 0x46b1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000046b0000"
	        filename = ""

Region:
	              id = 774
	        start_va = 0x46c0000
	          end_va = 0x46cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046c0000"
	        filename = ""

Region:
	              id = 775
	        start_va = 0x46d0000
	          end_va = 0x474ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046d0000"
	        filename = ""

Region:
	              id = 776
	        start_va = 0x4880000
	          end_va = 0x48fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004880000"
	        filename = ""

Region:
	              id = 777
	        start_va = 0x4a00000
	          end_va = 0x4a7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a00000"
	        filename = ""

Region:
	              id = 778
	        start_va = 0x4a80000
	          end_va = 0x4a80fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "msxml6r.dll"
	        filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll")

Region:
	              id = 779
	        start_va = 0x4b90000
	          end_va = 0x4c0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b90000"
	        filename = ""

Region:
	              id = 780
	        start_va = 0x4c10000
	          end_va = 0x4c11fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004c10000"
	        filename = ""

Region:
	              id = 781
	        start_va = 0x4c20000
	          end_va = 0x4c26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c20000"
	        filename = ""

Region:
	              id = 782
	        start_va = 0x4cb0000
	          end_va = 0x4cb1fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "activeds.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui")

Region:
	              id = 783
	        start_va = 0x4ce0000
	          end_va = 0x4ce4fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll"
	        filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll")

Region:
	              id = 784
	        start_va = 0x4cf0000
	          end_va = 0x4cfffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui")

Region:
	              id = 785
	        start_va = 0x4d00000
	          end_va = 0x4dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d00000"
	        filename = ""

Region:
	              id = 786
	        start_va = 0x4e00000
	          end_va = 0x4efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e00000"
	        filename = ""

Region:
	              id = 787
	        start_va = 0x5000000
	          end_va = 0x50fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005000000"
	        filename = ""

Region:
	              id = 788
	        start_va = 0x5100000
	          end_va = 0x51fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005100000"
	        filename = ""

Region:
	              id = 789
	        start_va = 0x5300000
	          end_va = 0x53fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005300000"
	        filename = ""

Region:
	              id = 790
	        start_va = 0x5480000
	          end_va = 0x54fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005480000"
	        filename = ""

Region:
	              id = 791
	        start_va = 0x5580000
	          end_va = 0x55fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005580000"
	        filename = ""

Region:
	              id = 792
	        start_va = 0x5620000
	          end_va = 0x5626fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005620000"
	        filename = ""

Region:
	              id = 793
	        start_va = 0x57b0000
	          end_va = 0x57c0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1256.nls"
	        filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls")

Region:
	              id = 794
	        start_va = 0x57d0000
	          end_va = 0x57e0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1251.nls"
	        filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls")

Region:
	              id = 795
	        start_va = 0x5800000
	          end_va = 0x5806fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005800000"
	        filename = ""

Region:
	              id = 796
	        start_va = 0x5810000
	          end_va = 0x590ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005810000"
	        filename = ""

Region:
	              id = 797
	        start_va = 0x59a0000
	          end_va = 0x59a6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000059a0000"
	        filename = ""

Region:
	              id = 798
	        start_va = 0x59b0000
	          end_va = 0x5aaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000059b0000"
	        filename = ""

Region:
	              id = 799
	        start_va = 0x5ab0000
	          end_va = 0x5baffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ab0000"
	        filename = ""

Region:
	              id = 800
	        start_va = 0x5bb0000
	          end_va = 0x5c2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005bb0000"
	        filename = ""

Region:
	              id = 801
	        start_va = 0x5c30000
	          end_va = 0x5d2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005c30000"
	        filename = ""

Region:
	              id = 802
	        start_va = 0x5d30000
	          end_va = 0x5e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005d30000"
	        filename = ""

Region:
	              id = 803
	        start_va = 0x5e30000
	          end_va = 0x5e40fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1254.nls"
	        filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls")

Region:
	              id = 804
	        start_va = 0x5e50000
	          end_va = 0x5e60fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1250.nls"
	        filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls")

Region:
	              id = 805
	        start_va = 0x5e70000
	          end_va = 0x5e76fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005e70000"
	        filename = ""

Region:
	              id = 806
	        start_va = 0x5e80000
	          end_va = 0x5e90fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1253.nls"
	        filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls")

Region:
	              id = 807
	        start_va = 0x5ea0000
	          end_va = 0x5eb0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1257.nls"
	        filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls")

Region:
	              id = 808
	        start_va = 0x5ec0000
	          end_va = 0x5ed0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1255.nls"
	        filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls")

Region:
	              id = 809
	        start_va = 0x5ee0000
	          end_va = 0x5ef0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_874.nls"
	        filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls")

Region:
	              id = 810
	        start_va = 0x5f00000
	          end_va = 0x5ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005f00000"
	        filename = ""

Region:
	              id = 811
	        start_va = 0x6000000
	          end_va = 0x60fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006000000"
	        filename = ""

Region:
	              id = 812
	        start_va = 0x6100000
	          end_va = 0x61fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006100000"
	        filename = ""

Region:
	              id = 813
	        start_va = 0x6200000
	          end_va = 0x62fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006200000"
	        filename = ""

Region:
	              id = 814
	        start_va = 0x6300000
	          end_va = 0x63fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006300000"
	        filename = ""

Region:
	              id = 815
	        start_va = 0x6400000
	          end_va = 0x64fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006400000"
	        filename = ""

Region:
	              id = 816
	        start_va = 0x6500000
	          end_va = 0x65fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006500000"
	        filename = ""

Region:
	              id = 817
	        start_va = 0x6600000
	          end_va = 0x66fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006600000"
	        filename = ""

Region:
	              id = 818
	        start_va = 0x6700000
	          end_va = 0x67fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006700000"
	        filename = ""

Region:
	              id = 819
	        start_va = 0x6800000
	          end_va = 0x68fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006800000"
	        filename = ""

Region:
	              id = 820
	        start_va = 0x6900000
	          end_va = 0x69fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006900000"
	        filename = ""

Region:
	              id = 821
	        start_va = 0x6a00000
	          end_va = 0x6afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006a00000"
	        filename = ""

Region:
	              id = 822
	        start_va = 0x6b00000
	          end_va = 0x6bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b00000"
	        filename = ""

Region:
	              id = 823
	        start_va = 0x6c00000
	          end_va = 0x6cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c00000"
	        filename = ""

Region:
	              id = 824
	        start_va = 0x6d00000
	          end_va = 0x6dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006d00000"
	        filename = ""

Region:
	              id = 825
	        start_va = 0x6e00000
	          end_va = 0x6efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e00000"
	        filename = ""

Region:
	              id = 826
	        start_va = 0x6f00000
	          end_va = 0x6ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006f00000"
	        filename = ""

Region:
	              id = 827
	        start_va = 0x7000000
	          end_va = 0x70fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007000000"
	        filename = ""

Region:
	              id = 828
	        start_va = 0x7100000
	          end_va = 0x7127fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_932.nls"
	        filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls")

Region:
	              id = 829
	        start_va = 0x7130000
	          end_va = 0x7160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_949.nls"
	        filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls")

Region:
	              id = 830
	        start_va = 0x7170000
	          end_va = 0x7180fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1258.nls"
	        filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls")

Region:
	              id = 831
	        start_va = 0x7190000
	          end_va = 0x71c0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_936.nls"
	        filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls")

Region:
	              id = 832
	        start_va = 0x71d0000
	          end_va = 0x7200fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_950.nls"
	        filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls")

Region:
	              id = 833
	        start_va = 0x7300000
	          end_va = 0x73fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007300000"
	        filename = ""

Region:
	              id = 834
	        start_va = 0x7400000
	          end_va = 0x74fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007400000"
	        filename = ""

Region:
	              id = 835
	        start_va = 0x7500000
	          end_va = 0x75fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007500000"
	        filename = ""

Region:
	              id = 836
	        start_va = 0x7700000
	          end_va = 0x77fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007700000"
	        filename = ""

Region:
	              id = 837
	        start_va = 0x7800000
	          end_va = 0x78fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007800000"
	        filename = ""

Region:
	              id = 838
	        start_va = 0x7900000
	          end_va = 0x79fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007900000"
	        filename = ""

Region:
	              id = 839
	        start_va = 0x7a00000
	          end_va = 0x7afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007a00000"
	        filename = ""

Region:
	              id = 840
	        start_va = 0x7b50000
	          end_va = 0x7c4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007b50000"
	        filename = ""

Region:
	              id = 841
	        start_va = 0x7c50000
	          end_va = 0x7d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007c50000"
	        filename = ""

Region:
	              id = 842
	        start_va = 0x7d50000
	          end_va = 0x7e4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007d50000"
	        filename = ""

Region:
	              id = 843
	        start_va = 0x7f00000
	          end_va = 0x7ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007f00000"
	        filename = ""

Region:
	              id = 844
	        start_va = 0x8000000
	          end_va = 0x80fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008000000"
	        filename = ""

Region:
	              id = 845
	        start_va = 0x8400000
	          end_va = 0x84fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008400000"
	        filename = ""

Region:
	              id = 846
	        start_va = 0x8500000
	          end_va = 0x85fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008500000"
	        filename = ""

Region:
	              id = 847
	        start_va = 0x8800000
	          end_va = 0x88fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008800000"
	        filename = ""

Region:
	              id = 848
	        start_va = 0x8a00000
	          end_va = 0x8afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008a00000"
	        filename = ""

Region:
	              id = 849
	        start_va = 0x9a00000
	          end_va = 0x9afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009a00000"
	        filename = ""

Region:
	              id = 850
	        start_va = 0x9b00000
	          end_va = 0x9bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009b00000"
	        filename = ""

Region:
	              id = 851
	        start_va = 0x9c00000
	          end_va = 0xabfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009c00000"
	        filename = ""

Region:
	              id = 852
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 853
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 854
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 855
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 856
	        start_va = 0x7ff6a3140000
	          end_va = 0x7ff6a314cfff
	       monitored = 0
	     entry_point = 0x7ff6a3143980
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 857
	        start_va = 0x7ff861c80000
	          end_va = 0x7ff861cd1fff
	       monitored = 0
	     entry_point = 0x7ff861c83d30
	     region_type = mapped_file
	            name = "cryptngc.dll"
	        filename = "\\Windows\\System32\\cryptngc.dll" (normalized: "c:\\windows\\system32\\cryptngc.dll")

Region:
	              id = 858
	        start_va = 0x7ff861de0000
	          end_va = 0x7ff861fdffff
	       monitored = 0
	     entry_point = 0x7ff861e55240
	     region_type = mapped_file
	            name = "wlidsvc.dll"
	        filename = "\\Windows\\System32\\wlidsvc.dll" (normalized: "c:\\windows\\system32\\wlidsvc.dll")

Region:
	              id = 859
	        start_va = 0x7ff861fe0000
	          end_va = 0x7ff861fe7fff
	       monitored = 0
	     entry_point = 0x7ff861fe13b0
	     region_type = mapped_file
	            name = "dmiso8601utils.dll"
	        filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll")

Region:
	              id = 860
	        start_va = 0x7ff8621e0000
	          end_va = 0x7ff862223fff
	       monitored = 0
	     entry_point = 0x7ff8622083e0
	     region_type = mapped_file
	            name = "updatehandlers.dll"
	        filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll")

Region:
	              id = 861
	        start_va = 0x7ff863d20000
	          end_va = 0x7ff863fcffff
	       monitored = 0
	     entry_point = 0x7ff863d21cf0
	     region_type = mapped_file
	            name = "netshell.dll"
	        filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll")

Region:
	              id = 862
	        start_va = 0x7ff864dd0000
	          end_va = 0x7ff864de0fff
	       monitored = 0
	     entry_point = 0x7ff864dd28d0
	     region_type = mapped_file
	            name = "credentialmigrationhandler.dll"
	        filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll")

Region:
	              id = 863
	        start_va = 0x7ff864f50000
	          end_va = 0x7ff864f81fff
	       monitored = 0
	     entry_point = 0x7ff864f5b0c0
	     region_type = mapped_file
	            name = "shacct.dll"
	        filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll")

Region:
	              id = 864
	        start_va = 0x7ff864f90000
	          end_va = 0x7ff864fa7fff
	       monitored = 0
	     entry_point = 0x7ff864f91b10
	     region_type = mapped_file
	            name = "locationframeworkinternalps.dll"
	        filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll")

Region:
	              id = 865
	        start_va = 0x7ff864ff0000
	          end_va = 0x7ff86500cfff
	       monitored = 0
	     entry_point = 0x7ff864ff4f60
	     region_type = mapped_file
	            name = "appinfo.dll"
	        filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll")

Region:
	              id = 866
	        start_va = 0x7ff865010000
	          end_va = 0x7ff865027fff
	       monitored = 0
	     entry_point = 0x7ff865014290
	     region_type = mapped_file
	            name = "elscore.dll"
	        filename = "\\Windows\\System32\\ELSCore.dll" (normalized: "c:\\windows\\system32\\elscore.dll")

Region:
	              id = 867
	        start_va = 0x7ff865610000
	          end_va = 0x7ff86571efff
	       monitored = 0
	     entry_point = 0x7ff86564c010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 868
	        start_va = 0x7ff8658d0000
	          end_va = 0x7ff865936fff
	       monitored = 0
	     entry_point = 0x7ff8658db160
	     region_type = mapped_file
	            name = "upnp.dll"
	        filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll")

Region:
	              id = 869
	        start_va = 0x7ff865940000
	          end_va = 0x7ff865953fff
	       monitored = 0
	     entry_point = 0x7ff865942a00
	     region_type = mapped_file
	            name = "bitsigd.dll"
	        filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll")

Region:
	              id = 870
	        start_va = 0x7ff865cb0000
	          end_va = 0x7ff865cc6fff
	       monitored = 0
	     entry_point = 0x7ff865cb7520
	     region_type = mapped_file
	            name = "usoapi.dll"
	        filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll")

Region:
	              id = 871
	        start_va = 0x7ff865fc0000
	          end_va = 0x7ff8660dcfff
	       monitored = 0
	     entry_point = 0x7ff865fefe60
	     region_type = mapped_file
	            name = "qmgr.dll"
	        filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll")

Region:
	              id = 872
	        start_va = 0x7ff8660f0000
	          end_va = 0x7ff866101fff
	       monitored = 0
	     entry_point = 0x7ff8660f1a80
	     region_type = mapped_file
	            name = "bitsproxy.dll"
	        filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll")

Region:
	              id = 873
	        start_va = 0x7ff86af90000
	          end_va = 0x7ff86afa7fff
	       monitored = 0
	     entry_point = 0x7ff86af9b850
	     region_type = mapped_file
	            name = "dmcmnutils.dll"
	        filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll")

Region:
	              id = 874
	        start_va = 0x7ff86afb0000
	          end_va = 0x7ff86b00cfff
	       monitored = 0
	     entry_point = 0x7ff86afde510
	     region_type = mapped_file
	            name = "usocore.dll"
	        filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll")

Region:
	              id = 875
	        start_va = 0x7ff86b010000
	          end_va = 0x7ff86b055fff
	       monitored = 0
	     entry_point = 0x7ff86b0179a0
	     region_type = mapped_file
	            name = "adsldp.dll"
	        filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll")

Region:
	              id = 876
	        start_va = 0x7ff86c730000
	          end_va = 0x7ff86c75efff
	       monitored = 0
	     entry_point = 0x7ff86c73ec60
	     region_type = mapped_file
	            name = "cryptnet.dll"
	        filename = "\\Windows\\System32\\cryptnet.dll" (normalized: "c:\\windows\\system32\\cryptnet.dll")

Region:
	              id = 877
	        start_va = 0x7ff86c8b0000
	          end_va = 0x7ff86c8c3fff
	       monitored = 0
	     entry_point = 0x7ff86c8b3710
	     region_type = mapped_file
	            name = "mskeyprotect.dll"
	        filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll")

Region:
	              id = 878
	        start_va = 0x7ff86c8d0000
	          end_va = 0x7ff86c8f7fff
	       monitored = 0
	     entry_point = 0x7ff86c8defc0
	     region_type = mapped_file
	            name = "dssenh.dll"
	        filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll")

Region:
	              id = 879
	        start_va = 0x7ff86c960000
	          end_va = 0x7ff86c97dfff
	       monitored = 0
	     entry_point = 0x7ff86c96ef80
	     region_type = mapped_file
	            name = "ncryptsslp.dll"
	        filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll")

Region:
	              id = 880
	        start_va = 0x7ff86d180000
	          end_va = 0x7ff86d1fffff
	       monitored = 0
	     entry_point = 0x7ff86d1ad280
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 881
	        start_va = 0x7ff86d220000
	          end_va = 0x7ff86d233fff
	       monitored = 0
	     entry_point = 0x7ff86d225080
	     region_type = mapped_file
	            name = "windows.staterepositorybroker.dll"
	        filename = "\\Windows\\System32\\Windows.StateRepositoryBroker.dll" (normalized: "c:\\windows\\system32\\windows.staterepositorybroker.dll")

Region:
	              id = 882
	        start_va = 0x7ff86d2d0000
	          end_va = 0x7ff86d305fff
	       monitored = 0
	     entry_point = 0x7ff86d2d27f0
	     region_type = mapped_file
	            name = "windows.networking.hostname.dll"
	        filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll")

Region:
	              id = 883
	        start_va = 0x7ff86d310000
	          end_va = 0x7ff86d325fff
	       monitored = 0
	     entry_point = 0x7ff86d311d50
	     region_type = mapped_file
	            name = "wwapi.dll"
	        filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll")

Region:
	              id = 884
	        start_va = 0x7ff86e3e0000
	          end_va = 0x7ff86e3f0fff
	       monitored = 0
	     entry_point = 0x7ff86e3e7480
	     region_type = mapped_file
	            name = "tetheringclient.dll"
	        filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll")

Region:
	              id = 885
	        start_va = 0x7ff86e400000
	          end_va = 0x7ff86e483fff
	       monitored = 0
	     entry_point = 0x7ff86e418d50
	     region_type = mapped_file
	            name = "wbemess.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll")

Region:
	              id = 886
	        start_va = 0x7ff86e590000
	          end_va = 0x7ff86e5a5fff
	       monitored = 0
	     entry_point = 0x7ff86e5955e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 887
	        start_va = 0x7ff86e5b0000
	          end_va = 0x7ff86e685fff
	       monitored = 0
	     entry_point = 0x7ff86e5da800
	     region_type = mapped_file
	            name = "wmiprvsd.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll")

Region:
	              id = 888
	        start_va = 0x7ff86e690000
	          end_va = 0x7ff86e6a5fff
	       monitored = 0
	     entry_point = 0x7ff86e691af0
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll")

Region:
	              id = 889
	        start_va = 0x7ff86e6b0000
	          end_va = 0x7ff86e6c9fff
	       monitored = 0
	     entry_point = 0x7ff86e6b2330
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll")

Region:
	              id = 890
	        start_va = 0x7ff86e6d0000
	          end_va = 0x7ff86e6dcfff
	       monitored = 0
	     entry_point = 0x7ff86e6d1420
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll")

Region:
	              id = 891
	        start_va = 0x7ff86e8d0000
	          end_va = 0x7ff86e933fff
	       monitored = 0
	     entry_point = 0x7ff86e8ebed0
	     region_type = mapped_file
	            name = "repdrvfs.dll"
	        filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll")

Region:
	              id = 892
	        start_va = 0x7ff86e940000
	          end_va = 0x7ff86e964fff
	       monitored = 0
	     entry_point = 0x7ff86e949900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 893
	        start_va = 0x7ff86e970000
	          end_va = 0x7ff86e983fff
	       monitored = 0
	     entry_point = 0x7ff86e971800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 894
	        start_va = 0x7ff86e990000
	          end_va = 0x7ff86ea85fff
	       monitored = 0
	     entry_point = 0x7ff86e9c9590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 895
	        start_va = 0x7ff86ea90000
	          end_va = 0x7ff86eb03fff
	       monitored = 0
	     entry_point = 0x7ff86eaa5eb0
	     region_type = mapped_file
	            name = "esscli.dll"
	        filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll")

Region:
	              id = 896
	        start_va = 0x7ff86eb10000
	          end_va = 0x7ff86ec46fff
	       monitored = 0
	     entry_point = 0x7ff86eb50480
	     region_type = mapped_file
	            name = "wbemcore.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll")

Region:
	              id = 897
	        start_va = 0x7ff86ef10000
	          end_va = 0x7ff86ef1efff
	       monitored = 0
	     entry_point = 0x7ff86ef14960
	     region_type = mapped_file
	            name = "nci.dll"
	        filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll")

Region:
	              id = 898
	        start_va = 0x7ff86efa0000
	          end_va = 0x7ff86efb0fff
	       monitored = 0
	     entry_point = 0x7ff86efa2fc0
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 899
	        start_va = 0x7ff86efc0000
	          end_va = 0x7ff86efddfff
	       monitored = 0
	     entry_point = 0x7ff86efc3a40
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll")

Region:
	              id = 900
	        start_va = 0x7ff86efe0000
	          end_va = 0x7ff86f061fff
	       monitored = 0
	     entry_point = 0x7ff86efe2a10
	     region_type = mapped_file
	            name = "hnetcfg.dll"
	        filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll")

Region:
	              id = 901
	        start_va = 0x7ff86f0c0000
	          end_va = 0x7ff86f0fffff
	       monitored = 0
	     entry_point = 0x7ff86f0ccbe0
	     region_type = mapped_file
	            name = "adsldpc.dll"
	        filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll")

Region:
	              id = 902
	        start_va = 0x7ff86f100000
	          end_va = 0x7ff86f146fff
	       monitored = 0
	     entry_point = 0x7ff86f101d10
	     region_type = mapped_file
	            name = "activeds.dll"
	        filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll")

Region:
	              id = 903
	        start_va = 0x7ff86f220000
	          end_va = 0x7ff86f236fff
	       monitored = 0
	     entry_point = 0x7ff86f226620
	     region_type = mapped_file
	            name = "msauserext.dll"
	        filename = "\\Windows\\System32\\msauserext.dll" (normalized: "c:\\windows\\system32\\msauserext.dll")

Region:
	              id = 904
	        start_va = 0x7ff86f240000
	          end_va = 0x7ff86f281fff
	       monitored = 0
	     entry_point = 0x7ff86f243670
	     region_type = mapped_file
	            name = "wdscore.dll"
	        filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll")

Region:
	              id = 905
	        start_va = 0x7ff86f390000
	          end_va = 0x7ff86f3aefff
	       monitored = 0
	     entry_point = 0x7ff86f3937e0
	     region_type = mapped_file
	            name = "netsetupapi.dll"
	        filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll")

Region:
	              id = 906
	        start_va = 0x7ff86f3b0000
	          end_va = 0x7ff86f428fff
	       monitored = 0
	     entry_point = 0x7ff86f3b76a0
	     region_type = mapped_file
	            name = "netsetupshim.dll"
	        filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll")

Region:
	              id = 907
	        start_va = 0x7ff86f4a0000
	          end_va = 0x7ff86f542fff
	       monitored = 0
	     entry_point = 0x7ff86f4a2c10
	     region_type = mapped_file
	            name = "clusapi.dll"
	        filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll")

Region:
	              id = 908
	        start_va = 0x7ff86f550000
	          end_va = 0x7ff86f5a1fff
	       monitored = 0
	     entry_point = 0x7ff86f555770
	     region_type = mapped_file
	            name = "resutils.dll"
	        filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll")

Region:
	              id = 909
	        start_va = 0x7ff86f5b0000
	          end_va = 0x7ff86f5ddfff
	       monitored = 1
	     entry_point = 0x7ff86f5b2300
	     region_type = mapped_file
	            name = "wmidcom.dll"
	        filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll")

Region:
	              id = 910
	        start_va = 0x7ff86f5e0000
	          end_va = 0x7ff86f63dfff
	       monitored = 0
	     entry_point = 0x7ff86f5e5080
	     region_type = mapped_file
	            name = "miutils.dll"
	        filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll")

Region:
	              id = 911
	        start_va = 0x7ff86f640000
	          end_va = 0x7ff86f65ffff
	       monitored = 0
	     entry_point = 0x7ff86f641f50
	     region_type = mapped_file
	            name = "mi.dll"
	        filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll")

Region:
	              id = 912
	        start_va = 0x7ff86f660000
	          end_va = 0x7ff86f668fff
	       monitored = 0
	     entry_point = 0x7ff86f6618f0
	     region_type = mapped_file
	            name = "sscoreext.dll"
	        filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll")

Region:
	              id = 913
	        start_va = 0x7ff86f670000
	          end_va = 0x7ff86f680fff
	       monitored = 0
	     entry_point = 0x7ff86f671d30
	     region_type = mapped_file
	            name = "sscore.dll"
	        filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll")

Region:
	              id = 914
	        start_va = 0x7ff86f6a0000
	          end_va = 0x7ff86f6b7fff
	       monitored = 0
	     entry_point = 0x7ff86f6a4e10
	     region_type = mapped_file
	            name = "adhsvc.dll"
	        filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll")

Region:
	              id = 915
	        start_va = 0x7ff86f6c0000
	          end_va = 0x7ff86f6e4fff
	       monitored = 0
	     entry_point = 0x7ff86f6c5ca0
	     region_type = mapped_file
	            name = "httpprxm.dll"
	        filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll")

Region:
	              id = 916
	        start_va = 0x7ff870370000
	          end_va = 0x7ff8703b0fff
	       monitored = 0
	     entry_point = 0x7ff870373750
	     region_type = mapped_file
	            name = "sqmapi.dll"
	        filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll")

Region:
	              id = 917
	        start_va = 0x7ff8703c0000
	          end_va = 0x7ff8704b2fff
	       monitored = 0
	     entry_point = 0x7ff8703e5d80
	     region_type = mapped_file
	            name = "iphlpsvc.dll"
	        filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll")

Region:
	              id = 918
	        start_va = 0x7ff8704c0000
	          end_va = 0x7ff87050bfff
	       monitored = 0
	     entry_point = 0x7ff8704d5310
	     region_type = mapped_file
	            name = "srvsvc.dll"
	        filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll")

Region:
	              id = 919
	        start_va = 0x7ff870690000
	          end_va = 0x7ff8706a7fff
	       monitored = 0
	     entry_point = 0x7ff870692000
	     region_type = mapped_file
	            name = "vsstrace.dll"
	        filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll")

Region:
	              id = 920
	        start_va = 0x7ff8706b0000
	          end_va = 0x7ff870831fff
	       monitored = 0
	     entry_point = 0x7ff8706c82a0
	     region_type = mapped_file
	            name = "vssapi.dll"
	        filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll")

Region:
	              id = 921
	        start_va = 0x7ff870c70000
	          end_va = 0x7ff870ceefff
	       monitored = 0
	     entry_point = 0x7ff870c87110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 922
	        start_va = 0x7ff870cf0000
	          end_va = 0x7ff870d2bfff
	       monitored = 0
	     entry_point = 0x7ff870cf6aa0
	     region_type = mapped_file
	            name = "wmisvc.dll"
	        filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll")

Region:
	              id = 923
	        start_va = 0x7ff870d80000
	          end_va = 0x7ff870d89fff
	       monitored = 0
	     entry_point = 0x7ff870d81350
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 924
	        start_va = 0x7ff870dc0000
	          end_va = 0x7ff870dcbfff
	       monitored = 0
	     entry_point = 0x7ff870dc35c0
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 925
	        start_va = 0x7ff872410000
	          end_va = 0x7ff872418fff
	       monitored = 0
	     entry_point = 0x7ff8724121d0
	     region_type = mapped_file
	            name = "httpprxc.dll"
	        filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll")

Region:
	              id = 926
	        start_va = 0x7ff872420000
	          end_va = 0x7ff872454fff
	       monitored = 0
	     entry_point = 0x7ff87242a270
	     region_type = mapped_file
	            name = "fwpolicyiomgr.dll"
	        filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll")

Region:
	              id = 927
	        start_va = 0x7ff872540000
	          end_va = 0x7ff8727b9fff
	       monitored = 0
	     entry_point = 0x7ff87255a7a0
	     region_type = mapped_file
	            name = "msxml6.dll"
	        filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll")

Region:
	              id = 928
	        start_va = 0x7ff8727c0000
	          end_va = 0x7ff8727fffff
	       monitored = 0
	     entry_point = 0x7ff8727d6c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 929
	        start_va = 0x7ff872a10000
	          end_va = 0x7ff872a1ffff
	       monitored = 0
	     entry_point = 0x7ff872a11690
	     region_type = mapped_file
	            name = "wups.dll"
	        filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll")

Region:
	              id = 930
	        start_va = 0x7ff872a20000
	          end_va = 0x7ff872a32fff
	       monitored = 0
	     entry_point = 0x7ff872a21b10
	     region_type = mapped_file
	            name = "devrtl.dll"
	        filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll")

Region:
	              id = 931
	        start_va = 0x7ff872a40000
	          end_va = 0x7ff872ac1fff
	       monitored = 0
	     entry_point = 0x7ff872a41790
	     region_type = mapped_file
	            name = "newdev.dll"
	        filename = "\\Windows\\System32\\newdev.dll" (normalized: "c:\\windows\\system32\\newdev.dll")

Region:
	              id = 932
	        start_va = 0x7ff872ad0000
	          end_va = 0x7ff872e09fff
	       monitored = 0
	     entry_point = 0x7ff872ad8520
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll")

Region:
	              id = 933
	        start_va = 0x7ff872e10000
	          end_va = 0x7ff872e93fff
	       monitored = 0
	     entry_point = 0x7ff872e22830
	     region_type = mapped_file
	            name = "winspool.drv"
	        filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv")

Region:
	              id = 934
	        start_va = 0x7ff872ea0000
	          end_va = 0x7ff872f04fff
	       monitored = 0
	     entry_point = 0x7ff872eb3170
	     region_type = mapped_file
	            name = "wuuhext.dll"
	        filename = "\\Windows\\System32\\wuuhext.dll" (normalized: "c:\\windows\\system32\\wuuhext.dll")

Region:
	              id = 935
	        start_va = 0x7ff872f10000
	          end_va = 0x7ff873208fff
	       monitored = 0
	     entry_point = 0x7ff872fd7280
	     region_type = mapped_file
	            name = "esent.dll"
	        filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll")

Region:
	              id = 936
	        start_va = 0x7ff873210000
	          end_va = 0x7ff873445fff
	       monitored = 0
	     entry_point = 0x7ff87329a450
	     region_type = mapped_file
	            name = "wuaueng.dll"
	        filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll")

Region:
	              id = 937
	        start_va = 0x7ff873450000
	          end_va = 0x7ff873471fff
	       monitored = 0
	     entry_point = 0x7ff873462540
	     region_type = mapped_file
	            name = "updatepolicy.dll"
	        filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll")

Region:
	              id = 938
	        start_va = 0x7ff873480000
	          end_va = 0x7ff873554fff
	       monitored = 0
	     entry_point = 0x7ff87349cf80
	     region_type = mapped_file
	            name = "wuapi.dll"
	        filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll")

Region:
	              id = 939
	        start_va = 0x7ff873620000
	          end_va = 0x7ff8736b3fff
	       monitored = 0
	     entry_point = 0x7ff873659210
	     region_type = mapped_file
	            name = "staterepository.core.dll"
	        filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll")

Region:
	              id = 940
	        start_va = 0x7ff8736c0000
	          end_va = 0x7ff873962fff
	       monitored = 0
	     entry_point = 0x7ff8736e6190
	     region_type = mapped_file
	            name = "windows.staterepository.dll"
	        filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll")

Region:
	              id = 941
	        start_va = 0x7ff873970000
	          end_va = 0x7ff873985fff
	       monitored = 0
	     entry_point = 0x7ff87397b550
	     region_type = mapped_file
	            name = "clipc.dll"
	        filename = "\\Windows\\System32\\Clipc.dll" (normalized: "c:\\windows\\system32\\clipc.dll")

Region:
	              id = 942
	        start_va = 0x7ff8744b0000
	          end_va = 0x7ff8744c1fff
	       monitored = 0
	     entry_point = 0x7ff8744b3580
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 943
	        start_va = 0x7ff874540000
	          end_va = 0x7ff87455afff
	       monitored = 0
	     entry_point = 0x7ff874541040
	     region_type = mapped_file
	            name = "mpr.dll"
	        filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll")

Region:
	              id = 944
	        start_va = 0x7ff874830000
	          end_va = 0x7ff874839fff
	       monitored = 0
	     entry_point = 0x7ff8748314c0
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 945
	        start_va = 0x7ff874a90000
	          end_va = 0x7ff874a9dfff
	       monitored = 0
	     entry_point = 0x7ff874a91460
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 946
	        start_va = 0x7ff874aa0000
	          end_va = 0x7ff874aaffff
	       monitored = 0
	     entry_point = 0x7ff874aa1700
	     region_type = mapped_file
	            name = "proximityservicepal.dll"
	        filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll")

Region:
	              id = 947
	        start_va = 0x7ff874ab0000
	          end_va = 0x7ff874ac4fff
	       monitored = 0
	     entry_point = 0x7ff874ab2dc0
	     region_type = mapped_file
	            name = "ondemandconnroutehelper.dll"
	        filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll")

Region:
	              id = 948
	        start_va = 0x7ff874ad0000
	          end_va = 0x7ff874ad8fff
	       monitored = 0
	     entry_point = 0x7ff874ad1ed0
	     region_type = mapped_file
	            name = "proximitycommonpal.dll"
	        filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll")

Region:
	              id = 949
	        start_va = 0x7ff874ae0000
	          end_va = 0x7ff874b0cfff
	       monitored = 0
	     entry_point = 0x7ff874ae2290
	     region_type = mapped_file
	            name = "proximitycommon.dll"
	        filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll")

Region:
	              id = 950
	        start_va = 0x7ff874b10000
	          end_va = 0x7ff874b61fff
	       monitored = 0
	     entry_point = 0x7ff874b138e0
	     region_type = mapped_file
	            name = "proximityservice.dll"
	        filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll")

Region:
	              id = 951
	        start_va = 0x7ff874d60000
	          end_va = 0x7ff874d74fff
	       monitored = 0
	     entry_point = 0x7ff874d63460
	     region_type = mapped_file
	            name = "ssdpapi.dll"
	        filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll")

Region:
	              id = 952
	        start_va = 0x7ff874e50000
	          end_va = 0x7ff874f0ffff
	       monitored = 0
	     entry_point = 0x7ff874e7fd20
	     region_type = mapped_file
	            name = "fveapi.dll"
	        filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll")

Region:
	              id = 953
	        start_va = 0x7ff874f10000
	          end_va = 0x7ff874fa9fff
	       monitored = 0
	     entry_point = 0x7ff874f2ada0
	     region_type = mapped_file
	            name = "shsvcs.dll"
	        filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll")

Region:
	              id = 954
	        start_va = 0x7ff874fc0000
	          end_va = 0x7ff875026fff
	       monitored = 0
	     entry_point = 0x7ff874fc63e0
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 955
	        start_va = 0x7ff875080000
	          end_va = 0x7ff8750c0fff
	       monitored = 0
	     entry_point = 0x7ff875084840
	     region_type = mapped_file
	            name = "usermgrproxy.dll"
	        filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll")

Region:
	              id = 956
	        start_va = 0x7ff8750d0000
	          end_va = 0x7ff8750dafff
	       monitored = 0
	     entry_point = 0x7ff8750d1d30
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 957
	        start_va = 0x7ff875200000
	          end_va = 0x7ff87522dfff
	       monitored = 0
	     entry_point = 0x7ff875207550
	     region_type = mapped_file
	            name = "netjoin.dll"
	        filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll")

Region:
	              id = 958
	        start_va = 0x7ff875230000
	          end_va = 0x7ff875245fff
	       monitored = 0
	     entry_point = 0x7ff875231b60
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 959
	        start_va = 0x7ff875250000
	          end_va = 0x7ff875269fff
	       monitored = 0
	     entry_point = 0x7ff875252430
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 960
	        start_va = 0x7ff875270000
	          end_va = 0x7ff875285fff
	       monitored = 0
	     entry_point = 0x7ff8752719f0
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 961
	        start_va = 0x7ff875290000
	          end_va = 0x7ff87529cfff
	       monitored = 0
	     entry_point = 0x7ff875292ca0
	     region_type = mapped_file
	            name = "csystemeventsbrokerclient.dll"
	        filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll")

Region:
	              id = 962
	        start_va = 0x7ff8752a0000
	          end_va = 0x7ff8752cefff
	       monitored = 0
	     entry_point = 0x7ff8752a8910
	     region_type = mapped_file
	            name = "wptaskscheduler.dll"
	        filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll")

Region:
	              id = 963
	        start_va = 0x7ff875320000
	          end_va = 0x7ff875405fff
	       monitored = 0
	     entry_point = 0x7ff87533cf10
	     region_type = mapped_file
	            name = "usermgr.dll"
	        filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll")

Region:
	              id = 964
	        start_va = 0x7ff875480000
	          end_va = 0x7ff8754b7fff
	       monitored = 0
	     entry_point = 0x7ff875498cc0
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 965
	        start_va = 0x7ff875560000
	          end_va = 0x7ff875573fff
	       monitored = 0
	     entry_point = 0x7ff875562d50
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 966
	        start_va = 0x7ff875860000
	          end_va = 0x7ff8758f2fff
	       monitored = 0
	     entry_point = 0x7ff875869680
	     region_type = mapped_file
	            name = "msvcp_win.dll"
	        filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")

Region:
	              id = 967
	        start_va = 0x7ff875a10000
	          end_va = 0x7ff875a28fff
	       monitored = 0
	     entry_point = 0x7ff875a14520
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 968
	        start_va = 0x7ff875b40000
	          end_va = 0x7ff875b4ffff
	       monitored = 0
	     entry_point = 0x7ff875b42c60
	     region_type = mapped_file
	            name = "usermgrcli.dll"
	        filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll")

Region:
	              id = 969
	        start_va = 0x7ff875c60000
	          end_va = 0x7ff875ccdfff
	       monitored = 0
	     entry_point = 0x7ff875c67f60
	     region_type = mapped_file
	            name = "taskcomp.dll"
	        filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll")

Region:
	              id = 970
	        start_va = 0x7ff875d20000
	          end_va = 0x7ff875d30fff
	       monitored = 0
	     entry_point = 0x7ff875d23320
	     region_type = mapped_file
	            name = "wmiclnt.dll"
	        filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll")

Region:
	              id = 971
	        start_va = 0x7ff875d40000
	          end_va = 0x7ff875d80fff
	       monitored = 0
	     entry_point = 0x7ff875d57eb0
	     region_type = mapped_file
	            name = "ubpm.dll"
	        filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll")

Region:
	              id = 972
	        start_va = 0x7ff875d90000
	          end_va = 0x7ff875e8bfff
	       monitored = 0
	     entry_point = 0x7ff875dc6df0
	     region_type = mapped_file
	            name = "schedsvc.dll"
	        filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll")

Region:
	              id = 973
	        start_va = 0x7ff8764e0000
	          end_va = 0x7ff876861fff
	       monitored = 0
	     entry_point = 0x7ff876531220
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 974
	        start_va = 0x7ff876870000
	          end_va = 0x7ff8769a5fff
	       monitored = 0
	     entry_point = 0x7ff87689f350
	     region_type = mapped_file
	            name = "wintypes.dll"
	        filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll")

Region:
	              id = 975
	        start_va = 0x7ff8779f0000
	          end_va = 0x7ff877a98fff
	       monitored = 0
	     entry_point = 0x7ff877a19010
	     region_type = mapped_file
	            name = "windows.ui.dll"
	        filename = "\\Windows\\System32\\Windows.UI.dll" (normalized: "c:\\windows\\system32\\windows.ui.dll")

Region:
	              id = 976
	        start_va = 0x7ff877aa0000
	          end_va = 0x7ff877badfff
	       monitored = 0
	     entry_point = 0x7ff877aeeaa0
	     region_type = mapped_file
	            name = "mrmcorer.dll"
	        filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll")

Region:
	              id = 977
	        start_va = 0x7ff878150000
	          end_va = 0x7ff87815bfff
	       monitored = 0
	     entry_point = 0x7ff878152830
	     region_type = mapped_file
	            name = "bi.dll"
	        filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll")

Region:
	              id = 978
	        start_va = 0x7ff878230000
	          end_va = 0x7ff8782eefff
	       monitored = 0
	     entry_point = 0x7ff878251c50
	     region_type = mapped_file
	            name = "taskschd.dll"
	        filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll")

Region:
	              id = 979
	        start_va = 0x7ff878310000
	          end_va = 0x7ff878326fff
	       monitored = 0
	     entry_point = 0x7ff878315630
	     region_type = mapped_file
	            name = "sens.dll"
	        filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll")

Region:
	              id = 980
	        start_va = 0x7ff878330000
	          end_va = 0x7ff8783ddfff
	       monitored = 0
	     entry_point = 0x7ff8783480c0
	     region_type = mapped_file
	            name = "windows.networking.connectivity.dll"
	        filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll")

Region:
	              id = 981
	        start_va = 0x7ff8783e0000
	          end_va = 0x7ff8783f1fff
	       monitored = 0
	     entry_point = 0x7ff8783e9260
	     region_type = mapped_file
	            name = "rilproxy.dll"
	        filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll")

Region:
	              id = 982
	        start_va = 0x7ff878400000
	          end_va = 0x7ff8784b0fff
	       monitored = 0
	     entry_point = 0x7ff8784788b0
	     region_type = mapped_file
	            name = "cellularapi.dll"
	        filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll")

Region:
	              id = 983
	        start_va = 0x7ff8784c0000
	          end_va = 0x7ff8784e4fff
	       monitored = 0
	     entry_point = 0x7ff8784d2f20
	     region_type = mapped_file
	            name = "wificonnapi.dll"
	        filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll")

Region:
	              id = 984
	        start_va = 0x7ff8784f0000
	          end_va = 0x7ff878500fff
	       monitored = 0
	     entry_point = 0x7ff8784f7ea0
	     region_type = mapped_file
	            name = "dcpapi.dll"
	        filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll")

Region:
	              id = 985
	        start_va = 0x7ff878510000
	          end_va = 0x7ff87854dfff
	       monitored = 0
	     entry_point = 0x7ff87851a050
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 986
	        start_va = 0x7ff878550000
	          end_va = 0x7ff878576fff
	       monitored = 0
	     entry_point = 0x7ff878553bf0
	     region_type = mapped_file
	            name = "profsvcext.dll"
	        filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll")

Region:
	              id = 987
	        start_va = 0x7ff878580000
	          end_va = 0x7ff8785f9fff
	       monitored = 0
	     entry_point = 0x7ff8785a7630
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 988
	        start_va = 0x7ff878600000
	          end_va = 0x7ff878612fff
	       monitored = 0
	     entry_point = 0x7ff8786057f0
	     region_type = mapped_file
	            name = "themeservice.dll"
	        filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll")

Region:
	              id = 989
	        start_va = 0x7ff878620000
	          end_va = 0x7ff878639fff
	       monitored = 0
	     entry_point = 0x7ff878622cf0
	     region_type = mapped_file
	            name = "locationpelegacywinlocation.dll"
	        filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll")

Region:
	              id = 990
	        start_va = 0x7ff878640000
	          end_va = 0x7ff878694fff
	       monitored = 0
	     entry_point = 0x7ff87864fc00
	     region_type = mapped_file
	            name = "profsvc.dll"
	        filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll")

Region:
	              id = 991
	        start_va = 0x7ff8786a0000
	          end_va = 0x7ff8786a9fff
	       monitored = 0
	     entry_point = 0x7ff8786a1660
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 992
	        start_va = 0x7ff8786b0000
	          end_va = 0x7ff8786c7fff
	       monitored = 0
	     entry_point = 0x7ff8786b5910
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 993
	        start_va = 0x7ff8786d0000
	          end_va = 0x7ff87881cfff
	       monitored = 0
	     entry_point = 0x7ff878713da0
	     region_type = mapped_file
	            name = "gpsvc.dll"
	        filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll")

Region:
	              id = 994
	        start_va = 0x7ff878820000
	          end_va = 0x7ff87882bfff
	       monitored = 0
	     entry_point = 0x7ff8788214d0
	     region_type = mapped_file
	            name = "locationframeworkps.dll"
	        filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll")

Region:
	              id = 995
	        start_va = 0x7ff878830000
	          end_va = 0x7ff878884fff
	       monitored = 0
	     entry_point = 0x7ff878833fb0
	     region_type = mapped_file
	            name = "policymanager.dll"
	        filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll")

Region:
	              id = 996
	        start_va = 0x7ff878890000
	          end_va = 0x7ff8788c6fff
	       monitored = 0
	     entry_point = 0x7ff878896020
	     region_type = mapped_file
	            name = "gnssadapter.dll"
	        filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll")

Region:
	              id = 997
	        start_va = 0x7ff8788d0000
	          end_va = 0x7ff8788effff
	       monitored = 0
	     entry_point = 0x7ff8788d39a0
	     region_type = mapped_file
	            name = "locationwinpalmisc.dll"
	        filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll")

Region:
	              id = 998
	        start_va = 0x7ff8788f0000
	          end_va = 0x7ff878953fff
	       monitored = 0
	     entry_point = 0x7ff878905ae0
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 999
	        start_va = 0x7ff878b20000
	          end_va = 0x7ff878be7fff
	       monitored = 0
	     entry_point = 0x7ff878b613f0
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 1000
	        start_va = 0x7ff878bf0000
	          end_va = 0x7ff878c50fff
	       monitored = 0
	     entry_point = 0x7ff878bf4b50
	     region_type = mapped_file
	            name = "wlanapi.dll"
	        filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll")

Region:
	              id = 1001
	        start_va = 0x7ff878c60000
	          end_va = 0x7ff878ddbfff
	       monitored = 0
	     entry_point = 0x7ff878cb1650
	     region_type = mapped_file
	            name = "locationframework.dll"
	        filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll")

Region:
	              id = 1002
	        start_va = 0x7ff878de0000
	          end_va = 0x7ff878deafff
	       monitored = 0
	     entry_point = 0x7ff878de1770
	     region_type = mapped_file
	            name = "lfsvc.dll"
	        filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll")

Region:
	              id = 1003
	        start_va = 0x7ff878e80000
	          end_va = 0x7ff878f11fff
	       monitored = 0
	     entry_point = 0x7ff878eca780
	     region_type = mapped_file
	            name = "msvcp110_win.dll"
	        filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll")

Region:
	              id = 1004
	        start_va = 0x7ff878fc0000
	          end_va = 0x7ff878fe8fff
	       monitored = 0
	     entry_point = 0x7ff878fcca00
	     region_type = mapped_file
	            name = "cabinet.dll"
	        filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll")

Region:
	              id = 1005
	        start_va = 0x7ff878ff0000
	          end_va = 0x7ff879025fff
	       monitored = 0
	     entry_point = 0x7ff879000070
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 1006
	        start_va = 0x7ff879c90000
	          end_va = 0x7ff87a122fff
	       monitored = 0
	     entry_point = 0x7ff879c9f760
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 1007
	        start_va = 0x7ff87a130000
	          end_va = 0x7ff87a196fff
	       monitored = 0
	     entry_point = 0x7ff87a14e710
	     region_type = mapped_file
	            name = "bcp47langs.dll"
	        filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll")

Region:
	              id = 1008
	        start_va = 0x7ff87a1f0000
	          end_va = 0x7ff87a1f7fff
	       monitored = 0
	     entry_point = 0x7ff87a1f13e0
	     region_type = mapped_file
	            name = "dabapi.dll"
	        filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll")

Region:
	              id = 1009
	        start_va = 0x7ff87aa90000
	          end_va = 0x7ff87ab08fff
	       monitored = 0
	     entry_point = 0x7ff87aaafb90
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")

Region:
	              id = 1010
	        start_va = 0x7ff87ab10000
	          end_va = 0x7ff87ac95fff
	       monitored = 0
	     entry_point = 0x7ff87ab5d700
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 1011
	        start_va = 0x7ff87aca0000
	          end_va = 0x7ff87acbbfff
	       monitored = 0
	     entry_point = 0x7ff87aca37a0
	     region_type = mapped_file
	            name = "samlib.dll"
	        filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll")

Region:
	              id = 1012
	        start_va = 0x7ff87acc0000
	          end_va = 0x7ff87acdefff
	       monitored = 0
	     entry_point = 0x7ff87acc4960
	     region_type = mapped_file
	            name = "ncprov.dll"
	        filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll")

Region:
	              id = 1013
	        start_va = 0x7ff87ad00000
	          end_va = 0x7ff87ad12fff
	       monitored = 0
	     entry_point = 0x7ff87ad02760
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 1014
	        start_va = 0x7ff87ade0000
	          end_va = 0x7ff87adeafff
	       monitored = 0
	     entry_point = 0x7ff87ade1de0
	     region_type = mapped_file
	            name = "bitsperf.dll"
	        filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll")

Region:
	              id = 1015
	        start_va = 0x7ff87ae70000
	          end_va = 0x7ff87aeaffff
	       monitored = 0
	     entry_point = 0x7ff87ae81960
	     region_type = mapped_file
	            name = "brokerlib.dll"
	        filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll")

Region:
	              id = 1016
	        start_va = 0x7ff87af40000
	          end_va = 0x7ff87afd5fff
	       monitored = 0
	     entry_point = 0x7ff87af65570
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 1017
	        start_va = 0x7ff87afe0000
	          end_va = 0x7ff87b006fff
	       monitored = 0
	     entry_point = 0x7ff87afe7940
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 1018
	        start_va = 0x7ff87b030000
	          end_va = 0x7ff87b0d9fff
	       monitored = 0
	     entry_point = 0x7ff87b057910
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 1019
	        start_va = 0x7ff87b0e0000
	          end_va = 0x7ff87b1dffff
	       monitored = 0
	     entry_point = 0x7ff87b120f80
	     region_type = mapped_file
	            name = "twinapi.appcore.dll"
	        filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll")

Region:
	              id = 1020
	        start_va = 0x7ff87b270000
	          end_va = 0x7ff87b27bfff
	       monitored = 0
	     entry_point = 0x7ff87b272480
	     region_type = mapped_file
	            name = "sysntfy.dll"
	        filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll")

Region:
	              id = 1021
	        start_va = 0x7ff87b340000
	          end_va = 0x7ff87b371fff
	       monitored = 0
	     entry_point = 0x7ff87b352340
	     region_type = mapped_file
	            name = "fwbase.dll"
	        filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll")

Region:
	              id = 1022
	        start_va = 0x7ff87b5b0000
	          end_va = 0x7ff87b5bbfff
	       monitored = 0
	     entry_point = 0x7ff87b5b2790
	     region_type = mapped_file
	            name = "hid.dll"
	        filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll")

Region:
	              id = 1023
	        start_va = 0x7ff87b5c0000
	          end_va = 0x7ff87b5e3fff
	       monitored = 0
	     entry_point = 0x7ff87b5c3260
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 1024
	        start_va = 0x7ff87b760000
	          end_va = 0x7ff87b853fff
	       monitored = 0
	     entry_point = 0x7ff87b76a960
	     region_type = mapped_file
	            name = "ucrtbase.dll"
	        filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")

Region:
	              id = 1025
	        start_va = 0x7ff87b8b0000
	          end_va = 0x7ff87b8f8fff
	       monitored = 0
	     entry_point = 0x7ff87b8ba090
	     region_type = mapped_file
	            name = "authz.dll"
	        filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll")

Region:
	              id = 1026
	        start_va = 0x7ff87b9d0000
	          end_va = 0x7ff87b9dbfff
	       monitored = 0
	     entry_point = 0x7ff87b9d27e0
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 1027
	        start_va = 0x7ff87ba10000
	          end_va = 0x7ff87ba1cfff
	       monitored = 0
	     entry_point = 0x7ff87ba11fe0
	     region_type = mapped_file
	            name = "tbs.dll"
	        filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll")

Region:
	              id = 1028
	        start_va = 0x7ff87bab0000
	          end_va = 0x7ff87bae0fff
	       monitored = 0
	     entry_point = 0x7ff87bab7d10
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 1029
	        start_va = 0x7ff87bb10000
	          end_va = 0x7ff87bb89fff
	       monitored = 0
	     entry_point = 0x7ff87bb31a50
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 1030
	        start_va = 0x7ff87bbd0000
	          end_va = 0x7ff87bc03fff
	       monitored = 0
	     entry_point = 0x7ff87bbeae70
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 1031
	        start_va = 0x7ff87bc10000
	          end_va = 0x7ff87bc19fff
	       monitored = 0
	     entry_point = 0x7ff87bc11830
	     region_type = mapped_file
	            name = "dpapi.dll"
	        filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll")

Region:
	              id = 1032
	        start_va = 0x7ff87bd20000
	          end_va = 0x7ff87bd3efff
	       monitored = 0
	     entry_point = 0x7ff87bd25d30
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 1033
	        start_va = 0x7ff87be90000
	          end_va = 0x7ff87beebfff
	       monitored = 0
	     entry_point = 0x7ff87bea6f70
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 1034
	        start_va = 0x7ff87bf40000
	          end_va = 0x7ff87bf56fff
	       monitored = 0
	     entry_point = 0x7ff87bf479d0
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 1035
	        start_va = 0x7ff87c060000
	          end_va = 0x7ff87c06afff
	       monitored = 0
	     entry_point = 0x7ff87c0619a0
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 1036
	        start_va = 0x7ff87c0a0000
	          end_va = 0x7ff87c0c0fff
	       monitored = 0
	     entry_point = 0x7ff87c0b0250
	     region_type = mapped_file
	            name = "joinutil.dll"
	        filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll")

Region:
	              id = 1037
	        start_va = 0x7ff87c0f0000
	          end_va = 0x7ff87c129fff
	       monitored = 0
	     entry_point = 0x7ff87c0f8d20
	     region_type = mapped_file
	            name = "ntasn1.dll"
	        filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll")

Region:
	              id = 1038
	        start_va = 0x7ff87c130000
	          end_va = 0x7ff87c156fff
	       monitored = 0
	     entry_point = 0x7ff87c140aa0
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll")

Region:
	              id = 1039
	        start_va = 0x7ff87c240000
	          end_va = 0x7ff87c26cfff
	       monitored = 0
	     entry_point = 0x7ff87c259d40
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 1040
	        start_va = 0x7ff87c3d0000
	          end_va = 0x7ff87c425fff
	       monitored = 0
	     entry_point = 0x7ff87c3e0bf0
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 1041
	        start_va = 0x7ff87c430000
	          end_va = 0x7ff87c448fff
	       monitored = 0
	     entry_point = 0x7ff87c435e10
	     region_type = mapped_file
	            name = "eventaggregation.dll"
	        filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll")

Region:
	              id = 1042
	        start_va = 0x7ff87c450000
	          end_va = 0x7ff87c478fff
	       monitored = 0
	     entry_point = 0x7ff87c464530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 1043
	        start_va = 0x7ff87c480000
	          end_va = 0x7ff87c518fff
	       monitored = 0
	     entry_point = 0x7ff87c4af4e0
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 1044
	        start_va = 0x7ff87c5c0000
	          end_va = 0x7ff87c5cffff
	       monitored = 0
	     entry_point = 0x7ff87c5c56e0
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 1045
	        start_va = 0x7ff87c5d0000
	          end_va = 0x7ff87c5e3fff
	       monitored = 0
	     entry_point = 0x7ff87c5d52e0
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 1046
	        start_va = 0x7ff87c5f0000
	          end_va = 0x7ff87c63afff
	       monitored = 0
	     entry_point = 0x7ff87c5f35f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 1047
	        start_va = 0x7ff87c640000
	          end_va = 0x7ff87c64efff
	       monitored = 0
	     entry_point = 0x7ff87c643210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 1048
	        start_va = 0x7ff87c650000
	          end_va = 0x7ff87c704fff
	       monitored = 0
	     entry_point = 0x7ff87c6922e0
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll")

Region:
	              id = 1049
	        start_va = 0x7ff87c710000
	          end_va = 0x7ff87c752fff
	       monitored = 0
	     entry_point = 0x7ff87c724b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 1050
	        start_va = 0x7ff87c760000
	          end_va = 0x7ff87cda3fff
	       monitored = 0
	     entry_point = 0x7ff87c9264b0
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll")

Region:
	              id = 1051
	        start_va = 0x7ff87cdb0000
	          end_va = 0x7ff87ce35fff
	       monitored = 0
	     entry_point = 0x7ff87cdbd8f0
	     region_type = mapped_file
	            name = "firewallapi.dll"
	        filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll")

Region:
	              id = 1052
	        start_va = 0x7ff87ce40000
	          end_va = 0x7ff87d027fff
	       monitored = 0
	     entry_point = 0x7ff87ce6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1053
	        start_va = 0x7ff87d030000
	          end_va = 0x7ff87d099fff
	       monitored = 0
	     entry_point = 0x7ff87d066d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 1054
	        start_va = 0x7ff87d0a0000
	          end_va = 0x7ff87d0b6fff
	       monitored = 0
	     entry_point = 0x7ff87d0a1390
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 1055
	        start_va = 0x7ff87d170000
	          end_va = 0x7ff87d336fff
	       monitored = 0
	     entry_point = 0x7ff87d1cdb80
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 1056
	        start_va = 0x7ff87d340000
	          end_va = 0x7ff87d394fff
	       monitored = 0
	     entry_point = 0x7ff87d357970
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 1057
	        start_va = 0x7ff87d3a0000
	          end_va = 0x7ff87d4e2fff
	       monitored = 0
	     entry_point = 0x7ff87d3c8210
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 1058
	        start_va = 0x7ff87d650000
	          end_va = 0x7ff87ebaefff
	       monitored = 0
	     entry_point = 0x7ff87d7b11f0
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 1059
	        start_va = 0x7ff87ed60000
	          end_va = 0x7ff87eeb5fff
	       monitored = 0
	     entry_point = 0x7ff87ed6a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1060
	        start_va = 0x7ff87eed0000
	          end_va = 0x7ff87ef3afff
	       monitored = 0
	     entry_point = 0x7ff87eee90c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 1061
	        start_va = 0x7ff87efa0000
	          end_va = 0x7ff87efa7fff
	       monitored = 0
	     entry_point = 0x7ff87efa1ea0
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 1062
	        start_va = 0x7ff87efb0000
	          end_va = 0x7ff87f3d8fff
	       monitored = 0
	     entry_point = 0x7ff87efd8740
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 1063
	        start_va = 0x7ff87f3e0000
	          end_va = 0x7ff87f565fff
	       monitored = 0
	     entry_point = 0x7ff87f42ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1064
	        start_va = 0x7ff87f570000
	          end_va = 0x7ff87f5cbfff
	       monitored = 0
	     entry_point = 0x7ff87f58b720
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 1065
	        start_va = 0x7ff87f640000
	          end_va = 0x7ff87f6ecfff
	       monitored = 0
	     entry_point = 0x7ff87f6581a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1066
	        start_va = 0x7ff87f6f0000
	          end_va = 0x7ff87f96cfff
	       monitored = 0
	     entry_point = 0x7ff87f7c4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 1067
	        start_va = 0x7ff87f970000
	          end_va = 0x7ff87f9cafff
	       monitored = 0
	     entry_point = 0x7ff87f9838b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1068
	        start_va = 0x7ff87f9d0000
	          end_va = 0x7ff87fa76fff
	       monitored = 0
	     entry_point = 0x7ff87f9db4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1069
	        start_va = 0x7ff87fa80000
	          end_va = 0x7ff87fb40fff
	       monitored = 0
	     entry_point = 0x7ff87faa0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1070
	        start_va = 0x7ff87fb50000
	          end_va = 0x7ff87fba1fff
	       monitored = 0
	     entry_point = 0x7ff87fb5f530
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 1071
	        start_va = 0x7ff87fd30000
	          end_va = 0x7ff87fdd6fff
	       monitored = 0
	     entry_point = 0x7ff87fd458d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 1072
	        start_va = 0x7ff87fde0000
	          end_va = 0x7ff87fe7cfff
	       monitored = 0
	     entry_point = 0x7ff87fde78a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1073
	        start_va = 0x7ff87fe80000
	          end_va = 0x7ff87ff9bfff
	       monitored = 0
	     entry_point = 0x7ff87fec02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1074
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1075
	        start_va = 0x34a0000
	          end_va = 0x34a3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034a0000"
	        filename = ""

Region:
	              id = 1076
	        start_va = 0x2c50000
	          end_va = 0x2c50fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c50000"
	        filename = ""

Region:
	              id = 1077
	        start_va = 0x2c50000
	          end_va = 0x2c50fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c50000"
	        filename = ""

Region:
	              id = 1082
	        start_va = 0x4750000
	          end_va = 0x484ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004750000"
	        filename = ""

Region:
	              id = 1083
	        start_va = 0x4900000
	          end_va = 0x49fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004900000"
	        filename = ""

Region:
	              id = 1084
	        start_va = 0x4a90000
	          end_va = 0x4b8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a90000"
	        filename = ""

Region:
	              id = 1085
	        start_va = 0x4f00000
	          end_va = 0x4ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f00000"
	        filename = ""

Region:
	              id = 1086
	        start_va = 0x5200000
	          end_va = 0x52fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005200000"
	        filename = ""

Region:
	              id = 1575
	        start_va = 0x410000
	          end_va = 0x411fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1576
	        start_va = 0x420000
	          end_va = 0x421fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 1577
	        start_va = 0x420000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x436c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1578
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 1648
	        start_va = 0x5630000
	          end_va = 0x572ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005630000"
	        filename = ""

Region:
	              id = 1649
	        start_va = 0x7600000
	          end_va = 0x76fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007600000"
	        filename = ""

Region:
	              id = 1686
	        start_va = 0x410000
	          end_va = 0x41afff
	       monitored = 0
	     entry_point = 0x426c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1690
	        start_va = 0x410000
	          end_va = 0x412fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1693
	        start_va = 0x410000
	          end_va = 0x412fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1694
	        start_va = 0x410000
	          end_va = 0x41afff
	       monitored = 0
	     entry_point = 0x426c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1699
	        start_va = 0x410000
	          end_va = 0x412fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1700
	        start_va = 0x410000
	          end_va = 0x417fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1701
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 1703
	        start_va = 0x410000
	          end_va = 0x415fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1704
	        start_va = 0x410000
	          end_va = 0x415fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1705
	        start_va = 0x410000
	          end_va = 0x412fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1707
	        start_va = 0x400000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x402300
	     region_type = mapped_file
	            name = "sppc.dll"
	        filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll")

Region:
	              id = 1708
	        start_va = 0x430000
	          end_va = 0x47efff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000430000"
	        filename = ""

Region:
	              id = 1709
	        start_va = 0x400000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x402300
	     region_type = mapped_file
	            name = "sppc.dll"
	        filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll")

Region:
	              id = 1710
	        start_va = 0x400000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x402300
	     region_type = mapped_file
	            name = "sppc.dll"
	        filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll")

Region:
	              id = 1714
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 1715
	        start_va = 0x410000
	          end_va = 0x41afff
	       monitored = 0
	     entry_point = 0x426c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1716
	        start_va = 0x890000
	          end_va = 0x8abfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "activeds.tlb"
	        filename = "\\Windows\\System32\\activeds.tlb" (normalized: "c:\\windows\\system32\\activeds.tlb")

Region:
	              id = 1717
	        start_va = 0x410000
	          end_va = 0x411fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1722
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x416c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1731
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x416c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1732
	        start_va = 0x890000
	          end_va = 0x8abfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "activeds.tlb"
	        filename = "\\Windows\\System32\\activeds.tlb" (normalized: "c:\\windows\\system32\\activeds.tlb")

Region:
	              id = 1733
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 1742
	        start_va = 0x8100000
	          end_va = 0x81fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008100000"
	        filename = ""

Region:
	              id = 1743
	        start_va = 0x8200000
	          end_va = 0x82fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008200000"
	        filename = ""

Region:
	              id = 1744
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x416c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1745
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x416c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1746
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 1747
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 1751
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x416c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1752
	        start_va = 0x890000
	          end_va = 0x8abfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "activeds.tlb"
	        filename = "\\Windows\\System32\\activeds.tlb" (normalized: "c:\\windows\\system32\\activeds.tlb")

Region:
	              id = 1756
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 1840
	        start_va = 0x400000
	          end_va = 0x400fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 2270
	        start_va = 0x8300000
	          end_va = 0x83fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008300000"
	        filename = ""

Region:
	              id = 2271
	        start_va = 0x8600000
	          end_va = 0x86fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008600000"
	        filename = ""

Region:
	              id = 2272
	        start_va = 0x8700000
	          end_va = 0x87fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008700000"
	        filename = ""

Region:
	              id = 2273
	        start_va = 0x8900000
	          end_va = 0x89fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008900000"
	        filename = ""

Region:
	              id = 2274
	        start_va = 0x8a00000
	          end_va = 0x8afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008a00000"
	        filename = ""

Region:
	              id = 2275
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 2276
	        start_va = 0x410000
	          end_va = 0x411fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 2277
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 2278
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 2279
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 2280
	        start_va = 0x8b00000
	          end_va = 0x8bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008b00000"
	        filename = ""

Region:
	              id = 2281
	        start_va = 0x400000
	          end_va = 0x400fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""


Thread:
	id = 17
	os_tid = 0x42c


Thread:
	id = 18
	os_tid = 0x7b8


Thread:
	id = 19
	os_tid = 0x264


Thread:
	id = 20
	os_tid = 0xce0


Thread:
	id = 21
	os_tid = 0x1354


Thread:
	id = 22
	os_tid = 0x1218


Thread:
	id = 23
	os_tid = 0x1214


Thread:
	id = 24
	os_tid = 0xb1c


Thread:
	id = 25
	os_tid = 0x910


Thread:
	id = 26
	os_tid = 0x914


Thread:
	id = 27
	os_tid = 0x364


Thread:
	id = 28
	os_tid = 0xbd0


Thread:
	id = 29
	os_tid = 0xbfc


Thread:
	id = 30
	os_tid = 0xc44


Thread:
	id = 31
	os_tid = 0xff0


Thread:
	id = 32
	os_tid = 0xfec


Thread:
	id = 33
	os_tid = 0xfe8


Thread:
	id = 34
	os_tid = 0xfe4


Thread:
	id = 35
	os_tid = 0xfe0


Thread:
	id = 36
	os_tid = 0xfdc


Thread:
	id = 37
	os_tid = 0xfc4


Thread:
	id = 38
	os_tid = 0xf3c


Thread:
	id = 39
	os_tid = 0xfa4


Thread:
	id = 40
	os_tid = 0xf54


Thread:
	id = 41
	os_tid = 0xf18


Thread:
	id = 42
	os_tid = 0xefc


Thread:
	id = 43
	os_tid = 0xdd8


Thread:
	id = 44
	os_tid = 0xec0


Thread:
	id = 45
	os_tid = 0xebc


Thread:
	id = 46
	os_tid = 0xeb4


Thread:
	id = 47
	os_tid = 0xe88


Thread:
	id = 48
	os_tid = 0xe78


Thread:
	id = 49
	os_tid = 0xe60


Thread:
	id = 50
	os_tid = 0xe2c


Thread:
	id = 51
	os_tid = 0xe20


Thread:
	id = 52
	os_tid = 0xde8


Thread:
	id = 53
	os_tid = 0xdd0


Thread:
	id = 54
	os_tid = 0xd60


Thread:
	id = 55
	os_tid = 0xd44


Thread:
	id = 56
	os_tid = 0x534


Thread:
	id = 57
	os_tid = 0x8c4


Thread:
	id = 58
	os_tid = 0x6c4


Thread:
	id = 59
	os_tid = 0x8bc


Thread:
	id = 60
	os_tid = 0x8b8


Thread:
	id = 61
	os_tid = 0x874


Thread:
	id = 62
	os_tid = 0x870


Thread:
	id = 63
	os_tid = 0x854


Thread:
	id = 64
	os_tid = 0x850


Thread:
	id = 65
	os_tid = 0x83c


Thread:
	id = 66
	os_tid = 0x834


Thread:
	id = 67
	os_tid = 0x824


Thread:
	id = 68
	os_tid = 0x558


Thread:
	id = 69
	os_tid = 0x628


Thread:
	id = 70
	os_tid = 0x568


Thread:
	id = 71
	os_tid = 0x4cc


Thread:
	id = 72
	os_tid = 0x474


Thread:
	id = 73
	os_tid = 0x404


Thread:
	id = 74
	os_tid = 0x164


Thread:
	id = 75
	os_tid = 0x7f8


Thread:
	id = 76
	os_tid = 0x7bc


Thread:
	id = 77
	os_tid = 0x424


Thread:
	id = 78
	os_tid = 0x730


Thread:
	id = 79
	os_tid = 0x6e8


Thread:
	id = 80
	os_tid = 0x694


Thread:
	id = 81
	os_tid = 0x690


Thread:
	id = 82
	os_tid = 0x668


Thread:
	id = 83
	os_tid = 0x648


Thread:
	id = 84
	os_tid = 0x604


Thread:
	id = 85
	os_tid = 0x5f0


Thread:
	id = 86
	os_tid = 0x5e4


Thread:
	id = 87
	os_tid = 0x4e0


Thread:
	id = 88
	os_tid = 0x468


Thread:
	id = 89
	os_tid = 0x450


Thread:
	id = 90
	os_tid = 0x438


Thread:
	id = 91
	os_tid = 0x434


Thread:
	id = 92
	os_tid = 0x430


Thread:
	id = 93
	os_tid = 0x3d8


Thread:
	id = 94
	os_tid = 0x280


Thread:
	id = 95
	os_tid = 0x170


Thread:
	id = 96
	os_tid = 0x210


Thread:
	id = 97
	os_tid = 0x16c


Thread:
	id = 98
	os_tid = 0x178


Thread:
	id = 99
	os_tid = 0x190


Thread:
	id = 100
	os_tid = 0x140


Thread:
	id = 101
	os_tid = 0x120


Thread:
	id = 102
	os_tid = 0x60


Thread:
	id = 103
	os_tid = 0x3ec


Thread:
	id = 120
	os_tid = 0x544


Thread:
	id = 122
	os_tid = 0x68c


Thread:
	id = 123
	os_tid = 0xe28


Thread:
	id = 124
	os_tid = 0x62c


Thread:
	id = 125
	os_tid = 0xea8


Thread:
	id = 126
	os_tid = 0x97c


Thread:
	id = 136
	os_tid = 0xb68


Thread:
	id = 137
	os_tid = 0x1224


Thread:
	id = 146
	os_tid = 0x974


Thread:
	id = 147
	os_tid = 0x1364


Thread:
	id = 188
	os_tid = 0xcb8


Thread:
	id = 189
	os_tid = 0xef0


Thread:
	id = 190
	os_tid = 0x1184


Thread:
	id = 191
	os_tid = 0xfac


Thread:
	id = 192
	os_tid = 0x4e4


Thread:
	id = 193
	os_tid = 0x1118


Process:
	id = "5"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x5e897000"
	os_pid = "0xad8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0x274"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xe], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c9f4" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 1580
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1581
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1582
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1583
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 1584
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 1585
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 1586
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 1587
	        start_va = 0x100000
	          end_va = 0x1bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1588
	        start_va = 0x1c0000
	          end_va = 0x1c6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 1589
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 1590
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 1591
	        start_va = 0x1f0000
	          end_va = 0x1f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 1592
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 1593
	        start_va = 0x480000
	          end_va = 0x480fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 1594
	        start_va = 0x490000
	          end_va = 0x494fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 1595
	        start_va = 0x4a0000
	          end_va = 0x4a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004a0000"
	        filename = ""

Region:
	              id = 1596
	        start_va = 0x4b0000
	          end_va = 0x4b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004b0000"
	        filename = ""

Region:
	              id = 1597
	        start_va = 0x4c0000
	          end_va = 0x4c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004c0000"
	        filename = ""

Region:
	              id = 1598
	        start_va = 0x4e0000
	          end_va = 0x5dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004e0000"
	        filename = ""

Region:
	              id = 1599
	        start_va = 0x5e0000
	          end_va = 0x69ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005e0000"
	        filename = ""

Region:
	              id = 1600
	        start_va = 0x6f0000
	          end_va = 0x6fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006f0000"
	        filename = ""

Region:
	              id = 1601
	        start_va = 0x700000
	          end_va = 0xa36fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1602
	        start_va = 0xa40000
	          end_va = 0xbc7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a40000"
	        filename = ""

Region:
	              id = 1603
	        start_va = 0xbd0000
	          end_va = 0xd50fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000bd0000"
	        filename = ""

Region:
	              id = 1604
	        start_va = 0xd60000
	          end_va = 0xddffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d60000"
	        filename = ""

Region:
	              id = 1605
	        start_va = 0xde0000
	          end_va = 0xedffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000de0000"
	        filename = ""

Region:
	              id = 1606
	        start_va = 0xee0000
	          end_va = 0xf5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ee0000"
	        filename = ""

Region:
	              id = 1607
	        start_va = 0xf60000
	          end_va = 0xfdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f60000"
	        filename = ""

Region:
	              id = 1608
	        start_va = 0xfe0000
	          end_va = 0x105ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000fe0000"
	        filename = ""

Region:
	              id = 1609
	        start_va = 0x1060000
	          end_va = 0x10dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001060000"
	        filename = ""

Region:
	              id = 1610
	        start_va = 0x10e0000
	          end_va = 0x115ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010e0000"
	        filename = ""

Region:
	              id = 1611
	        start_va = 0x1160000
	          end_va = 0x11dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001160000"
	        filename = ""

Region:
	              id = 1612
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1613
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 1614
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 1615
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 1616
	        start_va = 0x7ff7531e0000
	          end_va = 0x7ff75325ffff
	       monitored = 0
	     entry_point = 0x7ff7531f5f50
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 1617
	        start_va = 0x7ff862110000
	          end_va = 0x7ff86215cfff
	       monitored = 0
	     entry_point = 0x7ff86211b470
	     region_type = mapped_file
	            name = "pdh.dll"
	        filename = "\\Windows\\System32\\pdh.dll" (normalized: "c:\\windows\\system32\\pdh.dll")

Region:
	              id = 1618
	        start_va = 0x7ff862160000
	          end_va = 0x7ff862184fff
	       monitored = 0
	     entry_point = 0x7ff862175dc0
	     region_type = mapped_file
	            name = "wmiperfclass.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPerfClass.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiperfclass.dll")

Region:
	              id = 1619
	        start_va = 0x7ff863fd0000
	          end_va = 0x7ff86400cfff
	       monitored = 0
	     entry_point = 0x7ff863fdb760
	     region_type = mapped_file
	            name = "wmiprov.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll")

Region:
	              id = 1620
	        start_va = 0x7ff86e590000
	          end_va = 0x7ff86e5a5fff
	       monitored = 0
	     entry_point = 0x7ff86e5955e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 1621
	        start_va = 0x7ff86e940000
	          end_va = 0x7ff86e964fff
	       monitored = 0
	     entry_point = 0x7ff86e949900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 1622
	        start_va = 0x7ff86e970000
	          end_va = 0x7ff86e983fff
	       monitored = 0
	     entry_point = 0x7ff86e971800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 1623
	        start_va = 0x7ff86e990000
	          end_va = 0x7ff86ea85fff
	       monitored = 0
	     entry_point = 0x7ff86e9c9590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 1624
	        start_va = 0x7ff86efa0000
	          end_va = 0x7ff86efb0fff
	       monitored = 0
	     entry_point = 0x7ff86efa2fc0
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 1625
	        start_va = 0x7ff870c70000
	          end_va = 0x7ff870ceefff
	       monitored = 0
	     entry_point = 0x7ff870c87110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 1626
	        start_va = 0x7ff875d20000
	          end_va = 0x7ff875d30fff
	       monitored = 0
	     entry_point = 0x7ff875d23320
	     region_type = mapped_file
	            name = "wmiclnt.dll"
	        filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll")

Region:
	              id = 1627
	        start_va = 0x7ff8788f0000
	          end_va = 0x7ff878953fff
	       monitored = 0
	     entry_point = 0x7ff878905ae0
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 1628
	        start_va = 0x7ff87bab0000
	          end_va = 0x7ff87bae0fff
	       monitored = 0
	     entry_point = 0x7ff87bab7d10
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 1629
	        start_va = 0x7ff87c450000
	          end_va = 0x7ff87c478fff
	       monitored = 0
	     entry_point = 0x7ff87c464530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 1630
	        start_va = 0x7ff87c640000
	          end_va = 0x7ff87c64efff
	       monitored = 0
	     entry_point = 0x7ff87c643210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 1631
	        start_va = 0x7ff87ce40000
	          end_va = 0x7ff87d027fff
	       monitored = 0
	     entry_point = 0x7ff87ce6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1632
	        start_va = 0x7ff87d030000
	          end_va = 0x7ff87d099fff
	       monitored = 0
	     entry_point = 0x7ff87d066d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 1633
	        start_va = 0x7ff87ed60000
	          end_va = 0x7ff87eeb5fff
	       monitored = 0
	     entry_point = 0x7ff87ed6a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1634
	        start_va = 0x7ff87eed0000
	          end_va = 0x7ff87ef3afff
	       monitored = 0
	     entry_point = 0x7ff87eee90c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 1635
	        start_va = 0x7ff87f3e0000
	          end_va = 0x7ff87f565fff
	       monitored = 0
	     entry_point = 0x7ff87f42ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1636
	        start_va = 0x7ff87f640000
	          end_va = 0x7ff87f6ecfff
	       monitored = 0
	     entry_point = 0x7ff87f6581a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1637
	        start_va = 0x7ff87f6f0000
	          end_va = 0x7ff87f96cfff
	       monitored = 0
	     entry_point = 0x7ff87f7c4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 1638
	        start_va = 0x7ff87f970000
	          end_va = 0x7ff87f9cafff
	       monitored = 0
	     entry_point = 0x7ff87f9838b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1639
	        start_va = 0x7ff87f9d0000
	          end_va = 0x7ff87fa76fff
	       monitored = 0
	     entry_point = 0x7ff87f9db4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1640
	        start_va = 0x7ff87fa80000
	          end_va = 0x7ff87fb40fff
	       monitored = 0
	     entry_point = 0x7ff87faa0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1641
	        start_va = 0x7ff87fd30000
	          end_va = 0x7ff87fdd6fff
	       monitored = 0
	     entry_point = 0x7ff87fd458d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 1642
	        start_va = 0x7ff87fde0000
	          end_va = 0x7ff87fe7cfff
	       monitored = 0
	     entry_point = 0x7ff87fde78a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1643
	        start_va = 0x7ff87fe80000
	          end_va = 0x7ff87ff9bfff
	       monitored = 0
	     entry_point = 0x7ff87fec02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1644
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")


Thread:
	id = 104
	os_tid = 0x5a4


Thread:
	id = 105
	os_tid = 0xcd4


Thread:
	id = 106
	os_tid = 0x494


Thread:
	id = 107
	os_tid = 0x8f0


Thread:
	id = 108
	os_tid = 0x1e0


Thread:
	id = 109
	os_tid = 0x17c


Thread:
	id = 110
	os_tid = 0xb10


Thread:
	id = 111
	os_tid = 0xa68


Process:
	id = "6"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x74a55000"
	os_pid = "0x2f4"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0x274"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:000307d9" [0xc000000f]

Region:
	              id = 1087
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1088
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1089
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1090
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 1091
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 1092
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 1093
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 1094
	        start_va = 0x100000
	          end_va = 0x1bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1095
	        start_va = 0x1c0000
	          end_va = 0x1c6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 1096
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 1097
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 1098
	        start_va = 0x1f0000
	          end_va = 0x1f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 1099
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 1100
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 1101
	        start_va = 0x480000
	          end_va = 0x480fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 1102
	        start_va = 0x490000
	          end_va = 0x494fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 1103
	        start_va = 0x4a0000
	          end_va = 0x4a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004a0000"
	        filename = ""

Region:
	              id = 1104
	        start_va = 0x4b0000
	          end_va = 0x4b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004b0000"
	        filename = ""

Region:
	              id = 1105
	        start_va = 0x4c0000
	          end_va = 0x4c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004c0000"
	        filename = ""

Region:
	              id = 1106
	        start_va = 0x4d0000
	          end_va = 0x4d2fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cimwin32.dll.mui"
	        filename = "\\Windows\\System32\\wbem\\en-US\\cimwin32.dll.mui" (normalized: "c:\\windows\\system32\\wbem\\en-us\\cimwin32.dll.mui")

Region:
	              id = 1107
	        start_va = 0x510000
	          end_va = 0x51ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000510000"
	        filename = ""

Region:
	              id = 1108
	        start_va = 0x5d0000
	          end_va = 0x6cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005d0000"
	        filename = ""

Region:
	              id = 1109
	        start_va = 0x6d0000
	          end_va = 0xa06fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1110
	        start_va = 0xa10000
	          end_va = 0xb97fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1111
	        start_va = 0xba0000
	          end_va = 0xd20fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ba0000"
	        filename = ""

Region:
	              id = 1112
	        start_va = 0xd30000
	          end_va = 0xdeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d30000"
	        filename = ""

Region:
	              id = 1113
	        start_va = 0xdf0000
	          end_va = 0xeeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000df0000"
	        filename = ""

Region:
	              id = 1114
	        start_va = 0xf70000
	          end_va = 0xfeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f70000"
	        filename = ""

Region:
	              id = 1115
	        start_va = 0xff0000
	          end_va = 0x106ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ff0000"
	        filename = ""

Region:
	              id = 1116
	        start_va = 0x1070000
	          end_va = 0x10effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001070000"
	        filename = ""

Region:
	              id = 1117
	        start_va = 0x10f0000
	          end_va = 0x116ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010f0000"
	        filename = ""

Region:
	              id = 1118
	        start_va = 0x11f0000
	          end_va = 0x126ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011f0000"
	        filename = ""

Region:
	              id = 1119
	        start_va = 0x12f0000
	          end_va = 0x136ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012f0000"
	        filename = ""

Region:
	              id = 1120
	        start_va = 0x1370000
	          end_va = 0x13effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001370000"
	        filename = ""

Region:
	              id = 1121
	        start_va = 0x13f0000
	          end_va = 0x14effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013f0000"
	        filename = ""

Region:
	              id = 1122
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1123
	        start_va = 0x180000000
	          end_va = 0x180002fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "security.dll"
	        filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll")

Region:
	              id = 1124
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 1125
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 1126
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 1127
	        start_va = 0x7ff7531e0000
	          end_va = 0x7ff75325ffff
	       monitored = 0
	     entry_point = 0x7ff7531f5f50
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 1128
	        start_va = 0x7ff865cd0000
	          end_va = 0x7ff865ce3fff
	       monitored = 0
	     entry_point = 0x7ff865cd1310
	     region_type = mapped_file
	            name = "browcli.dll"
	        filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll")

Region:
	              id = 1129
	        start_va = 0x7ff8660e0000
	          end_va = 0x7ff8660edfff
	       monitored = 0
	     entry_point = 0x7ff8660e1da0
	     region_type = mapped_file
	            name = "winbrand.dll"
	        filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll")

Region:
	              id = 1130
	        start_va = 0x7ff866340000
	          end_va = 0x7ff86650efff
	       monitored = 0
	     entry_point = 0x7ff866367df0
	     region_type = mapped_file
	            name = "cimwin32.dll"
	        filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll")

Region:
	              id = 1131
	        start_va = 0x7ff86ae00000
	          end_va = 0x7ff86ae0afff
	       monitored = 0
	     entry_point = 0x7ff86ae012b0
	     region_type = mapped_file
	            name = "schedcli.dll"
	        filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll")

Region:
	              id = 1132
	        start_va = 0x7ff86d070000
	          end_va = 0x7ff86d095fff
	       monitored = 0
	     entry_point = 0x7ff86d071cf0
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 1133
	        start_va = 0x7ff86e590000
	          end_va = 0x7ff86e5a5fff
	       monitored = 0
	     entry_point = 0x7ff86e5955e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 1134
	        start_va = 0x7ff86e940000
	          end_va = 0x7ff86e964fff
	       monitored = 0
	     entry_point = 0x7ff86e949900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 1135
	        start_va = 0x7ff86e970000
	          end_va = 0x7ff86e983fff
	       monitored = 0
	     entry_point = 0x7ff86e971800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 1136
	        start_va = 0x7ff86e990000
	          end_va = 0x7ff86ea85fff
	       monitored = 0
	     entry_point = 0x7ff86e9c9590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 1137
	        start_va = 0x7ff870c70000
	          end_va = 0x7ff870ceefff
	       monitored = 0
	     entry_point = 0x7ff870c87110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 1138
	        start_va = 0x7ff870dc0000
	          end_va = 0x7ff870dcbfff
	       monitored = 0
	     entry_point = 0x7ff870dc35c0
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 1139
	        start_va = 0x7ff8744b0000
	          end_va = 0x7ff8744c1fff
	       monitored = 0
	     entry_point = 0x7ff8744b3580
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 1140
	        start_va = 0x7ff875230000
	          end_va = 0x7ff875245fff
	       monitored = 0
	     entry_point = 0x7ff875231b60
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 1141
	        start_va = 0x7ff8755b0000
	          end_va = 0x7ff8755fdfff
	       monitored = 0
	     entry_point = 0x7ff8755c1ce0
	     region_type = mapped_file
	            name = "framedynos.dll"
	        filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll")

Region:
	              id = 1142
	        start_va = 0x7ff875a10000
	          end_va = 0x7ff875a28fff
	       monitored = 0
	     entry_point = 0x7ff875a14520
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 1143
	        start_va = 0x7ff878510000
	          end_va = 0x7ff87854dfff
	       monitored = 0
	     entry_point = 0x7ff87851a050
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 1144
	        start_va = 0x7ff8786a0000
	          end_va = 0x7ff8786a9fff
	       monitored = 0
	     entry_point = 0x7ff8786a1660
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 1145
	        start_va = 0x7ff87ad00000
	          end_va = 0x7ff87ad12fff
	       monitored = 0
	     entry_point = 0x7ff87ad02760
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 1146
	        start_va = 0x7ff87afe0000
	          end_va = 0x7ff87b006fff
	       monitored = 0
	     entry_point = 0x7ff87afe7940
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 1147
	        start_va = 0x7ff87b9d0000
	          end_va = 0x7ff87b9dbfff
	       monitored = 0
	     entry_point = 0x7ff87b9d27e0
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 1148
	        start_va = 0x7ff87bb10000
	          end_va = 0x7ff87bb89fff
	       monitored = 0
	     entry_point = 0x7ff87bb31a50
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 1149
	        start_va = 0x7ff87c240000
	          end_va = 0x7ff87c26cfff
	       monitored = 0
	     entry_point = 0x7ff87c259d40
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 1150
	        start_va = 0x7ff87c3d0000
	          end_va = 0x7ff87c425fff
	       monitored = 0
	     entry_point = 0x7ff87c3e0bf0
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 1151
	        start_va = 0x7ff87c450000
	          end_va = 0x7ff87c478fff
	       monitored = 0
	     entry_point = 0x7ff87c464530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 1152
	        start_va = 0x7ff87c5c0000
	          end_va = 0x7ff87c5cffff
	       monitored = 0
	     entry_point = 0x7ff87c5c56e0
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 1153
	        start_va = 0x7ff87c5f0000
	          end_va = 0x7ff87c63afff
	       monitored = 0
	     entry_point = 0x7ff87c5f35f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 1154
	        start_va = 0x7ff87c640000
	          end_va = 0x7ff87c64efff
	       monitored = 0
	     entry_point = 0x7ff87c643210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 1155
	        start_va = 0x7ff87c710000
	          end_va = 0x7ff87c752fff
	       monitored = 0
	     entry_point = 0x7ff87c724b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 1156
	        start_va = 0x7ff87ce40000
	          end_va = 0x7ff87d027fff
	       monitored = 0
	     entry_point = 0x7ff87ce6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1157
	        start_va = 0x7ff87d030000
	          end_va = 0x7ff87d099fff
	       monitored = 0
	     entry_point = 0x7ff87d066d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 1158
	        start_va = 0x7ff87d0a0000
	          end_va = 0x7ff87d0b6fff
	       monitored = 0
	     entry_point = 0x7ff87d0a1390
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 1159
	        start_va = 0x7ff87d170000
	          end_va = 0x7ff87d336fff
	       monitored = 0
	     entry_point = 0x7ff87d1cdb80
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 1160
	        start_va = 0x7ff87ed60000
	          end_va = 0x7ff87eeb5fff
	       monitored = 0
	     entry_point = 0x7ff87ed6a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1161
	        start_va = 0x7ff87eed0000
	          end_va = 0x7ff87ef3afff
	       monitored = 0
	     entry_point = 0x7ff87eee90c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 1162
	        start_va = 0x7ff87f3e0000
	          end_va = 0x7ff87f565fff
	       monitored = 0
	     entry_point = 0x7ff87f42ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1163
	        start_va = 0x7ff87f640000
	          end_va = 0x7ff87f6ecfff
	       monitored = 0
	     entry_point = 0x7ff87f6581a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1164
	        start_va = 0x7ff87f6f0000
	          end_va = 0x7ff87f96cfff
	       monitored = 0
	     entry_point = 0x7ff87f7c4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 1165
	        start_va = 0x7ff87f970000
	          end_va = 0x7ff87f9cafff
	       monitored = 0
	     entry_point = 0x7ff87f9838b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1166
	        start_va = 0x7ff87f9d0000
	          end_va = 0x7ff87fa76fff
	       monitored = 0
	     entry_point = 0x7ff87f9db4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1167
	        start_va = 0x7ff87fa80000
	          end_va = 0x7ff87fb40fff
	       monitored = 0
	     entry_point = 0x7ff87faa0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1168
	        start_va = 0x7ff87fd30000
	          end_va = 0x7ff87fdd6fff
	       monitored = 0
	     entry_point = 0x7ff87fd458d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 1169
	        start_va = 0x7ff87fde0000
	          end_va = 0x7ff87fe7cfff
	       monitored = 0
	     entry_point = 0x7ff87fde78a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1170
	        start_va = 0x7ff87fe80000
	          end_va = 0x7ff87ff9bfff
	       monitored = 0
	     entry_point = 0x7ff87fec02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1171
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1172
	        start_va = 0x400000
	          end_va = 0x404fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 1173
	        start_va = 0x14f0000
	          end_va = 0x15effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014f0000"
	        filename = ""

Region:
	              id = 1174
	        start_va = 0x400000
	          end_va = 0x415fff
	       monitored = 0
	     entry_point = 0x410420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 1175
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 1176
	        start_va = 0x400000
	          end_va = 0x415fff
	       monitored = 0
	     entry_point = 0x410420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 1177
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 1178
	        start_va = 0x400000
	          end_va = 0x415fff
	       monitored = 0
	     entry_point = 0x410420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 1179
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 1180
	        start_va = 0x400000
	          end_va = 0x415fff
	       monitored = 0
	     entry_point = 0x410420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 1181
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 1182
	        start_va = 0x400000
	          end_va = 0x419fff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 1183
	        start_va = 0x420000
	          end_va = 0x425fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 1184
	        start_va = 0x400000
	          end_va = 0x419fff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 1185
	        start_va = 0x420000
	          end_va = 0x425fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 1186
	        start_va = 0x400000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x41d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 1187
	        start_va = 0x430000
	          end_va = 0x434fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 1188
	        start_va = 0x16b0000
	          end_va = 0x1aaafff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000016b0000"
	        filename = ""

Region:
	              id = 1189
	        start_va = 0x400000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x41d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 1190
	        start_va = 0x430000
	          end_va = 0x434fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 1191
	        start_va = 0x400000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x41d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 1192
	        start_va = 0x430000
	          end_va = 0x434fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 1193
	        start_va = 0x400000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x41d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 1194
	        start_va = 0x430000
	          end_va = 0x434fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 1195
	        start_va = 0x400000
	          end_va = 0x428fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 1196
	        start_va = 0x1ab0000
	          end_va = 0x1b93fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 1197
	        start_va = 0x400000
	          end_va = 0x428fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 1198
	        start_va = 0x1ab0000
	          end_va = 0x1b93fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 1199
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 1200
	        start_va = 0x520000
	          end_va = 0x5b2fff
	       monitored = 0
	     entry_point = 0x599000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 1201
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 1202
	        start_va = 0x520000
	          end_va = 0x5b2fff
	       monitored = 0
	     entry_point = 0x599000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 1203
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 1204
	        start_va = 0x520000
	          end_va = 0x5c0fff
	       monitored = 0
	     entry_point = 0x5b3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 1205
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 1206
	        start_va = 0x520000
	          end_va = 0x5c0fff
	       monitored = 0
	     entry_point = 0x5b3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 1207
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 1208
	        start_va = 0x520000
	          end_va = 0x5a5fff
	       monitored = 0
	     entry_point = 0x591000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 1209
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 1210
	        start_va = 0x520000
	          end_va = 0x5a5fff
	       monitored = 0
	     entry_point = 0x591000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 1211
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 1212
	        start_va = 0x520000
	          end_va = 0x5a5fff
	       monitored = 0
	     entry_point = 0x591000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 1213
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 1214
	        start_va = 0x520000
	          end_va = 0x5a5fff
	       monitored = 0
	     entry_point = 0x591000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 1215
	        start_va = 0x400000
	          end_va = 0x40efff
	       monitored = 0
	     entry_point = 0x4036e0
	     region_type = mapped_file
	            name = "dmvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys")

Region:
	              id = 1216
	        start_va = 0x410000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dmvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui")

Region:
	              id = 1217
	        start_va = 0x400000
	          end_va = 0x40efff
	       monitored = 0
	     entry_point = 0x4036e0
	     region_type = mapped_file
	            name = "dmvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys")

Region:
	              id = 1218
	        start_va = 0x410000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dmvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui")

Region:
	              id = 1219
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1220
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1221
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1222
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1223
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1224
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1225
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1226
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1227
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1228
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1229
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1230
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1231
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 1232
	        start_va = 0x1ab0000
	          end_va = 0x1bbefff
	       monitored = 0
	     entry_point = 0x1aec010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 1233
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 1234
	        start_va = 0x1ab0000
	          end_va = 0x1bbefff
	       monitored = 0
	     entry_point = 0x1aec010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 1235
	        start_va = 0x400000
	          end_va = 0x416fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tcpip.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui")

Region:
	              id = 1236
	        start_va = 0x1ab0000
	          end_va = 0x1d06fff
	       monitored = 0
	     entry_point = 0x1cbce10
	     region_type = mapped_file
	            name = "tcpip.sys"
	        filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys")

Region:
	              id = 1237
	        start_va = 0x400000
	          end_va = 0x416fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tcpip.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui")

Region:
	              id = 1238
	        start_va = 0x1ab0000
	          end_va = 0x1d06fff
	       monitored = 0
	     entry_point = 0x1cbce10
	     region_type = mapped_file
	            name = "tcpip.sys"
	        filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys")

Region:
	              id = 1239
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1240
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1241
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1242
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1243
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1244
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1245
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1246
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1247
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1248
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1249
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1250
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1251
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 1252
	        start_va = 0x410000
	          end_va = 0x41dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 1253
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 1254
	        start_va = 0x410000
	          end_va = 0x41dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 1255
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1256
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1257
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1258
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1259
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1260
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1261
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1262
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1263
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1264
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1265
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1266
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1267
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1268
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1269
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1270
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1271
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1272
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1273
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1274
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1275
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1276
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1277
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1278
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1279
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1280
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1281
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1282
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1283
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1284
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1285
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1286
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1287
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1288
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1289
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1290
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1291
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1292
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1293
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1294
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1295
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1296
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1297
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1298
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1299
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1300
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1301
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1302
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1303
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1304
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1305
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1306
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1307
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1308
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1309
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1310
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1311
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1312
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1313
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1314
	        start_va = 0x1ab0000
	          end_va = 0x1bcffff
	       monitored = 0
	     entry_point = 0x1bac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1315
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1316
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1317
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1318
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1319
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1320
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1321
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1322
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1323
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1324
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1325
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1326
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1327
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1328
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1329
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1330
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1331
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1332
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1333
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1334
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1335
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1336
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1337
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1338
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1339
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1340
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1341
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1342
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1343
	        start_va = 0x400000
	          end_va = 0x471fff
	       monitored = 0
	     entry_point = 0x457000
	     region_type = mapped_file
	            name = "mrxsmb.sys"
	        filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys")

Region:
	              id = 1344
	        start_va = 0x4e0000
	          end_va = 0x4effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mrxsmb.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui")

Region:
	              id = 1345
	        start_va = 0x400000
	          end_va = 0x471fff
	       monitored = 0
	     entry_point = 0x457000
	     region_type = mapped_file
	            name = "mrxsmb.sys"
	        filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys")

Region:
	              id = 1346
	        start_va = 0x4e0000
	          end_va = 0x4effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mrxsmb.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui")

Region:
	              id = 1347
	        start_va = 0x400000
	          end_va = 0x415fff
	       monitored = 0
	     entry_point = 0x410420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 1348
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 1349
	        start_va = 0x400000
	          end_va = 0x415fff
	       monitored = 0
	     entry_point = 0x410420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 1350
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 1351
	        start_va = 0x400000
	          end_va = 0x415fff
	       monitored = 0
	     entry_point = 0x410420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 1352
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 1353
	        start_va = 0x400000
	          end_va = 0x415fff
	       monitored = 0
	     entry_point = 0x410420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 1354
	        start_va = 0x420000
	          end_va = 0x422fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 1355
	        start_va = 0x400000
	          end_va = 0x419fff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 1356
	        start_va = 0x420000
	          end_va = 0x425fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 1357
	        start_va = 0x400000
	          end_va = 0x419fff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 1358
	        start_va = 0x420000
	          end_va = 0x425fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 1359
	        start_va = 0x400000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x41d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 1360
	        start_va = 0x430000
	          end_va = 0x434fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 1361
	        start_va = 0x400000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x41d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 1362
	        start_va = 0x430000
	          end_va = 0x434fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 1363
	        start_va = 0x400000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x41d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 1364
	        start_va = 0x430000
	          end_va = 0x434fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 1365
	        start_va = 0x400000
	          end_va = 0x42afff
	       monitored = 0
	     entry_point = 0x41d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 1366
	        start_va = 0x430000
	          end_va = 0x434fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 1367
	        start_va = 0x400000
	          end_va = 0x428fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 1368
	        start_va = 0x1ab0000
	          end_va = 0x1b93fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 1369
	        start_va = 0x400000
	          end_va = 0x428fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 1370
	        start_va = 0x1ab0000
	          end_va = 0x1b93fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 1371
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 1372
	        start_va = 0x520000
	          end_va = 0x5b2fff
	       monitored = 0
	     entry_point = 0x599000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 1373
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 1374
	        start_va = 0x520000
	          end_va = 0x5b2fff
	       monitored = 0
	     entry_point = 0x599000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 1375
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 1376
	        start_va = 0x520000
	          end_va = 0x5c0fff
	       monitored = 0
	     entry_point = 0x5b3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 1377
	        start_va = 0x400000
	          end_va = 0x405fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 1378
	        start_va = 0x520000
	          end_va = 0x5c0fff
	       monitored = 0
	     entry_point = 0x5b3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 1379
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 1380
	        start_va = 0x520000
	          end_va = 0x5a5fff
	       monitored = 0
	     entry_point = 0x591000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 1381
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 1382
	        start_va = 0x520000
	          end_va = 0x5a5fff
	       monitored = 0
	     entry_point = 0x591000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 1383
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 1384
	        start_va = 0x520000
	          end_va = 0x5a5fff
	       monitored = 0
	     entry_point = 0x591000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 1385
	        start_va = 0x400000
	          end_va = 0x40afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 1386
	        start_va = 0x520000
	          end_va = 0x5a5fff
	       monitored = 0
	     entry_point = 0x591000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 1387
	        start_va = 0x400000
	          end_va = 0x40efff
	       monitored = 0
	     entry_point = 0x4036e0
	     region_type = mapped_file
	            name = "dmvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys")

Region:
	              id = 1388
	        start_va = 0x410000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dmvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui")

Region:
	              id = 1389
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1390
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1391
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1392
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1393
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1394
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1395
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1396
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1397
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1398
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1399
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1400
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1401
	        start_va = 0x400000
	          end_va = 0x41afff
	       monitored = 1
	     entry_point = 0x401190
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll")

Region:
	              id = 1402
	        start_va = 0x420000
	          end_va = 0x42bfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "servicemodelperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui")

Region:
	              id = 1403
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 1404
	        start_va = 0x1ab0000
	          end_va = 0x1bbefff
	       monitored = 0
	     entry_point = 0x1aec010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 1405
	        start_va = 0x400000
	          end_va = 0x401fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 1406
	        start_va = 0x1ab0000
	          end_va = 0x1bbefff
	       monitored = 0
	     entry_point = 0x1aec010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 1407
	        start_va = 0x400000
	          end_va = 0x416fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tcpip.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui")

Region:
	              id = 1408
	        start_va = 0x1ab0000
	          end_va = 0x1d06fff
	       monitored = 0
	     entry_point = 0x1cbce10
	     region_type = mapped_file
	            name = "tcpip.sys"
	        filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys")

Region:
	              id = 1409
	        start_va = 0x400000
	          end_va = 0x416fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tcpip.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui")

Region:
	              id = 1410
	        start_va = 0x1ab0000
	          end_va = 0x1d06fff
	       monitored = 0
	     entry_point = 0x1cbce10
	     region_type = mapped_file
	            name = "tcpip.sys"
	        filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys")

Region:
	              id = 1411
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1412
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1413
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1414
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1415
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1416
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1417
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1418
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1419
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1420
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1421
	        start_va = 0x400000
	          end_va = 0x409fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "http.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui")

Region:
	              id = 1422
	        start_va = 0x1ab0000
	          end_va = 0x1bc0fff
	       monitored = 0
	     entry_point = 0x1ba1bf0
	     region_type = mapped_file
	            name = "http.sys"
	        filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys")

Region:
	              id = 1423
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 1424
	        start_va = 0x410000
	          end_va = 0x41dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 1425
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 1426
	        start_va = 0x410000
	          end_va = 0x41dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 1427
	        start_va = 0x400000
	          end_va = 0x40ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll")

Region:
	              id = 1428
	        start_va = 0x410000
	          end_va = 0x41dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "psevents.dll.mui"
	        filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui")

Region:
	              id = 1429
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1430
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1431
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1432
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1433
	        start_va = 0x1ab0000
	          end_va = 0x1caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ab0000"
	        filename = ""

Region:
	              id = 1434
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1435
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1436
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1437
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1438
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1439
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1440
	        start_va = 0x400000
	          end_va = 0x411fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "srv2.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui")

Region:
	              id = 1441
	        start_va = 0x520000
	          end_va = 0x5cefff
	       monitored = 0
	     entry_point = 0x597000
	     region_type = mapped_file
	            name = "srv2.sys"
	        filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys")

Region:
	              id = 1442
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1443
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1444
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1445
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1446
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1447
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1448
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1449
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1450
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1451
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1452
	        start_va = 0x400000
	          end_va = 0x460fff
	       monitored = 0
	     entry_point = 0x410770
	     region_type = mapped_file
	            name = "usbxhci.sys"
	        filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys")

Region:
	              id = 1453
	        start_va = 0x470000
	          end_va = 0x473fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usbxhci.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui")

Region:
	              id = 1454
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1455
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1456
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1457
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1458
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1459
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1460
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1461
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1462
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1463
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1464
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1465
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1466
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1467
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1468
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1469
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1470
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1471
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1472
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1473
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1474
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1475
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1476
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1477
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1478
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1479
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1480
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1481
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1482
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1483
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1484
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1485
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1486
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1487
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1488
	        start_va = 0x400000
	          end_va = 0x410fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ndis.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui")

Region:
	              id = 1489
	        start_va = 0x1cb0000
	          end_va = 0x1dcffff
	       monitored = 0
	     entry_point = 0x1dac040
	     region_type = mapped_file
	            name = "ndis.sys"
	        filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys")

Region:
	              id = 1490
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1491
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1492
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1493
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1494
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1495
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1496
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1497
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1498
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1499
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1500
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1501
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1502
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1503
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1504
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1505
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1506
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1507
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1508
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1509
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1510
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1511
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1512
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1513
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1514
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1515
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1516
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1517
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1518
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll"
	        filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll")

Region:
	              id = 1519
	        start_va = 0x410000
	          end_va = 0x420fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "advapi32res.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui")

Region:
	              id = 1520
	        start_va = 0x400000
	          end_va = 0x471fff
	       monitored = 0
	     entry_point = 0x457000
	     region_type = mapped_file
	            name = "mrxsmb.sys"
	        filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys")

Region:
	              id = 1521
	        start_va = 0x4e0000
	          end_va = 0x4effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mrxsmb.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui")

Region:
	              id = 1522
	        start_va = 0x400000
	          end_va = 0x471fff
	       monitored = 0
	     entry_point = 0x457000
	     region_type = mapped_file
	            name = "mrxsmb.sys"
	        filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys")

Region:
	              id = 1523
	        start_va = 0x4e0000
	          end_va = 0x4effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mrxsmb.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui")

Region:
	              id = 1574
	        start_va = 0x7ff8751a0000
	          end_va = 0x7ff8751adfff
	       monitored = 0
	     entry_point = 0x7ff8751a2b10
	     region_type = mapped_file
	            name = "perfos.dll"
	        filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll")

Region:
	              id = 1698
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 1702
	        start_va = 0x410000
	          end_va = 0x417fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 1706
	        start_va = 0x420000
	          end_va = 0x425fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""


Thread:
	id = 112
	os_tid = 0x1228


Thread:
	id = 113
	os_tid = 0x11c8


Thread:
	id = 114
	os_tid = 0xeb8


Thread:
	id = 115
	os_tid = 0x2f8


Thread:
	id = 116
	os_tid = 0x9d8


Thread:
	id = 117
	os_tid = 0x570


Thread:
	id = 118
	os_tid = 0x490


Thread:
	id = 119
	os_tid = 0xbcc


Process:
	id = "7"
	image_name = "dllhost.exe"
	filename = "c:\\windows\\system32\\dllhost.exe"
	page_root = "0x35022000"
	os_pid = "0x958"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0x274"
	cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{7006698D-2974-4091-A424-85DD0B909E23}"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f72e" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 1524
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1525
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1526
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1527
	        start_va = 0x50000
	          end_va = 0x14ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 1528
	        start_va = 0x150000
	          end_va = 0x153fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000150000"
	        filename = ""

Region:
	              id = 1529
	        start_va = 0x160000
	          end_va = 0x161fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000160000"
	        filename = ""

Region:
	              id = 1530
	        start_va = 0x170000
	          end_va = 0x170fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 1531
	        start_va = 0x180000
	          end_va = 0x186fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1532
	        start_va = 0x190000
	          end_va = 0x190fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 1533
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 1534
	        start_va = 0x1b0000
	          end_va = 0x1b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 1535
	        start_va = 0x1d0000
	          end_va = 0x1dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 1536
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 1537
	        start_va = 0x400000
	          end_va = 0x4bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1538
	        start_va = 0x4c0000
	          end_va = 0x5bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004c0000"
	        filename = ""

Region:
	              id = 1539
	        start_va = 0x5f0000
	          end_va = 0x6effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005f0000"
	        filename = ""

Region:
	              id = 1540
	        start_va = 0x6f0000
	          end_va = 0x7effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006f0000"
	        filename = ""

Region:
	              id = 1541
	        start_va = 0x820000
	          end_va = 0x82ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000820000"
	        filename = ""

Region:
	              id = 1542
	        start_va = 0x830000
	          end_va = 0x9b7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000830000"
	        filename = ""

Region:
	              id = 1543
	        start_va = 0x9c0000
	          end_va = 0xb40fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009c0000"
	        filename = ""

Region:
	              id = 1544
	        start_va = 0xb50000
	          end_va = 0x1f4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b50000"
	        filename = ""

Region:
	              id = 1545
	        start_va = 0x1f50000
	          end_va = 0x204ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f50000"
	        filename = ""

Region:
	              id = 1546
	        start_va = 0x2050000
	          end_va = 0x214ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002050000"
	        filename = ""

Region:
	              id = 1547
	        start_va = 0x2150000
	          end_va = 0x224ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002150000"
	        filename = ""

Region:
	              id = 1548
	        start_va = 0x2350000
	          end_va = 0x244ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002350000"
	        filename = ""

Region:
	              id = 1549
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1550
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 1551
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 1552
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 1553
	        start_va = 0x7ff7cab00000
	          end_va = 0x7ff7cab06fff
	       monitored = 0
	     entry_point = 0x7ff7cab01570
	     region_type = mapped_file
	            name = "dllhost.exe"
	        filename = "\\Windows\\System32\\dllhost.exe" (normalized: "c:\\windows\\system32\\dllhost.exe")

Region:
	              id = 1554
	        start_va = 0x7ff8655d0000
	          end_va = 0x7ff86560efff
	       monitored = 0
	     entry_point = 0x7ff8655f3320
	     region_type = mapped_file
	            name = "flightsettings.dll"
	        filename = "\\Windows\\System32\\FlightSettings.dll" (normalized: "c:\\windows\\system32\\flightsettings.dll")

Region:
	              id = 1555
	        start_va = 0x7ff879c90000
	          end_va = 0x7ff87a122fff
	       monitored = 0
	     entry_point = 0x7ff879c9f760
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 1556
	        start_va = 0x7ff87af40000
	          end_va = 0x7ff87afd5fff
	       monitored = 0
	     entry_point = 0x7ff87af65570
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 1557
	        start_va = 0x7ff87c5c0000
	          end_va = 0x7ff87c5cffff
	       monitored = 0
	     entry_point = 0x7ff87c5c56e0
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 1558
	        start_va = 0x7ff87c640000
	          end_va = 0x7ff87c64efff
	       monitored = 0
	     entry_point = 0x7ff87c643210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 1559
	        start_va = 0x7ff87ce40000
	          end_va = 0x7ff87d027fff
	       monitored = 0
	     entry_point = 0x7ff87ce6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1560
	        start_va = 0x7ff87d030000
	          end_va = 0x7ff87d099fff
	       monitored = 0
	     entry_point = 0x7ff87d066d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 1561
	        start_va = 0x7ff87d170000
	          end_va = 0x7ff87d336fff
	       monitored = 0
	     entry_point = 0x7ff87d1cdb80
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 1562
	        start_va = 0x7ff87d4f0000
	          end_va = 0x7ff87d52afff
	       monitored = 0
	     entry_point = 0x7ff87d4f12f0
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 1563
	        start_va = 0x7ff87ed60000
	          end_va = 0x7ff87eeb5fff
	       monitored = 0
	     entry_point = 0x7ff87ed6a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1564
	        start_va = 0x7ff87f3e0000
	          end_va = 0x7ff87f565fff
	       monitored = 0
	     entry_point = 0x7ff87f42ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1565
	        start_va = 0x7ff87f640000
	          end_va = 0x7ff87f6ecfff
	       monitored = 0
	     entry_point = 0x7ff87f6581a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1566
	        start_va = 0x7ff87f6f0000
	          end_va = 0x7ff87f96cfff
	       monitored = 0
	     entry_point = 0x7ff87f7c4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 1567
	        start_va = 0x7ff87f970000
	          end_va = 0x7ff87f9cafff
	       monitored = 0
	     entry_point = 0x7ff87f9838b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1568
	        start_va = 0x7ff87f9d0000
	          end_va = 0x7ff87fa76fff
	       monitored = 0
	     entry_point = 0x7ff87f9db4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1569
	        start_va = 0x7ff87fa80000
	          end_va = 0x7ff87fb40fff
	       monitored = 0
	     entry_point = 0x7ff87faa0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1570
	        start_va = 0x7ff87fb50000
	          end_va = 0x7ff87fba1fff
	       monitored = 0
	     entry_point = 0x7ff87fb5f530
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 1571
	        start_va = 0x7ff87fde0000
	          end_va = 0x7ff87fe7cfff
	       monitored = 0
	     entry_point = 0x7ff87fde78a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1572
	        start_va = 0x7ff87fe80000
	          end_va = 0x7ff87ff9bfff
	       monitored = 0
	     entry_point = 0x7ff87fec02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1573
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1683
	        start_va = 0x1c0000
	          end_va = 0x1c1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001c0000"
	        filename = ""

Region:
	              id = 1684
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 1685
	        start_va = 0x2250000
	          end_va = 0x232ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")


Thread:
	id = 127
	os_tid = 0x11f4


Thread:
	id = 128
	os_tid = 0x2e4


Thread:
	id = 129
	os_tid = 0x1298


Thread:
	id = 130
	os_tid = 0xb40


Thread:
	id = 131
	os_tid = 0x1398


Thread:
	id = 132
	os_tid = 0x131c


Thread:
	id = 133
	os_tid = 0x1324


Thread:
	id = 134
	os_tid = 0xd8c


Process:
	id = "8"
	image_name = "werfault.exe"
	filename = "c:\\windows\\syswow64\\werfault.exe"
	page_root = "0x32f2c000"
	os_pid = "0x520"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0x774"
	cmd_line = "C:\\Windows\\SysWOW64\\WerFault.exe -u -p 1908 -s 1864"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f72e" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 1770
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 1771
	        start_va = 0x30000
	          end_va = 0x30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1772
	        start_va = 0x40000
	          end_va = 0x54fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 1773
	        start_va = 0x60000
	          end_va = 0x9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 1774
	        start_va = 0xa0000
	          end_va = 0xdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 1775
	        start_va = 0xe0000
	          end_va = 0xe3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 1776
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 1777
	        start_va = 0x100000
	          end_va = 0x101fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 1778
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 1779
	        start_va = 0xa50000
	          end_va = 0xa92fff
	       monitored = 0
	     entry_point = 0xa70f50
	     region_type = mapped_file
	            name = "werfault.exe"
	        filename = "\\Windows\\SysWOW64\\WerFault.exe" (normalized: "c:\\windows\\syswow64\\werfault.exe")

Region:
	              id = 1780
	        start_va = 0xaa0000
	          end_va = 0x4a9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000aa0000"
	        filename = ""

Region:
	              id = 1781
	        start_va = 0x77720000
	          end_va = 0x7789afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 1782
	        start_va = 0x7ffb0000
	          end_va = 0x7ffd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007ffb0000"
	        filename = ""

Region:
	              id = 1783
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1784
	        start_va = 0x7fff0000
	          end_va = 0x7df87ff9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 1785
	        start_va = 0x7df87ffa0000
	          end_va = 0x7ff87ff9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df87ffa0000"
	        filename = ""

Region:
	              id = 1786
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1787
	        start_va = 0x7ff880161000
	          end_va = 0x7ffffffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff880161000"
	        filename = ""

Region:
	              id = 1788
	        start_va = 0x5c0000
	          end_va = 0x5cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005c0000"
	        filename = ""

Region:
	              id = 1789
	        start_va = 0x662d0000
	          end_va = 0x66349fff
	       monitored = 0
	     entry_point = 0x662e3290
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 1790
	        start_va = 0x66350000
	          end_va = 0x6639ffff
	       monitored = 0
	     entry_point = 0x66368180
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 1791
	        start_va = 0x75600000
	          end_va = 0x756dffff
	       monitored = 0
	     entry_point = 0x75613980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 1792
	        start_va = 0x663a0000
	          end_va = 0x663a7fff
	       monitored = 0
	     entry_point = 0x663a17c0
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 1793
	        start_va = 0x400000
	          end_va = 0x5bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 1794
	        start_va = 0x75600000
	          end_va = 0x756dffff
	       monitored = 0
	     entry_point = 0x75613980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 1795
	        start_va = 0x75480000
	          end_va = 0x755fdfff
	       monitored = 0
	     entry_point = 0x75531b90
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 1796
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1797
	        start_va = 0x7feb0000
	          end_va = 0x7ffaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007feb0000"
	        filename = ""

Region:
	              id = 1798
	        start_va = 0x110000
	          end_va = 0x1cdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1799
	        start_va = 0x748c0000
	          end_va = 0x7497dfff
	       monitored = 0
	     entry_point = 0x748f5630
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 1800
	        start_va = 0x400000
	          end_va = 0x43ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 1801
	        start_va = 0x440000
	          end_va = 0x47ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000440000"
	        filename = ""

Region:
	              id = 1802
	        start_va = 0x4c0000
	          end_va = 0x5bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000004c0000"
	        filename = ""

Region:
	              id = 1803
	        start_va = 0x751c0000
	          end_va = 0x7524cfff
	       monitored = 0
	     entry_point = 0x75209b90
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll")

Region:
	              id = 1804
	        start_va = 0x77290000
	          end_va = 0x7744cfff
	       monitored = 0
	     entry_point = 0x77372a10
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll")

Region:
	              id = 1805
	        start_va = 0x75260000
	          end_va = 0x7530cfff
	       monitored = 0
	     entry_point = 0x75274f00
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 1806
	        start_va = 0x74450000
	          end_va = 0x7446dfff
	       monitored = 0
	     entry_point = 0x7445b640
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 1807
	        start_va = 0x20000
	          end_va = 0x23fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1808
	        start_va = 0x74440000
	          end_va = 0x74449fff
	       monitored = 0
	     entry_point = 0x74442a00
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 1809
	        start_va = 0x74590000
	          end_va = 0x745e7fff
	       monitored = 0
	     entry_point = 0x745d25c0
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 1810
	        start_va = 0x76ae0000
	          end_va = 0x76b23fff
	       monitored = 0
	     entry_point = 0x76af9d80
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 1811
	        start_va = 0x74650000
	          end_va = 0x746cafff
	       monitored = 0
	     entry_point = 0x7466e970
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 1812
	        start_va = 0x691d0000
	          end_va = 0x6930efff
	       monitored = 0
	     entry_point = 0x691fd880
	     region_type = mapped_file
	            name = "dbghelp.dll"
	        filename = "\\Windows\\SysWOW64\\dbghelp.dll" (normalized: "c:\\windows\\syswow64\\dbghelp.dll")

Region:
	              id = 1813
	        start_va = 0x480000
	          end_va = 0x4bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000480000"
	        filename = ""

Region:
	              id = 1814
	        start_va = 0x5d0000
	          end_va = 0x60ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005d0000"
	        filename = ""

Region:
	              id = 1815
	        start_va = 0x69310000
	          end_va = 0x69396fff
	       monitored = 0
	     entry_point = 0x6937dbc0
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\SysWOW64\\wer.dll" (normalized: "c:\\windows\\syswow64\\wer.dll")

Region:
	              id = 1816
	        start_va = 0x72530000
	          end_va = 0x72551fff
	       monitored = 0
	     entry_point = 0x725391f0
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll")

Region:
	              id = 1817
	        start_va = 0x69170000
	          end_va = 0x691c3fff
	       monitored = 0
	     entry_point = 0x691a10d0
	     region_type = mapped_file
	            name = "faultrep.dll"
	        filename = "\\Windows\\SysWOW64\\Faultrep.dll" (normalized: "c:\\windows\\syswow64\\faultrep.dll")

Region:
	              id = 1818
	        start_va = 0x740f0000
	          end_va = 0x7410afff
	       monitored = 0
	     entry_point = 0x740f9050
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 1819
	        start_va = 0x75120000
	          end_va = 0x75156fff
	       monitored = 0
	     entry_point = 0x75123b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 1820
	        start_va = 0x610000
	          end_va = 0x66ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000610000"
	        filename = ""

Region:
	              id = 1821
	        start_va = 0x69140000
	          end_va = 0x69160fff
	       monitored = 0
	     entry_point = 0x6915a910
	     region_type = mapped_file
	            name = "dbgcore.dll"
	        filename = "\\Windows\\SysWOW64\\dbgcore.dll" (normalized: "c:\\windows\\syswow64\\dbgcore.dll")

Region:
	              id = 1822
	        start_va = 0x670000
	          end_va = 0x83ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000670000"
	        filename = ""

Region:
	              id = 1823
	        start_va = 0x30000
	          end_va = 0x33fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1824
	        start_va = 0x77450000
	          end_va = 0x77596fff
	       monitored = 0
	     entry_point = 0x77461cf0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 1825
	        start_va = 0x76b30000
	          end_va = 0x76c7efff
	       monitored = 0
	     entry_point = 0x76be6820
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 1826
	        start_va = 0x1d0000
	          end_va = 0x1f9fff
	       monitored = 0
	     entry_point = 0x1d5680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1827
	        start_va = 0x670000
	          end_va = 0x7f7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000670000"
	        filename = ""

Region:
	              id = 1828
	        start_va = 0x830000
	          end_va = 0x83ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000830000"
	        filename = ""

Region:
	              id = 1829
	        start_va = 0x74ea0000
	          end_va = 0x74ecafff
	       monitored = 0
	     entry_point = 0x74ea5680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1830
	        start_va = 0x1d0000
	          end_va = 0x1d1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001d0000"
	        filename = ""

Region:
	              id = 1831
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 1832
	        start_va = 0x1f0000
	          end_va = 0x1f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 1833
	        start_va = 0x610000
	          end_va = 0x65efff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000610000"
	        filename = ""

Region:
	              id = 1834
	        start_va = 0x660000
	          end_va = 0x66ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000660000"
	        filename = ""

Region:
	              id = 1835
	        start_va = 0x800000
	          end_va = 0x800fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000800000"
	        filename = ""

Region:
	              id = 1836
	        start_va = 0x840000
	          end_va = 0x9c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000840000"
	        filename = ""

Region:
	              id = 1837
	        start_va = 0x4aa0000
	          end_va = 0x5e9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004aa0000"
	        filename = ""

Region:
	              id = 1838
	        start_va = 0x706b0000
	          end_va = 0x70724fff
	       monitored = 0
	     entry_point = 0x706e9a60
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 1839
	        start_va = 0x9d0000
	          end_va = 0xa4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1841
	        start_va = 0x810000
	          end_va = 0x810fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000810000"
	        filename = ""

Region:
	              id = 1842
	        start_va = 0x820000
	          end_va = 0x820fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000820000"
	        filename = ""

Region:
	              id = 1843
	        start_va = 0x9d0000
	          end_va = 0x9d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1844
	        start_va = 0xa40000
	          end_va = 0xa4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a40000"
	        filename = ""

Region:
	              id = 1845
	        start_va = 0x9d0000
	          end_va = 0x9e8fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1846
	        start_va = 0x5ea0000
	          end_va = 0x5f9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ea0000"
	        filename = ""

Region:
	              id = 1847
	        start_va = 0x9d0000
	          end_va = 0x9d9fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1848
	        start_va = 0x9d0000
	          end_va = 0x9d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1849
	        start_va = 0x9e0000
	          end_va = 0x9e3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1850
	        start_va = 0x76e20000
	          end_va = 0x76e2bfff
	       monitored = 0
	     entry_point = 0x76e23930
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll")

Region:
	              id = 1851
	        start_va = 0x9d0000
	          end_va = 0x9d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1852
	        start_va = 0x5fa0000
	          end_va = 0x679ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005fa0000"
	        filename = ""

Region:
	              id = 1853
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1854
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1855
	        start_va = 0x9d0000
	          end_va = 0x9e7fff
	       monitored = 0
	     entry_point = 0x9deb7c
	     region_type = mapped_file
	            name = "applaunch.exe"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe")

Region:
	              id = 1856
	        start_va = 0x5fa0000
	          end_va = 0x62d6fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1857
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1858
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1859
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1860
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1861
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1862
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1863
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1864
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1865
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1866
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1867
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1868
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1869
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1870
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1871
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1872
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1873
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1874
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1875
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1876
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1877
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1878
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1879
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1880
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1881
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1882
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1883
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1884
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1885
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1886
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1887
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1888
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1889
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1890
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1891
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1892
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1893
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1894
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1895
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1896
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1897
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1898
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1899
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1900
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1901
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1902
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1903
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1904
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1905
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1906
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1907
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1908
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1909
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1910
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1911
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1912
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1913
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1914
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1915
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1916
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1917
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1918
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1919
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1920
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1921
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1922
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1923
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1924
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1925
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1926
	        start_va = 0x9d0000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1927
	        start_va = 0x9d0000
	          end_va = 0xa0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009d0000"
	        filename = ""

Region:
	              id = 1928
	        start_va = 0x62e0000
	          end_va = 0x631ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000062e0000"
	        filename = ""

Region:
	              id = 1929
	        start_va = 0x6320000
	          end_va = 0x639ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006320000"
	        filename = ""

Region:
	              id = 1930
	        start_va = 0x9d0000
	          end_va = 0x9d1fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "faultrep.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\faultrep.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\faultrep.dll.mui")

Region:
	              id = 1931
	        start_va = 0x9e0000
	          end_va = 0x9e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1932
	        start_va = 0x69000000
	          end_va = 0x6913cfff
	       monitored = 1
	     entry_point = 0x690de813
	     region_type = mapped_file
	            name = "mscordacwks.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscordacwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscordacwks.dll")

Region:
	              id = 1933
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1934
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1935
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1936
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1937
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1938
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1939
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1940
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1941
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1942
	        start_va = 0x9e0000
	          end_va = 0xa1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009e0000"
	        filename = ""

Region:
	              id = 1943
	        start_va = 0x9e0000
	          end_va = 0x9e2fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "wer.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\wer.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wer.dll.mui")

Region:
	              id = 1944
	        start_va = 0x68be0000
	          end_va = 0x68ffdfff
	       monitored = 0
	     entry_point = 0x68cdee80
	     region_type = mapped_file
	            name = "dbgeng.dll"
	        filename = "\\Windows\\SysWOW64\\dbgeng.dll" (normalized: "c:\\windows\\syswow64\\dbgeng.dll")

Region:
	              id = 1945
	        start_va = 0x753c0000
	          end_va = 0x75451fff
	       monitored = 0
	     entry_point = 0x753f8cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1946
	        start_va = 0x68b70000
	          end_va = 0x68bdffff
	       monitored = 0
	     entry_point = 0x68bc4b90
	     region_type = mapped_file
	            name = "dbgmodel.dll"
	        filename = "\\Windows\\SysWOW64\\DbgModel.dll" (normalized: "c:\\windows\\syswow64\\dbgmodel.dll")

Region:
	              id = 1947
	        start_va = 0x6d0b0000
	          end_va = 0x6d0dcfff
	       monitored = 0
	     entry_point = 0x6d0c2b00
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll")

Region:
	              id = 1948
	        start_va = 0x63a0000
	          end_va = 0x6489fff
	       monitored = 0
	     entry_point = 0x63dd650
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1949
	        start_va = 0x6cd20000
	          end_va = 0x6cd29fff
	       monitored = 0
	     entry_point = 0x6cd23200
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll")

Region:
	              id = 1950
	        start_va = 0x77240000
	          end_va = 0x77284fff
	       monitored = 0
	     entry_point = 0x7725de90
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 1951
	        start_va = 0x6d0a0000
	          end_va = 0x6d0a7fff
	       monitored = 0
	     entry_point = 0x6d0a17b0
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 1952
	        start_va = 0x63a0000
	          end_va = 0x649ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000063a0000"
	        filename = ""

Region:
	              id = 1953
	        start_va = 0x74720000
	          end_va = 0x7480afff
	       monitored = 0
	     entry_point = 0x7475d650
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1954
	        start_va = 0x9f0000
	          end_va = 0x9f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1955
	        start_va = 0x9f0000
	          end_va = 0x9f3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1956
	        start_va = 0x9f0000
	          end_va = 0x9f5fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1957
	        start_va = 0x9f0000
	          end_va = 0x9f7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1958
	        start_va = 0x9f0000
	          end_va = 0x9f9fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1959
	        start_va = 0x9f0000
	          end_va = 0x9fbfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1960
	        start_va = 0x9f0000
	          end_va = 0x9fdfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1961
	        start_va = 0x9f0000
	          end_va = 0x9fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1962
	        start_va = 0x9f0000
	          end_va = 0xa01fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1963
	        start_va = 0x9f0000
	          end_va = 0xa03fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1964
	        start_va = 0x9f0000
	          end_va = 0xa05fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1965
	        start_va = 0x9f0000
	          end_va = 0xa07fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1966
	        start_va = 0x9f0000
	          end_va = 0xa09fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1967
	        start_va = 0x9f0000
	          end_va = 0xa0bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1968
	        start_va = 0x9f0000
	          end_va = 0xa0dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1969
	        start_va = 0x64a0000
	          end_va = 0x659ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000064a0000"
	        filename = ""

Region:
	              id = 1970
	        start_va = 0x65a0000
	          end_va = 0x667ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 1971
	        start_va = 0x6680000
	          end_va = 0x6744fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006680000"
	        filename = ""

Region:
	              id = 1972
	        start_va = 0x6750000
	          end_va = 0x694ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006750000"
	        filename = ""

Region:
	              id = 1973
	        start_va = 0x6950000
	          end_va = 0x69f4fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006950000"
	        filename = ""

Region:
	              id = 1974
	        start_va = 0x9f0000
	          end_va = 0x9f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009f0000"
	        filename = ""

Region:
	              id = 1975
	        start_va = 0xa00000
	          end_va = 0xa03fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a00000"
	        filename = ""

Region:
	              id = 1976
	        start_va = 0x6950000
	          end_va = 0x714ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006950000"
	        filename = ""

Region:
	              id = 1977
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1978
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1979
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1980
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1981
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1982
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1983
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1984
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1985
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1986
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1987
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1988
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1989
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1990
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1991
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1992
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1993
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1994
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1995
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1996
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1997
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1998
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 1999
	        start_va = 0x6950000
	          end_va = 0x6a4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006950000"
	        filename = ""

Region:
	              id = 2000
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2001
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2002
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2003
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2004
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2005
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2006
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2007
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2008
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2009
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2010
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2011
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2012
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2013
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2014
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2015
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2016
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2017
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2018
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2019
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2020
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2021
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2022
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2023
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2024
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2025
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2026
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2027
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2028
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2029
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2030
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2031
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2032
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2033
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2034
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2035
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2036
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2037
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2038
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2039
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2040
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2041
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2042
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2043
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2044
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2045
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2046
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2047
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2048
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2049
	        start_va = 0xa10000
	          end_va = 0xa22fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2050
	        start_va = 0x68f90000
	          end_va = 0x68ff3fff
	       monitored = 0
	     entry_point = 0x68fce270
	     region_type = mapped_file
	            name = "werui.dll"
	        filename = "\\Windows\\SysWOW64\\werui.dll" (normalized: "c:\\windows\\syswow64\\werui.dll")

Region:
	              id = 2051
	        start_va = 0xa10000
	          end_va = 0xa11fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2052
	        start_va = 0x6f650000
	          end_va = 0x6f85efff
	       monitored = 0
	     entry_point = 0x6f6fb0a0
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll")

Region:
	              id = 2053
	        start_va = 0x756e0000
	          end_va = 0x76adefff
	       monitored = 0
	     entry_point = 0x7589b990
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 2054
	        start_va = 0x749a0000
	          end_va = 0x74e98fff
	       monitored = 0
	     entry_point = 0x74ba7610
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll")

Region:
	              id = 2055
	        start_va = 0x75370000
	          end_va = 0x753b3fff
	       monitored = 0
	     entry_point = 0x75377410
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll")

Region:
	              id = 2056
	        start_va = 0x75250000
	          end_va = 0x7525efff
	       monitored = 0
	     entry_point = 0x75252e40
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 2057
	        start_va = 0x753c0000
	          end_va = 0x75451fff
	       monitored = 0
	     entry_point = 0x753f8cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 2058
	        start_va = 0x68e20000
	          end_va = 0x68f86fff
	       monitored = 0
	     entry_point = 0x68e9b9d0
	     region_type = mapped_file
	            name = "dui70.dll"
	        filename = "\\Windows\\SysWOW64\\dui70.dll" (normalized: "c:\\windows\\syswow64\\dui70.dll")

Region:
	              id = 2059
	        start_va = 0x68df0000
	          end_va = 0x68e17fff
	       monitored = 0
	     entry_point = 0x68df7820
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll")

Region:
	              id = 2060
	        start_va = 0xa20000
	          end_va = 0xa21fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a20000"
	        filename = ""

Region:
	              id = 2061
	        start_va = 0xa30000
	          end_va = 0xa30fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "windowsshell.manifest"
	        filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest")

Region:
	              id = 2062
	        start_va = 0x62e0000
	          end_va = 0x62e1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000062e0000"
	        filename = ""

Region:
	              id = 2063
	        start_va = 0xa30000
	          end_va = 0xa30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a30000"
	        filename = ""

Region:
	              id = 2064
	        start_va = 0x76c80000
	          end_va = 0x76d03fff
	       monitored = 0
	     entry_point = 0x76ca6220
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 2065
	        start_va = 0x62f0000
	          end_va = 0x62f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000062f0000"
	        filename = ""

Region:
	              id = 2066
	        start_va = 0x68db0000
	          end_va = 0x68de3fff
	       monitored = 0
	     entry_point = 0x68dc8280
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 2067
	        start_va = 0x6680000
	          end_va = 0x66bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006680000"
	        filename = ""

Region:
	              id = 2068
	        start_va = 0x66c0000
	          end_va = 0x66fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000066c0000"
	        filename = ""

Region:
	              id = 2069
	        start_va = 0x6700000
	          end_va = 0x673ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006700000"
	        filename = ""

Region:
	              id = 2070
	        start_va = 0x6a50000
	          end_va = 0x6a8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006a50000"
	        filename = ""

Region:
	              id = 2071
	        start_va = 0x6a90000
	          end_va = 0x6acffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006a90000"
	        filename = ""

Region:
	              id = 2072
	        start_va = 0x6ad0000
	          end_va = 0x6b0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ad0000"
	        filename = ""

Region:
	              id = 2073
	        start_va = 0x68da0000
	          end_va = 0x68da8fff
	       monitored = 0
	     entry_point = 0x68da3830
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 2233
	        start_va = 0xa30000
	          end_va = 0xa30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a30000"
	        filename = ""

Region:
	              id = 2234
	        start_va = 0x68db0000
	          end_va = 0x68de3fff
	       monitored = 0
	     entry_point = 0x68dc8280
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 2235
	        start_va = 0x68da0000
	          end_va = 0x68da8fff
	       monitored = 0
	     entry_point = 0x68da3830
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 2236
	        start_va = 0xa30000
	          end_va = 0xa34fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "werui.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\werui.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\werui.dll.mui")

Region:
	              id = 2237
	        start_va = 0x6300000
	          end_va = 0x6300fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006300000"
	        filename = ""

Region:
	              id = 2238
	        start_va = 0x68db0000
	          end_va = 0x68de3fff
	       monitored = 0
	     entry_point = 0x68dc8280
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 2239
	        start_va = 0x68da0000
	          end_va = 0x68da8fff
	       monitored = 0
	     entry_point = 0x68da3830
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 2240
	        start_va = 0x6b10000
	          end_va = 0x6b4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b10000"
	        filename = ""

Region:
	              id = 2241
	        start_va = 0x6b50000
	          end_va = 0x6b8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b50000"
	        filename = ""

Region:
	              id = 2242
	        start_va = 0x6300000
	          end_va = 0x6300fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006300000"
	        filename = ""

Region:
	              id = 2243
	        start_va = 0x68db0000
	          end_va = 0x68de3fff
	       monitored = 0
	     entry_point = 0x68dc8280
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 2244
	        start_va = 0x68da0000
	          end_va = 0x68da8fff
	       monitored = 0
	     entry_point = 0x68da3830
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 2245
	        start_va = 0x6300000
	          end_va = 0x6301fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006300000"
	        filename = ""

Region:
	              id = 2246
	        start_va = 0x68d70000
	          end_va = 0x68deafff
	       monitored = 0
	     entry_point = 0x68d94d80
	     region_type = mapped_file
	            name = "duser.dll"
	        filename = "\\Windows\\SysWOW64\\duser.dll" (normalized: "c:\\windows\\syswow64\\duser.dll")

Region:
	              id = 2247
	        start_va = 0x6b90000
	          end_va = 0x6bcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b90000"
	        filename = ""

Region:
	              id = 2248
	        start_va = 0x6bd0000
	          end_va = 0x6c0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006bd0000"
	        filename = ""

Region:
	              id = 2249
	        start_va = 0x68ce0000
	          end_va = 0x68d60fff
	       monitored = 0
	     entry_point = 0x68ce6310
	     region_type = mapped_file
	            name = "riched20.dll"
	        filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll")

Region:
	              id = 2250
	        start_va = 0x68cc0000
	          end_va = 0x68cd5fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 2251
	        start_va = 0x68c80000
	          end_va = 0x68cb0fff
	       monitored = 0
	     entry_point = 0x68c922d0
	     region_type = mapped_file
	            name = "msls31.dll"
	        filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll")

Region:
	              id = 2252
	        start_va = 0x6310000
	          end_va = 0x6310fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006310000"
	        filename = ""

Region:
	              id = 2253
	        start_va = 0x6c10000
	          end_va = 0x6ccbfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006c10000"
	        filename = ""

Region:
	              id = 2254
	        start_va = 0x6310000
	          end_va = 0x6313fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006310000"
	        filename = ""

Region:
	              id = 2255
	        start_va = 0x70930000
	          end_va = 0x7094cfff
	       monitored = 0
	     entry_point = 0x70933b10
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 2256
	        start_va = 0x6740000
	          end_va = 0x6743fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006740000"
	        filename = ""

Region:
	              id = 2257
	        start_va = 0x6cd0000
	          end_va = 0x6cd0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 2258
	        start_va = 0x6ce0000
	          end_va = 0x6ce6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 2259
	        start_va = 0x6cf0000
	          end_va = 0x6cf0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006cf0000"
	        filename = ""

Region:
	              id = 2260
	        start_va = 0x6d0b0000
	          end_va = 0x6d0dcfff
	       monitored = 0
	     entry_point = 0x6d0c2b00
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll")

Region:
	              id = 2261
	        start_va = 0x6d00000
	          end_va = 0x6d00fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "duser.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\duser.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\duser.dll.mui")

Region:
	              id = 2262
	        start_va = 0x68c70000
	          end_va = 0x68c7cfff
	       monitored = 0
	     entry_point = 0x68c77d80
	     region_type = mapped_file
	            name = "atlthunk.dll"
	        filename = "\\Windows\\SysWOW64\\atlthunk.dll" (normalized: "c:\\windows\\syswow64\\atlthunk.dll")

Region:
	              id = 2263
	        start_va = 0x6d10000
	          end_va = 0x6d12fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "comctl32.dll.mui"
	        filename = "\\Windows\\WinSxS\\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.10586.0_en-us_e9ce2dce92807715\\comctl32.dll.mui" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.10586.0_en-us_e9ce2dce92807715\\comctl32.dll.mui")

Region:
	              id = 2264
	        start_va = 0x6d30000
	          end_va = 0x6d32fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006d30000"
	        filename = ""

Region:
	              id = 2265
	        start_va = 0x6d40000
	          end_va = 0x7231fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006d40000"
	        filename = ""

Region:
	              id = 2266
	        start_va = 0x7240000
	          end_va = 0x827ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "staticcache.dat"
	        filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat")

Region:
	              id = 2267
	        start_va = 0x8280000
	          end_va = 0x82c8fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000008280000"
	        filename = ""

Region:
	              id = 2268
	        start_va = 0x6d20000
	          end_va = 0x6d20fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006d20000"
	        filename = ""

Region:
	              id = 2269
	        start_va = 0x74470000
	          end_va = 0x7458efff
	       monitored = 0
	     entry_point = 0x744b5980
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")


Thread:
	id = 152
	os_tid = 0x13b8

	[0188.063] GetProcessHeap () returned 0x4c0000
	[0188.065] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.065] GetProcAddress (hModule=0x75600000, lpProcName="FlsAlloc") returned 0x7561a980
	[0188.065] GetProcAddress (hModule=0x75600000, lpProcName="FlsFree") returned 0x75624ff0
	[0188.065] GetProcAddress (hModule=0x75600000, lpProcName="FlsGetValue") returned 0x75617570
	[0188.065] GetProcAddress (hModule=0x75600000, lpProcName="FlsSetValue") returned 0x75619e30
	[0188.066] GetProcAddress (hModule=0x75600000, lpProcName="InitializeCriticalSectionEx") returned 0x75626740
	[0188.066] GetProcAddress (hModule=0x75600000, lpProcName=0x69002000) returned 0x756266a0
	[0188.066] GetProcAddress (hModule=0x75600000, lpProcName="CreateSemaphoreExW") returned 0x75626700
	[0188.066] GetProcAddress (hModule=0x75600000, lpProcName="SetThreadStackGuarantee") returned 0x7561b040
	[0188.066] GetProcAddress (hModule=0x75600000, lpProcName="CreateThreadpoolTimer") returned 0x7561ace0
	[0188.066] GetProcAddress (hModule=0x75600000, lpProcName="SetThreadpoolTimer") returned 0x77767dc0
	[0188.067] GetProcAddress (hModule=0x75600000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77774010
	[0188.067] GetProcAddress (hModule=0x75600000, lpProcName="CloseThreadpoolTimer") returned 0x77772a50
	[0188.067] GetProcAddress (hModule=0x75600000, lpProcName="CreateThreadpoolWait") returned 0x7561a7b0
	[0188.067] GetProcAddress (hModule=0x75600000, lpProcName="SetThreadpoolWait") returned 0x77772290
	[0188.067] GetProcAddress (hModule=0x75600000, lpProcName="CloseThreadpoolWait") returned 0x77772910
	[0188.067] GetProcAddress (hModule=0x75600000, lpProcName="FlushProcessWriteBuffers") returned 0x77797a60
	[0188.067] GetProcAddress (hModule=0x75600000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7778ac00
	[0188.068] GetProcAddress (hModule=0x75600000, lpProcName="GetCurrentProcessorNumber") returned 0x7777a890
	[0188.068] GetProcAddress (hModule=0x75600000, lpProcName="GetLogicalProcessorInformation") returned 0x7561ac80
	[0188.068] GetProcAddress (hModule=0x75600000, lpProcName="CreateSymbolicLinkW") returned 0x75640830
	[0188.068] GetProcAddress (hModule=0x75600000, lpProcName="SetDefaultDllDirectories") returned 0x755b6270
	[0188.068] GetProcAddress (hModule=0x75600000, lpProcName="EnumSystemLocalesEx") returned 0x7561fe80
	[0188.069] GetProcAddress (hModule=0x75600000, lpProcName="CompareStringEx") returned 0x7561ff80
	[0188.069] GetProcAddress (hModule=0x75600000, lpProcName="GetDateFormatEx") returned 0x75640e00
	[0188.069] GetProcAddress (hModule=0x75600000, lpProcName="GetLocaleInfoEx") returned 0x7561a750
	[0188.069] GetProcAddress (hModule=0x75600000, lpProcName="GetTimeFormatEx") returned 0x75641240
	[0188.069] GetProcAddress (hModule=0x75600000, lpProcName="GetUserDefaultLocaleName") returned 0x7561ad60
	[0188.069] GetProcAddress (hModule=0x75600000, lpProcName="IsValidLocaleName") returned 0x75641460
	[0188.069] GetProcAddress (hModule=0x75600000, lpProcName="LCMapStringEx") returned 0x75619a10
	[0188.069] GetProcAddress (hModule=0x75600000, lpProcName="GetCurrentPackageId") returned 0x7553ded0
	[0188.070] GetProcAddress (hModule=0x75600000, lpProcName="GetTickCount64") returned 0x75613630
	[0188.070] GetProcAddress (hModule=0x75600000, lpProcName="GetFileInformationByHandleExW") returned 0x0
	[0188.070] GetProcAddress (hModule=0x75600000, lpProcName="SetFileInformationByHandleW") returned 0x0
	[0188.070] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x3bc) returned 0x4d12d8
	[0188.071] GetCurrentThreadId () returned 0x13b8
	[0188.071] GetCommandLineA () returned="C:\\Windows\\SysWOW64\\WerFault.exe -u -p 1908 -s 1864"
	[0188.071] GetEnvironmentStringsW () returned 0x4d16a0*
	[0188.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1344, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1344
	[0188.071] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x540) returned 0x4d2128
	[0188.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1344, lpMultiByteStr=0x4d2128, cbMultiByte=1344, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1344
	[0188.072] FreeEnvironmentStringsW (penv=0x4d16a0) returned 1
	[0188.072] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c28d0
	[0188.072] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x800) returned 0x4d2670
	[0188.072] GetStartupInfoW (in: lpStartupInfo=0xdc688 | out: lpStartupInfo=0xdc688*(cb=0x44, lpReserved="", lpDesktop="", lpTitle="C:\\Windows\\SysWOW64\\WerFault.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x9bc1892b, hStdOutput=0xdc6fc, hStdError=0x690e4040)) 
	[0188.072] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0188.072] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0188.072] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0188.072] GetLastError () returned 0x7f
	[0188.072] SetLastError (dwErrCode=0x7f) 
	[0188.072] GetLastError () returned 0x7f
	[0188.072] SetLastError (dwErrCode=0x7f) 
	[0188.072] GetLastError () returned 0x7f
	[0188.072] SetLastError (dwErrCode=0x7f) 
	[0188.072] GetACP () returned 0x4e4
	[0188.073] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x220) returned 0x4d16a0
	[0188.073] GetLastError () returned 0x7f
	[0188.073] SetLastError (dwErrCode=0x7f) 
	[0188.073] IsValidCodePage (CodePage=0x4e4) returned 1
	[0188.073] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xdc68c | out: lpCPInfo=0xdc68c) returned 1
	[0188.073] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xdc154 | out: lpCPInfo=0xdc154) returned 1
	[0188.073] GetLastError () returned 0x7f
	[0188.073] SetLastError (dwErrCode=0x7f) 
	[0188.073] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdc568, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0188.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdc568, cbMultiByte=256, lpWideCharStr=0xdbed8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0188.074] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0xdc168 | out: lpCharType=0xdc168) returned 1
	[0188.074] GetLastError () returned 0x7f
	[0188.074] SetLastError (dwErrCode=0x7f) 
	[0188.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdc568, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0188.074] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdc568, cbMultiByte=256, lpWideCharStr=0xdbea8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0188.075] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0188.075] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xdbc98, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256
	[0188.075] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0xdc468, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ!u\x92i¤Æ\r", lpUsedDefaultChar=0x0) returned 256
	[0188.075] GetLastError () returned 0x7f
	[0188.075] SetLastError (dwErrCode=0x7f) 
	[0188.075] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdc568, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0188.075] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdc568, cbMultiByte=256, lpWideCharStr=0xdbeb8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0188.075] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0188.075] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xdbca8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256
	[0188.075] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0xdc368, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ!u\x92i¤Æ\r", lpUsedDefaultChar=0x0) returned 256
	[0188.075] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x691255d0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\WerFault.exe" (normalized: "c:\\windows\\syswow64\\werfault.exe")) returned 0x20
	[0188.075] GetLastError () returned 0x0
	[0188.075] SetLastError (dwErrCode=0x0) 
	[0188.075] GetLastError () returned 0x0
	[0188.075] SetLastError (dwErrCode=0x0) 
	[0188.075] GetLastError () returned 0x0
	[0188.075] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.076] SetLastError (dwErrCode=0x0) 
	[0188.076] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.077] SetLastError (dwErrCode=0x0) 
	[0188.077] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.078] GetLastError () returned 0x0
	[0188.078] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.079] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.079] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.079] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.079] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.079] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.079] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.079] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.079] SetLastError (dwErrCode=0x0) 
	[0188.079] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x50) returned 0x4c9bf8
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.080] SetLastError (dwErrCode=0x0) 
	[0188.080] GetLastError () returned 0x0
	[0188.081] SetLastError (dwErrCode=0x0) 
	[0188.081] GetLastError () returned 0x0
	[0188.081] SetLastError (dwErrCode=0x0) 
	[0188.081] GetLastError () returned 0x0
	[0188.081] SetLastError (dwErrCode=0x0) 
	[0188.081] GetLastError () returned 0x0
	[0188.081] SetLastError (dwErrCode=0x0) 
	[0188.081] GetLastError () returned 0x0
	[0188.081] SetLastError (dwErrCode=0x0) 
	[0188.081] GetLastError () returned 0x0
	[0188.081] SetLastError (dwErrCode=0x0) 
	[0188.081] GetLastError () returned 0x0
	[0188.081] SetLastError (dwErrCode=0x0) 
	[0188.081] GetLastError () returned 0x0
	[0188.081] SetLastError (dwErrCode=0x0) 
	[0188.081] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.082] SetLastError (dwErrCode=0x0) 
	[0188.082] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.083] GetLastError () returned 0x0
	[0188.083] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.084] SetLastError (dwErrCode=0x0) 
	[0188.084] GetLastError () returned 0x0
	[0188.085] SetLastError (dwErrCode=0x0) 
	[0188.085] GetLastError () returned 0x0
	[0188.085] SetLastError (dwErrCode=0x0) 
	[0188.085] GetLastError () returned 0x0
	[0188.085] SetLastError (dwErrCode=0x0) 
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x94) returned 0x4c31c8
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x1f) returned 0x4c3268
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x2e) returned 0x4c7fe8
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x35) returned 0x4c81f0
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x37) returned 0x4c9c50
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x3c) returned 0x4cda70
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x31) returned 0x4ca2a8
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x14) returned 0x4c27b0
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x24) returned 0x4c37f0
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0xd) returned 0x4c9ee8
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x1d) returned 0x4c9c90
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x31) returned 0x4ca2e8
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x15) returned 0x4c2910
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x17) returned 0x4c29f0
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0xe) returned 0x4c9f00
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x69) returned 0x4c7120
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x3e) returned 0x4cdea8
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x1b) returned 0x4ca328
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x1d) returned 0x4ca350
	[0188.085] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x48) returned 0x4c7198
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x12) returned 0x4c2a30
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x18) returned 0x4c27f0
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x1b) returned 0x4c71e8
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x24) returned 0x4cffd0
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x29) returned 0x4c7db8
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x1e) returned 0x4d0000
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x69) returned 0x4d0028
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x17) returned 0x4c2810
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0xf) returned 0x4c9f18
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x16) returned 0x4c2a70
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x2a) returned 0x4c8090
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x29) returned 0x4c80c8
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x12) returned 0x4c26d0
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x21) returned 0x4d00a0
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x16) returned 0x4c28b0
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x22) returned 0x4d00d0
	[0188.086] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x12) returned 0x4c2830
	[0188.087] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d2128 | out: hHeap=0x4c0000) returned 1
	[0188.087] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x80) returned 0x4d2e78
	[0188.087] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x800) returned 0x4d18c8
	[0188.088] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0188.088] RtlSizeHeap (HeapHandle=0x4c0000, Flags=0x0, MemoryPointer=0x4d2e78) returned 0x80
	[0188.088] RtlSizeHeap (HeapHandle=0x4c0000, Flags=0x0, MemoryPointer=0x4d2e78) returned 0x80
	[0188.089] RtlSizeHeap (HeapHandle=0x4c0000, Flags=0x0, MemoryPointer=0x4d2e78) returned 0x80
	[0188.089] RtlSizeHeap (HeapHandle=0x4c0000, Flags=0x0, MemoryPointer=0x4d2e78) returned 0x80
	[0188.089] RtlSizeHeap (HeapHandle=0x4c0000, Flags=0x0, MemoryPointer=0x4d2e78) returned 0x80
	[0188.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.093] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.093] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.093] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.094] GetThreadId (Thread=0x768) returned 0xc04
	[0188.100] GetProcessHeap () returned 0x4c0000
	[0188.100] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c2750
	[0188.100] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f30
	[0188.101] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cbef8
	[0188.101] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.101] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4cdf38
	[0188.102] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.105] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0xdb370, nSize=0x40, lpNumberOfBytesRead=0xdb204 | out: lpBuffer=0xdb370*, lpNumberOfBytesRead=0xdb204*=0x40) returned 1
	[0188.105] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0xdb274, nSize=0x4, lpNumberOfBytesRead=0xdb204 | out: lpBuffer=0xdb274*, lpNumberOfBytesRead=0xdb204*=0x4) returned 1
	[0188.106] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540134, lpBuffer=0xdb3b0, nSize=0x14, lpNumberOfBytesRead=0xdb204 | out: lpBuffer=0xdb3b0*, lpNumberOfBytesRead=0xdb204*=0x14) returned 1
	[0188.106] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540148, lpBuffer=0xdb278, nSize=0x2, lpNumberOfBytesRead=0xdb204 | out: lpBuffer=0xdb278*, lpNumberOfBytesRead=0xdb204*=0x2) returned 1
	[0188.106] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540148, lpBuffer=0xdb290, nSize=0xe0, lpNumberOfBytesRead=0xdb204 | out: lpBuffer=0xdb290*, lpNumberOfBytesRead=0xdb204*=0xe0) returned 1
	[0188.106] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba4000, lpBuffer=0xdb35c, nSize=0x10, lpNumberOfBytesRead=0xdb2e4 | out: lpBuffer=0xdb35c*, lpNumberOfBytesRead=0xdb2e4*=0x10) returned 1
	[0188.106] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba4010, lpBuffer=0xdb34c, nSize=0x8, lpNumberOfBytesRead=0xdb2e4 | out: lpBuffer=0xdb34c*, lpNumberOfBytesRead=0xdb2e4*=0x8) returned 1
	[0188.106] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba4020, lpBuffer=0xdb2e8, nSize=0x10, lpNumberOfBytesRead=0xdb26c | out: lpBuffer=0xdb2e8*, lpNumberOfBytesRead=0xdb26c*=0x10) returned 1
	[0188.107] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba4030, lpBuffer=0xdb2d4, nSize=0x8, lpNumberOfBytesRead=0xdb26c | out: lpBuffer=0xdb2d4*, lpNumberOfBytesRead=0xdb26c*=0x8) returned 1
	[0188.107] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba40d0, lpBuffer=0xdb2e4, nSize=0x2, lpNumberOfBytesRead=0xdb26c | out: lpBuffer=0xdb2e4*, lpNumberOfBytesRead=0xdb26c*=0x2) returned 1
	[0188.107] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba4038, lpBuffer=0xdb2d4, nSize=0x8, lpNumberOfBytesRead=0xdb26c | out: lpBuffer=0xdb2d4*, lpNumberOfBytesRead=0xdb26c*=0x8) returned 1
	[0188.107] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba40ea, lpBuffer=0xdb2e4, nSize=0x2, lpNumberOfBytesRead=0xdb26c | out: lpBuffer=0xdb2e4*, lpNumberOfBytesRead=0xdb26c*=0x2) returned 1
	[0188.107] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba40ec, lpBuffer=0xdb2f8, nSize=0x3a, lpNumberOfBytesRead=0xdb26c | out: lpBuffer=0xdb2f8*, lpNumberOfBytesRead=0xdb26c*=0x3a) returned 1
	[0188.108] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba4070, lpBuffer=0xdb35c, nSize=0x10, lpNumberOfBytesRead=0xdb2e4 | out: lpBuffer=0xdb35c*, lpNumberOfBytesRead=0xdb2e4*=0x10) returned 1
	[0188.108] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba4080, lpBuffer=0xdb34c, nSize=0x8, lpNumberOfBytesRead=0xdb2e4 | out: lpBuffer=0xdb34c*, lpNumberOfBytesRead=0xdb2e4*=0x8) returned 1
	[0188.108] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba40b0, lpBuffer=0xdb3a4, nSize=0x10, lpNumberOfBytesRead=0xdb32c | out: lpBuffer=0xdb3a4*, lpNumberOfBytesRead=0xdb32c*=0x10) returned 1
	[0188.108] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x3f0) returned 0x4d20d0
	[0188.108] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cba414c, lpBuffer=0x4d20d0, nSize=0x3f0, lpNumberOfBytesRead=0xdb384 | out: lpBuffer=0x4d20d0*, lpNumberOfBytesRead=0xdb384*=0x3f0) returned 1
	[0188.111] GetCurrentProcess () returned 0xffffffff
	[0188.111] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0xda904, lpSystemAffinityMask=0xda8f8 | out: lpProcessAffinityMask=0xda904, lpSystemAffinityMask=0xda8f8) returned 1
	[0188.113] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.113] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x74650000
	[0188.114] GetProcAddress (hModule=0x74650000, lpProcName="RegOpenKeyExW") returned 0x7466f350
	[0188.114] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdad40 | out: phkResult=0xdad40*=0x0) returned 0x2
	[0188.114] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdad44 | out: phkResult=0xdad44*=0x148) returned 0x0
	[0188.114] GetProcAddress (hModule=0x74650000, lpProcName="RegQueryValueExW") returned 0x7466f330
	[0188.114] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdad28, lpData=0xdad0c, lpcbData=0xdad1c*=0x4 | out: lpType=0xdad28*=0x0, lpData=0xdad0c*=0x0, lpcbData=0xdad1c*=0x4) returned 0x2
	[0188.115] GetProcAddress (hModule=0x74650000, lpProcName="RegCloseKey") returned 0x7466f620
	[0188.115] RegCloseKey (hKey=0x148) returned 0x0
	[0188.115] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.115] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdaef4 | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdaef4*=0x40) returned 1
	[0188.116] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.116] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdaef4 | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdaef4*=0xf8) returned 1
	[0188.116] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.116] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdaed8 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdaed8*=0x8) returned 1
	[0188.116] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.116] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdaf14 | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdaf14*=0x1c) returned 1
	[0188.116] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.116] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdaf14 | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdaf14*=0x1c) returned 1
	[0188.116] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.116] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdaf14 | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdaf14*=0x1c) returned 1
	[0188.117] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.117] GetLastError () returned 0xcb
	[0188.117] SetLastError (dwErrCode=0xcb) 
	[0188.117] GetLastError () returned 0xcb
	[0188.118] SetLastError (dwErrCode=0xcb) 
	[0188.118] GetLastError () returned 0xcb
	[0188.118] SetLastError (dwErrCode=0xcb) 
	[0188.119] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb3b0 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb3b0*=0x4) returned 1
	[0188.119] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.119] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb3b0 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb3b0*=0x1c) returned 1
	[0188.120] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.120] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb3b4 | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb3b4*=0x1c) returned 1
	[0188.120] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.120] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.120] GetProcessHeap () returned 0x4c0000
	[0188.120] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cdf38 | out: hHeap=0x4c0000) returned 1
	[0188.121] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb3b4 | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb3b4*=0x1c) returned 1
	[0188.121] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.121] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb3b4 | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb3b4*=0x1c) returned 1
	[0188.121] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.121] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb3b4 | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb3b4*=0x1c) returned 1
	[0188.122] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.122] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb3b4 | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb3b4*=0x1c) returned 1
	[0188.122] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.122] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb3b4 | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb3b4*=0x1c) returned 1
	[0188.122] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.122] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb430, nSize=0x4, lpNumberOfBytesRead=0xdb3b8 | out: lpBuffer=0xdb430*, lpNumberOfBytesRead=0xdb3b8*=0x4) returned 1
	[0188.122] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb3b8 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb3b8*=0x78) returned 1
	[0188.122] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.123] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb3a4 | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb3a4*=0x24) returned 1
	[0188.123] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.123] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb3a4 | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb3a4*=0x4) returned 1
	[0188.123] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d2ff0
	[0188.123] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb3a4 | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb3a4*=0x4) returned 1
	[0188.123] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3128
	[0188.123] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb3c0 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb3c0*=0x10) returned 1
	[0188.123] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d31d0
	[0188.125] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb3b4 | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb3b4*=0x4) returned 1
	[0188.125] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d2fd8
	[0188.125] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb3b4 | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb3b4*=0x64) returned 1
	[0188.125] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3188
	[0188.125] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb3b0 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb3b0*=0x4) returned 1
	[0188.125] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3038
	[0188.125] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb3b0 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb3b0*=0x4) returned 1
	[0188.125] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d31e8
	[0188.125] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb420, nSize=0x4, lpNumberOfBytesRead=0xdb3a8 | out: lpBuffer=0xdb420*, lpNumberOfBytesRead=0xdb3a8*=0x4) returned 1
	[0188.125] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb3a8 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb3a8*=0x540) returned 1
	[0188.126] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d2f48
	[0188.127] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb3a4 | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb3a4*=0xc4) returned 1
	[0188.127] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3200
	[0188.127] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb3a4 | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb3a4*=0x8) returned 1
	[0188.127] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3158
	[0188.127] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb504, nSize=0xf98, lpNumberOfBytesRead=0xdb3f4 | out: lpBuffer=0xdb504*, lpNumberOfBytesRead=0xdb3f4*=0xf98) returned 1
	[0188.127] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc49c, nSize=0x658, lpNumberOfBytesRead=0xdb3f4 | out: lpBuffer=0xdc49c*, lpNumberOfBytesRead=0xdb3f4*=0x658) returned 1
	[0188.128] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.128] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3158 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3188 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d2f48 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d31e8 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.131] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d2ff0 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3128 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d31d0 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d2fd8 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3038 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3200 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.132] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.133] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cbef8 | out: hHeap=0x4c0000) returned 1
	[0188.133] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2750 | out: hHeap=0x4c0000) returned 1
	[0188.133] OutOfProcessExceptionEventDebuggerLaunchCallback () returned 0x0
	[0188.548] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.548] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.548] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.548] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.548] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.549] GetThreadId (Thread=0x768) returned 0xc04
	[0188.549] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c28f0
	[0188.549] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f30
	[0188.549] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4ccb28
	[0188.549] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.549] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4cdf80
	[0188.549] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.549] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.549] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.550] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.550] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.550] RegCloseKey (hKey=0x148) returned 0x0
	[0188.550] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.550] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.550] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.550] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.550] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.551] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.551] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.551] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.551] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.551] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.551] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.551] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.551] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.551] GetLastError () returned 0xcb
	[0188.551] SetLastError (dwErrCode=0xcb) 
	[0188.551] GetLastError () returned 0xcb
	[0188.551] SetLastError (dwErrCode=0xcb) 
	[0188.551] GetLastError () returned 0xcb
	[0188.551] SetLastError (dwErrCode=0xcb) 
	[0188.551] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.552] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.552] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.552] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.552] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.552] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.552] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.552] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cdf80 | out: hHeap=0x4c0000) returned 1
	[0188.553] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.553] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.553] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.553] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.553] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.553] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.553] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.553] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.553] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.553] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.553] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.554] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.554] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.554] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.554] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.554] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.554] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36b0
	[0188.554] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.554] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3698
	[0188.554] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.554] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3680
	[0188.554] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.554] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3638
	[0188.555] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.555] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3650
	[0188.555] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.555] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36c8
	[0188.555] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.555] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3668
	[0188.555] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.555] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.555] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36e0
	[0188.555] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.555] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36f8
	[0188.555] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.556] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33e0
	[0188.556] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.556] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.556] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.556] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33e0 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3650 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36e0 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3668 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.560] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36b0 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3698 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3680 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3638 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36c8 | out: hHeap=0x4c0000) returned 1
	[0188.561] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36f8 | out: hHeap=0x4c0000) returned 1
	[0188.562] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.562] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.562] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ccb28 | out: hHeap=0x4c0000) returned 1
	[0188.562] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c28f0 | out: hHeap=0x4c0000) returned 1
	[0188.562] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.562] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.562] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.563] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.563] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.563] GetThreadId (Thread=0x768) returned 0xc04
	[0188.563] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c2890
	[0188.563] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f90
	[0188.563] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cc308
	[0188.563] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.563] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4ce0e8
	[0188.564] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.564] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.564] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.564] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.564] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.564] RegCloseKey (hKey=0x148) returned 0x0
	[0188.564] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.565] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.565] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f30
	[0188.565] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.565] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.565] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.565] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.565] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.565] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.565] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.565] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.566] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.566] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.566] GetLastError () returned 0xcb
	[0188.566] SetLastError (dwErrCode=0xcb) 
	[0188.566] GetLastError () returned 0xcb
	[0188.566] SetLastError (dwErrCode=0xcb) 
	[0188.566] GetLastError () returned 0xcb
	[0188.566] SetLastError (dwErrCode=0xcb) 
	[0188.580] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.581] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.581] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.581] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.581] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.581] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.581] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.582] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ce0e8 | out: hHeap=0x4c0000) returned 1
	[0188.582] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.582] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.582] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.582] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.582] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.582] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.582] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.582] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.582] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.582] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.582] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.583] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.583] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.583] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.583] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.583] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.583] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d35f0
	[0188.583] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.583] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3368
	[0188.583] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.583] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33b0
	[0188.583] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.584] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3518
	[0188.584] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.584] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3410
	[0188.584] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.584] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3560
	[0188.584] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.584] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3578
	[0188.584] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.584] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.585] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33c8
	[0188.585] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.585] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3530
	[0188.585] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.585] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3590
	[0188.585] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.586] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.586] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.586] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.588] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.588] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3590 | out: hHeap=0x4c0000) returned 1
	[0188.588] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.588] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3410 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33c8 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3578 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d35f0 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3368 | out: hHeap=0x4c0000) returned 1
	[0188.589] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33b0 | out: hHeap=0x4c0000) returned 1
	[0188.590] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3518 | out: hHeap=0x4c0000) returned 1
	[0188.590] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3560 | out: hHeap=0x4c0000) returned 1
	[0188.590] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3530 | out: hHeap=0x4c0000) returned 1
	[0188.590] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.590] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.591] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cc308 | out: hHeap=0x4c0000) returned 1
	[0188.591] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2890 | out: hHeap=0x4c0000) returned 1
	[0188.591] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.591] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.591] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.591] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.591] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.592] GetThreadId (Thread=0x768) returned 0xc04
	[0188.592] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c2a50
	[0188.592] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f30
	[0188.592] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cbef8
	[0188.592] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.592] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4ce178
	[0188.592] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.592] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.592] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.593] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.593] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.593] RegCloseKey (hKey=0x148) returned 0x0
	[0188.593] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.594] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.594] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.594] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.594] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.594] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.594] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.594] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.594] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.594] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.595] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.595] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.595] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.595] GetLastError () returned 0xcb
	[0188.595] SetLastError (dwErrCode=0xcb) 
	[0188.595] GetLastError () returned 0xcb
	[0188.595] SetLastError (dwErrCode=0xcb) 
	[0188.595] GetLastError () returned 0xcb
	[0188.595] SetLastError (dwErrCode=0xcb) 
	[0188.595] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.595] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.595] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.595] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.595] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.596] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.596] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.596] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ce178 | out: hHeap=0x4c0000) returned 1
	[0188.596] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.596] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.596] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.596] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.597] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.597] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.597] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.597] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.597] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.597] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.597] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.606] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.606] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.606] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.606] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.606] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.607] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3428
	[0188.607] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.607] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3338
	[0188.607] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.607] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3440
	[0188.607] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.607] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33b0
	[0188.607] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.607] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d35d8
	[0188.607] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.607] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d34d0
	[0188.608] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.608] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d34e8
	[0188.608] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.608] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.609] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3620
	[0188.609] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.609] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3500
	[0188.609] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.609] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3458
	[0188.609] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.609] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.609] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.609] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3458 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d35d8 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3620 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d34e8 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.612] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3428 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3338 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3440 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33b0 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d34d0 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3500 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.613] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.614] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cbef8 | out: hHeap=0x4c0000) returned 1
	[0188.614] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a50 | out: hHeap=0x4c0000) returned 1
	[0188.614] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.614] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.614] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.614] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.614] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.614] GetThreadId (Thread=0x768) returned 0xc04
	[0188.615] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c2730
	[0188.615] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f30
	[0188.615] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cca58
	[0188.615] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.615] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4ce058
	[0188.615] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.615] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.615] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.615] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.616] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.616] RegCloseKey (hKey=0x148) returned 0x0
	[0188.616] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.617] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.617] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.617] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.617] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.617] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.617] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.617] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.618] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.618] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.618] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.618] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.618] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.618] GetLastError () returned 0xcb
	[0188.618] SetLastError (dwErrCode=0xcb) 
	[0188.618] GetLastError () returned 0xcb
	[0188.618] SetLastError (dwErrCode=0xcb) 
	[0188.618] GetLastError () returned 0xcb
	[0188.618] SetLastError (dwErrCode=0xcb) 
	[0188.618] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.618] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.618] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.619] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.619] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.619] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.619] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.619] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ce058 | out: hHeap=0x4c0000) returned 1
	[0188.619] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.620] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.620] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.620] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.620] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.620] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.620] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.621] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.621] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.621] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.621] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.621] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.622] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.622] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.622] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.622] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.622] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3698
	[0188.622] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.622] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3680
	[0188.623] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.623] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36c8
	[0188.623] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.623] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36b0
	[0188.623] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.623] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36e0
	[0188.623] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.623] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3650
	[0188.623] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.624] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3638
	[0188.624] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.624] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.624] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3668
	[0188.624] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.624] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36f8
	[0188.624] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.646] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d35a8
	[0188.646] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.646] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.647] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.647] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.650] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.650] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d35a8 | out: hHeap=0x4c0000) returned 1
	[0188.650] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.650] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36e0 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3668 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3638 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3698 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3680 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36c8 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36b0 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3650 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36f8 | out: hHeap=0x4c0000) returned 1
	[0188.651] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.652] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.652] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cca58 | out: hHeap=0x4c0000) returned 1
	[0188.652] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2730 | out: hHeap=0x4c0000) returned 1
	[0188.652] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.652] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.652] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.652] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.652] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.653] GetThreadId (Thread=0x768) returned 0xc04
	[0188.653] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c26b0
	[0188.653] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f30
	[0188.653] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cc578
	[0188.653] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.653] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4cde60
	[0188.653] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.653] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.653] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.653] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.653] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.653] RegCloseKey (hKey=0x148) returned 0x0
	[0188.653] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.654] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.654] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.654] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.654] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.654] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.654] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.654] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.654] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.654] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.655] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.655] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.655] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.655] GetLastError () returned 0xcb
	[0188.655] SetLastError (dwErrCode=0xcb) 
	[0188.655] GetLastError () returned 0xcb
	[0188.655] SetLastError (dwErrCode=0xcb) 
	[0188.655] GetLastError () returned 0xcb
	[0188.655] SetLastError (dwErrCode=0xcb) 
	[0188.655] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.655] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.655] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.655] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.655] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.656] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.656] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.656] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cde60 | out: hHeap=0x4c0000) returned 1
	[0188.657] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.657] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.657] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.657] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.657] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.657] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.657] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.657] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.657] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.658] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.658] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.658] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.658] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.658] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.658] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.658] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.659] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33c8
	[0188.659] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.659] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33e0
	[0188.659] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.659] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3620
	[0188.659] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.659] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3350
	[0188.659] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.659] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3428
	[0188.659] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.660] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d35f0
	[0188.660] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.660] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d34d0
	[0188.660] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.661] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.661] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3470
	[0188.662] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.662] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33f8
	[0188.662] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.662] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3488
	[0188.662] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.662] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.662] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.662] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3488 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3428 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3470 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d34d0 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33c8 | out: hHeap=0x4c0000) returned 1
	[0188.665] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33e0 | out: hHeap=0x4c0000) returned 1
	[0188.666] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3620 | out: hHeap=0x4c0000) returned 1
	[0188.666] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3350 | out: hHeap=0x4c0000) returned 1
	[0188.666] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d35f0 | out: hHeap=0x4c0000) returned 1
	[0188.666] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33f8 | out: hHeap=0x4c0000) returned 1
	[0188.666] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.666] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.666] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cc578 | out: hHeap=0x4c0000) returned 1
	[0188.666] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c26b0 | out: hHeap=0x4c0000) returned 1
	[0188.666] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.666] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.667] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.667] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.667] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.667] GetThreadId (Thread=0x768) returned 0xc04
	[0188.667] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c2950
	[0188.667] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f30
	[0188.668] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cc308
	[0188.668] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.668] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4cdc68
	[0188.668] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.668] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.668] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.668] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.668] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.668] RegCloseKey (hKey=0x148) returned 0x0
	[0188.668] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.669] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.669] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.669] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.669] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.669] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.670] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.670] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.670] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.670] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.670] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.670] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.670] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.670] GetLastError () returned 0xcb
	[0188.670] SetLastError (dwErrCode=0xcb) 
	[0188.670] GetLastError () returned 0xcb
	[0188.671] SetLastError (dwErrCode=0xcb) 
	[0188.671] GetLastError () returned 0xcb
	[0188.671] SetLastError (dwErrCode=0xcb) 
	[0188.671] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.671] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.671] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.671] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.671] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.671] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.671] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.672] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cdc68 | out: hHeap=0x4c0000) returned 1
	[0188.672] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.672] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.672] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.672] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.672] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.672] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.672] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.673] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.673] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.673] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.673] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.673] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.673] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.673] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.673] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.673] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.673] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3380
	[0188.673] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.674] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3578
	[0188.674] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.674] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3398
	[0188.674] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.674] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33b0
	[0188.674] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.674] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3530
	[0188.674] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.674] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d35a8
	[0188.674] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.675] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3620
	[0188.675] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.675] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.675] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3428
	[0188.675] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.675] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33c8
	[0188.675] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.675] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3338
	[0188.675] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.676] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.676] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.676] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.678] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.678] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3338 | out: hHeap=0x4c0000) returned 1
	[0188.678] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3530 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3428 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3620 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3380 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3578 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3398 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33b0 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d35a8 | out: hHeap=0x4c0000) returned 1
	[0188.679] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33c8 | out: hHeap=0x4c0000) returned 1
	[0188.680] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.680] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.680] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cc308 | out: hHeap=0x4c0000) returned 1
	[0188.680] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2950 | out: hHeap=0x4c0000) returned 1
	[0188.680] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.681] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.681] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.681] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.681] GetThreadId (Thread=0x768) returned 0xc04
	[0188.681] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c2770
	[0188.682] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f30
	[0188.682] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cc648
	[0188.682] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.682] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4cdb90
	[0188.682] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.682] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.682] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.699] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.699] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.699] RegCloseKey (hKey=0x148) returned 0x0
	[0188.700] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.700] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.700] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.700] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.701] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.701] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.701] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.701] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.701] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.701] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.701] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.701] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.702] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.702] GetLastError () returned 0xcb
	[0188.702] SetLastError (dwErrCode=0xcb) 
	[0188.702] GetLastError () returned 0xcb
	[0188.702] SetLastError (dwErrCode=0xcb) 
	[0188.702] GetLastError () returned 0xcb
	[0188.702] SetLastError (dwErrCode=0xcb) 
	[0188.702] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.702] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.702] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.702] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.702] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.703] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.703] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.703] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cdb90 | out: hHeap=0x4c0000) returned 1
	[0188.703] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.703] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.703] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.704] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.704] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.704] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.704] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.704] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.704] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.704] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.704] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.704] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.705] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.705] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.705] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.705] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.705] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36c8
	[0188.705] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.705] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3698
	[0188.705] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.705] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36b0
	[0188.705] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.706] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3668
	[0188.706] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.706] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36e0
	[0188.706] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.706] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36f8
	[0188.706] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.706] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3680
	[0188.706] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.706] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.706] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3638
	[0188.707] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.707] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3650
	[0188.707] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.707] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d35f0
	[0188.707] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.707] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.708] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.708] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.710] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d35f0 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36e0 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3638 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3680 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36c8 | out: hHeap=0x4c0000) returned 1
	[0188.711] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3698 | out: hHeap=0x4c0000) returned 1
	[0188.712] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36b0 | out: hHeap=0x4c0000) returned 1
	[0188.712] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3668 | out: hHeap=0x4c0000) returned 1
	[0188.712] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36f8 | out: hHeap=0x4c0000) returned 1
	[0188.712] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3650 | out: hHeap=0x4c0000) returned 1
	[0188.712] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.713] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.713] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cc648 | out: hHeap=0x4c0000) returned 1
	[0188.713] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2770 | out: hHeap=0x4c0000) returned 1
	[0188.713] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.713] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.713] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.714] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.714] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.714] GetThreadId (Thread=0x768) returned 0xc04
	[0188.715] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c2970
	[0188.715] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9fa8
	[0188.715] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cc308
	[0188.715] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f30
	[0188.715] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4cdef0
	[0188.715] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.715] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.715] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.715] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.715] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.715] RegCloseKey (hKey=0x148) returned 0x0
	[0188.716] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.716] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.716] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.716] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.717] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.717] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.717] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.717] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.717] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.717] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.717] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.718] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.718] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.718] GetLastError () returned 0xcb
	[0188.718] SetLastError (dwErrCode=0xcb) 
	[0188.718] GetLastError () returned 0xcb
	[0188.718] SetLastError (dwErrCode=0xcb) 
	[0188.718] GetLastError () returned 0xcb
	[0188.718] SetLastError (dwErrCode=0xcb) 
	[0188.718] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.719] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.719] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.719] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.719] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.719] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.719] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.720] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cdef0 | out: hHeap=0x4c0000) returned 1
	[0188.720] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.720] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.720] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.720] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.720] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.720] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.720] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.720] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.720] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.721] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.721] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.721] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.721] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.721] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.721] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.721] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.721] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36e0
	[0188.721] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.721] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3638
	[0188.721] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.722] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3668
	[0188.722] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.722] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36f8
	[0188.722] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.722] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3650
	[0188.722] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.722] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36c8
	[0188.722] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.722] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3680
	[0188.722] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.723] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.723] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3698
	[0188.723] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.723] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d36b0
	[0188.723] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.723] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d35a8
	[0188.723] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.723] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.723] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.723] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d35a8 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3650 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3698 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3680 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.726] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36e0 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3638 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3668 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36f8 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36c8 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d36b0 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cc308 | out: hHeap=0x4c0000) returned 1
	[0188.727] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2970 | out: hHeap=0x4c0000) returned 1
	[0188.727] OutOfProcessExceptionEventSignatureCallback () returned 0x0
	[0188.728] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75600000
	[0188.728] GetProcAddress (hModule=0x75600000, lpProcName="GetProcessIdOfThread") returned 0x7561fbd0
	[0188.728] GetProcAddress (hModule=0x75600000, lpProcName="GetThreadId") returned 0x756411c0
	[0188.728] GetProcessIdOfThread (Thread=0x768) returned 0x774
	[0188.728] GetThreadId (Thread=0x768) returned 0xc04
	[0188.728] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x18) returned 0x4c2850
	[0188.728] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc) returned 0x4c9f30
	[0188.729] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0xc8) returned 0x4cc648
	[0188.729] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9f90
	[0188.729] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x40) returned 0x4cdb90
	[0188.729] GetEnvironmentVariableA (in: lpName="MSCORDACWKS_DEBUG", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.729] GetEnvironmentVariableW (in: lpName="COMPlus_DbgDACSkipVerifyDlls", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0
	[0188.729] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb008 | out: phkResult=0xdb008*=0x0) returned 0x2
	[0188.729] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb00c | out: phkResult=0xdb00c*=0x148) returned 0x0
	[0188.729] RegQueryValueExW (in: hKey=0x148, lpValueName="DbgDACSkipVerifyDlls", lpReserved=0x0, lpType=0xdaff0, lpData=0xdafd4, lpcbData=0xdafe4*=0x4 | out: lpType=0xdaff0*=0x0, lpData=0xdafd4*=0x0, lpcbData=0xdafe4*=0x4) returned 0x2
	[0188.729] RegCloseKey (hKey=0x148) returned 0x0
	[0188.729] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x9e0000
	[0188.729] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540000, lpBuffer=0x9e0020, nSize=0x40, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0020*, lpNumberOfBytesRead=0xdb1bc*=0x40) returned 1
	[0188.730] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fa8
	[0188.730] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c540130, lpBuffer=0x9e0070, nSize=0xf8, lpNumberOfBytesRead=0xdb1bc | out: lpBuffer=0x9e0070*, lpNumberOfBytesRead=0xdb1bc*=0xf8) returned 1
	[0188.730] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9fd8
	[0188.730] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6c5401d8, lpBuffer=0x9e0180, nSize=0x8, lpNumberOfBytesRead=0xdb1a0 | out: lpBuffer=0x9e0180*, lpNumberOfBytesRead=0xdb1a0*=0x8) returned 1
	[0188.730] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c9ff0
	[0188.730] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bc84, lpBuffer=0x9e01a0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01a0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.730] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca008
	[0188.730] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bca0, lpBuffer=0x9e01d0, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e01d0*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.730] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca128
	[0188.730] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8bcbc, lpBuffer=0x9e0200, nSize=0x1c, lpNumberOfBytesRead=0xdb1dc | out: lpBuffer=0x9e0200*, lpNumberOfBytesRead=0xdb1dc*=0x1c) returned 1
	[0188.731] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca110
	[0188.731] GetLastError () returned 0xcb
	[0188.731] SetLastError (dwErrCode=0xcb) 
	[0188.731] GetLastError () returned 0xcb
	[0188.731] SetLastError (dwErrCode=0xcb) 
	[0188.731] GetLastError () returned 0xcb
	[0188.731] SetLastError (dwErrCode=0xcb) 
	[0188.731] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d7a8, lpBuffer=0x9e0230, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0230*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.731] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca188
	[0188.731] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6ecb08, lpBuffer=0x9e0250, nSize=0x1c, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0250*, lpNumberOfBytesRead=0xdb678*=0x1c) returned 1
	[0188.731] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1a0
	[0188.731] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x718420, lpBuffer=0x9e0280, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0280*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.731] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca140
	[0188.731] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x200) returned 0x4c2a90
	[0188.732] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cdb90 | out: hHeap=0x4c0000) returned 1
	[0188.732] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b270, lpBuffer=0x9e02b0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02b0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.732] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1b8
	[0188.732] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x72b158, lpBuffer=0x9e02e0, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e02e0*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.732] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca1d0
	[0188.732] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x761d68, lpBuffer=0x9e0310, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0310*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.732] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca158
	[0188.732] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x75eb40, lpBuffer=0x9e0340, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0340*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.733] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4ca170
	[0188.733] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7115f0, lpBuffer=0x9e0370, nSize=0x1c, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e0370*, lpNumberOfBytesRead=0xdb67c*=0x1c) returned 1
	[0188.733] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7578
	[0188.733] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0xdb6f8, nSize=0x4, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0xdb6f8*, lpNumberOfBytesRead=0xdb680*=0x4) returned 1
	[0188.733] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dbd20, lpBuffer=0x9e03a0, nSize=0x78, lpNumberOfBytesRead=0xdb680 | out: lpBuffer=0x9e03a0*, lpNumberOfBytesRead=0xdb680*=0x78) returned 1
	[0188.733] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7458
	[0188.733] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x640010, lpBuffer=0x9e0430, nSize=0x24, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0430*, lpNumberOfBytesRead=0xdb66c*=0x24) returned 1
	[0188.733] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4c7590
	[0188.733] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c8, lpBuffer=0x9e0470, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0470*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.733] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d34a0
	[0188.733] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6305c4, lpBuffer=0x9e0490, nSize=0x4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0490*, lpNumberOfBytesRead=0xdb66c*=0x4) returned 1
	[0188.733] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3608
	[0188.733] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x648f48, lpBuffer=0x9e04b0, nSize=0x10, lpNumberOfBytesRead=0xdb688 | out: lpBuffer=0x9e04b0*, lpNumberOfBytesRead=0xdb688*=0x10) returned 1
	[0188.734] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3530
	[0188.734] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6cb8d3dc, lpBuffer=0x9e04d0, nSize=0x4, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04d0*, lpNumberOfBytesRead=0xdb67c*=0x4) returned 1
	[0188.734] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3338
	[0188.734] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb00, lpBuffer=0x9e04f0, nSize=0x64, lpNumberOfBytesRead=0xdb67c | out: lpBuffer=0x9e04f0*, lpNumberOfBytesRead=0xdb67c*=0x64) returned 1
	[0188.734] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3440
	[0188.734] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6dcb24, lpBuffer=0x9e0570, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0570*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.734] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d34b8
	[0188.734] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f22bc, lpBuffer=0x9e0590, nSize=0x4, lpNumberOfBytesRead=0xdb678 | out: lpBuffer=0x9e0590*, lpNumberOfBytesRead=0xdb678*=0x4) returned 1
	[0188.734] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d35c0
	[0188.734] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0xdb6e8, nSize=0x4, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0xdb6e8*, lpNumberOfBytesRead=0xdb670*=0x4) returned 1
	[0188.735] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f21d8, lpBuffer=0x9e05b0, nSize=0x540, lpNumberOfBytesRead=0xdb670 | out: lpBuffer=0x9e05b0*, lpNumberOfBytesRead=0xdb670*=0x540) returned 1
	[0188.735] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3590
	[0188.735] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2364, lpBuffer=0x9e0b00, nSize=0xc4, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0b00*, lpNumberOfBytesRead=0xdb66c*=0xc4) returned 1
	[0188.735] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d3578
	[0188.735] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x6f2420, lpBuffer=0x9e0be0, nSize=0x8, lpNumberOfBytesRead=0xdb66c | out: lpBuffer=0x9e0be0*, lpNumberOfBytesRead=0xdb66c*=0x8) returned 1
	[0188.745] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x0, Size=0x10) returned 0x4d33c8
	[0188.745] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a0068, lpBuffer=0xdb7c8, nSize=0xf98, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdb7c8*, lpNumberOfBytesRead=0xdb6bc*=0xf98) returned 1
	[0188.745] ReadProcessMemory (in: hProcess=0x66c, lpBaseAddress=0x7a1000, lpBuffer=0xdc760, nSize=0x658, lpNumberOfBytesRead=0xdb6bc | out: lpBuffer=0xdc760*, lpNumberOfBytesRead=0xdb6bc*=0x658) returned 1
	[0188.746] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f30 | out: hHeap=0x4c0000) returned 1
	[0188.746] VirtualFree (lpAddress=0x9e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7458 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d33c8 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca140 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3440 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fa8 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca128 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9fd8 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3590 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ff0 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca008 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d35c0 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca110 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1a0 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca188 | out: hHeap=0x4c0000) returned 1
	[0188.748] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1b8 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca1d0 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca158 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca170 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7578 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7590 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d34a0 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3608 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3530 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3338 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d34b8 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d3578 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a90 | out: hHeap=0x4c0000) returned 1
	[0188.749] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f90 | out: hHeap=0x4c0000) returned 1
	[0188.750] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cc648 | out: hHeap=0x4c0000) returned 1
	[0188.750] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2850 | out: hHeap=0x4c0000) returned 1
	[0199.883] _DllMainCRTStartup () returned 0x1
	[0199.890] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d18c8 | out: hHeap=0x4c0000) returned 1
	[0199.890] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c3268 | out: hHeap=0x4c0000) returned 1
	[0199.890] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7fe8 | out: hHeap=0x4c0000) returned 1
	[0199.890] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c81f0 | out: hHeap=0x4c0000) returned 1
	[0199.891] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9c50 | out: hHeap=0x4c0000) returned 1
	[0199.891] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cda70 | out: hHeap=0x4c0000) returned 1
	[0199.891] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca2a8 | out: hHeap=0x4c0000) returned 1
	[0199.891] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c27b0 | out: hHeap=0x4c0000) returned 1
	[0199.892] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c37f0 | out: hHeap=0x4c0000) returned 1
	[0199.892] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9ee8 | out: hHeap=0x4c0000) returned 1
	[0199.892] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9c90 | out: hHeap=0x4c0000) returned 1
	[0199.892] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca2e8 | out: hHeap=0x4c0000) returned 1
	[0199.892] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2910 | out: hHeap=0x4c0000) returned 1
	[0199.892] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c29f0 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f00 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7120 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cdea8 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca328 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4ca350 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7198 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a30 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c27f0 | out: hHeap=0x4c0000) returned 1
	[0199.893] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c71e8 | out: hHeap=0x4c0000) returned 1
	[0199.894] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4cffd0 | out: hHeap=0x4c0000) returned 1
	[0199.894] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c7db8 | out: hHeap=0x4c0000) returned 1
	[0199.894] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d0000 | out: hHeap=0x4c0000) returned 1
	[0199.895] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d0028 | out: hHeap=0x4c0000) returned 1
	[0199.895] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2810 | out: hHeap=0x4c0000) returned 1
	[0199.895] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9f18 | out: hHeap=0x4c0000) returned 1
	[0199.895] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2a70 | out: hHeap=0x4c0000) returned 1
	[0199.895] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c8090 | out: hHeap=0x4c0000) returned 1
	[0199.895] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c80c8 | out: hHeap=0x4c0000) returned 1
	[0199.895] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c26d0 | out: hHeap=0x4c0000) returned 1
	[0199.896] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d00a0 | out: hHeap=0x4c0000) returned 1
	[0199.896] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c28b0 | out: hHeap=0x4c0000) returned 1
	[0199.896] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d00d0 | out: hHeap=0x4c0000) returned 1
	[0199.896] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c2830 | out: hHeap=0x4c0000) returned 1
	[0199.896] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c31c8 | out: hHeap=0x4c0000) returned 1
	[0199.896] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c9bf8 | out: hHeap=0x4c0000) returned 1
	[0199.897] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d2e78 | out: hHeap=0x4c0000) returned 1
	[0199.897] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d2670 | out: hHeap=0x4c0000) returned 1
	[0199.897] _freefls () returned 0x1
	[0199.898] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d16a0 | out: hHeap=0x4c0000) returned 1
	[0199.898] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4d12d8 | out: hHeap=0x4c0000) returned 1
	[0199.898] _freefls () returned 0x1
	[0199.898] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x5bb9a8 | out: hHeap=0x4c0000) returned 1
	[0199.898] _freefls () returned 0x1
	[0199.899] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x64a27c0 | out: hHeap=0x4c0000) returned 1
	[0199.899] _freefls () returned 0x1
	[0199.899] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x64a39d0 | out: hHeap=0x4c0000) returned 1
	[0199.899] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x4c28d0 | out: hHeap=0x4c0000) returned 1

Thread:
	id = 153
	os_tid = 0x13a0


Thread:
	id = 154
	os_tid = 0x13a8


Thread:
	id = 155
	os_tid = 0x121c


Thread:
	id = 156
	os_tid = 0x12a8

	[0195.400] _DllMainCRTStartup () returned 0x1
	[0195.401] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x3bc) returned 0x5bb9a8
	[0195.401] GetCurrentThreadId () returned 0x12a8

Thread:
	id = 157
	os_tid = 0xc1c

	[0195.444] _DllMainCRTStartup () returned 0x1
	[0195.444] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x3bc) returned 0x64a27c0
	[0195.444] GetCurrentThreadId () returned 0xc1c

Thread:
	id = 158
	os_tid = 0xf00

	[0195.445] _DllMainCRTStartup () returned 0x1
	[0195.445] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x3bc) returned 0x64a39d0
	[0195.445] GetCurrentThreadId () returned 0xf00

Thread:
	id = 186
	os_tid = 0xa88

	[0195.918] _DllMainCRTStartup () returned 0x1
	[0195.919] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x3bc) returned 0x5b53e0
	[0195.919] GetCurrentThreadId () returned 0xa88
	[0199.809] _freefls () returned 0x1
	[0199.810] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x5b53e0 | out: hHeap=0x4c0000) returned 1
	[0199.810] _DllMainCRTStartup () returned 0x1

Thread:
	id = 187
	os_tid = 0x8ec

	[0196.585] _DllMainCRTStartup () returned 0x1
	[0196.585] RtlAllocateHeap (HeapHandle=0x4c0000, Flags=0x8, Size=0x3bc) returned 0x5b3a20
	[0196.586] GetCurrentThreadId () returned 0x8ec
	[0199.799] _freefls () returned 0x1
	[0199.800] HeapFree (in: hHeap=0x4c0000, dwFlags=0x0, lpMem=0x5b3a20 | out: hHeap=0x4c0000) returned 1
	[0199.801] _DllMainCRTStartup () returned 0x1

Process:
	id = "9"
	image_name = "applaunch.exe"
	filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe"
	page_root = "0x32cda000"
	os_pid = "0x13fc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0x774"
	cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe\""
	cur_dir = "C:\\Windows\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f72e" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Process:
	id = "10"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x74c51000"
	os_pid = "0x3cc"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "8"
	os_parent_pid = "0x214"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Local Service"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AJRouter" [0xa], "NT SERVICE\\bthserv" [0xa], "NT SERVICE\\CDPSvc" [0xa], "NT SERVICE\\EventSystem" [0xa], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\FontCache" [0xa], "NT SERVICE\\LicenseManager" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\PhoneSvc" [0xa], "NT SERVICE\\RemoteRegistry" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\tzautoupdate" [0xe], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT SERVICE\\workfolderssvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c70d" [0xc000000f], "LOCAL" [0x7]

Region:
	              id = 2074
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2075
	        start_va = 0x20000
	          end_va = 0x21fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2076
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2077
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2078
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2079
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2080
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2081
	        start_va = 0x100000
	          end_va = 0x100fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000100000"
	        filename = ""

Region:
	              id = 2082
	        start_va = 0x110000
	          end_va = 0x110fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 2083
	        start_va = 0x120000
	          end_va = 0x126fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000120000"
	        filename = ""

Region:
	              id = 2084
	        start_va = 0x130000
	          end_va = 0x1edfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2085
	        start_va = 0x1f0000
	          end_va = 0x1f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 2086
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 2087
	        start_va = 0x400000
	          end_va = 0x4fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 2088
	        start_va = 0x580000
	          end_va = 0x63ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000580000"
	        filename = ""

Region:
	              id = 2089
	        start_va = 0x640000
	          end_va = 0x640fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000640000"
	        filename = ""

Region:
	              id = 2090
	        start_va = 0x650000
	          end_va = 0x650fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000650000"
	        filename = ""

Region:
	              id = 2091
	        start_va = 0x660000
	          end_va = 0x660fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000660000"
	        filename = ""

Region:
	              id = 2092
	        start_va = 0x670000
	          end_va = 0x671fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "netprofmsvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\netprofmsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netprofmsvc.dll.mui")

Region:
	              id = 2093
	        start_va = 0x680000
	          end_va = 0x681fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000680000"
	        filename = ""

Region:
	              id = 2094
	        start_va = 0x690000
	          end_va = 0x696fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000690000"
	        filename = ""

Region:
	              id = 2095
	        start_va = 0x6a0000
	          end_va = 0x6e8fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "~fontcache-system.dat"
	        filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat")

Region:
	              id = 2096
	        start_va = 0x6f0000
	          end_va = 0x6f4fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "stdole2.tlb"
	        filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb")

Region:
	              id = 2097
	        start_va = 0x700000
	          end_va = 0x7fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000700000"
	        filename = ""

Region:
	              id = 2098
	        start_va = 0x800000
	          end_va = 0x987fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000800000"
	        filename = ""

Region:
	              id = 2099
	        start_va = 0x990000
	          end_va = 0xb10fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000990000"
	        filename = ""

Region:
	              id = 2100
	        start_va = 0xb20000
	          end_va = 0xf1afff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b20000"
	        filename = ""

Region:
	              id = 2101
	        start_va = 0xf20000
	          end_va = 0xf9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f20000"
	        filename = ""

Region:
	              id = 2102
	        start_va = 0xfa0000
	          end_va = 0xfcdfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000fa0000"
	        filename = ""

Region:
	              id = 2103
	        start_va = 0xfd0000
	          end_va = 0xfe1fff
	       monitored = 0
	     entry_point = 0xff7630
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 2104
	        start_va = 0xff0000
	          end_va = 0xff1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ff0000"
	        filename = ""

Region:
	              id = 2105
	        start_va = 0x1000000
	          end_va = 0x1000fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "msxml6r.dll"
	        filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll")

Region:
	              id = 2106
	        start_va = 0x1040000
	          end_va = 0x1046fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001040000"
	        filename = ""

Region:
	              id = 2107
	        start_va = 0x1100000
	          end_va = 0x11fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001100000"
	        filename = ""

Region:
	              id = 2108
	        start_va = 0x1200000
	          end_va = 0x12fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001200000"
	        filename = ""

Region:
	              id = 2109
	        start_va = 0x1300000
	          end_va = 0x13fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 2110
	        start_va = 0x1400000
	          end_va = 0x14fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001400000"
	        filename = ""

Region:
	              id = 2111
	        start_va = 0x1500000
	          end_va = 0x15dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2112
	        start_va = 0x1600000
	          end_va = 0x16fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001600000"
	        filename = ""

Region:
	              id = 2113
	        start_va = 0x1700000
	          end_va = 0x17fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001700000"
	        filename = ""

Region:
	              id = 2114
	        start_va = 0x1800000
	          end_va = 0x18fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001800000"
	        filename = ""

Region:
	              id = 2115
	        start_va = 0x1900000
	          end_va = 0x19fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001900000"
	        filename = ""

Region:
	              id = 2116
	        start_va = 0x1a00000
	          end_va = 0x29fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "~fontcache-fontface.dat"
	        filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat")

Region:
	              id = 2117
	        start_va = 0x2a00000
	          end_va = 0x2d36fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2118
	        start_va = 0x2d40000
	          end_va = 0x2e3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d40000"
	        filename = ""

Region:
	              id = 2119
	        start_va = 0x3100000
	          end_va = 0x31fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003100000"
	        filename = ""

Region:
	              id = 2120
	        start_va = 0x3640000
	          end_va = 0x373ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003640000"
	        filename = ""

Region:
	              id = 2121
	        start_va = 0x3740000
	          end_va = 0x383ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003740000"
	        filename = ""

Region:
	              id = 2122
	        start_va = 0x3840000
	          end_va = 0x393ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003840000"
	        filename = ""

Region:
	              id = 2123
	        start_va = 0x3940000
	          end_va = 0x3a3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003940000"
	        filename = ""

Region:
	              id = 2124
	        start_va = 0x3a40000
	          end_va = 0x3b3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a40000"
	        filename = ""

Region:
	              id = 2125
	        start_va = 0x3b40000
	          end_va = 0x3c3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b40000"
	        filename = ""

Region:
	              id = 2126
	        start_va = 0x3c40000
	          end_va = 0x3d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c40000"
	        filename = ""

Region:
	              id = 2127
	        start_va = 0x3d40000
	          end_va = 0x3e3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d40000"
	        filename = ""

Region:
	              id = 2128
	        start_va = 0x3e50000
	          end_va = 0x3e56fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e50000"
	        filename = ""

Region:
	              id = 2129
	        start_va = 0x3f00000
	          end_va = 0x3ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f00000"
	        filename = ""

Region:
	              id = 2130
	        start_va = 0x4100000
	          end_va = 0x41fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004100000"
	        filename = ""

Region:
	              id = 2131
	        start_va = 0x4200000
	          end_va = 0x42fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004200000"
	        filename = ""

Region:
	              id = 2132
	        start_va = 0x4300000
	          end_va = 0x43fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004300000"
	        filename = ""

Region:
	              id = 2133
	        start_va = 0x4400000
	          end_va = 0x44fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004400000"
	        filename = ""

Region:
	              id = 2134
	        start_va = 0x4500000
	          end_va = 0x45fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004500000"
	        filename = ""

Region:
	              id = 2135
	        start_va = 0x4600000
	          end_va = 0x46fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004600000"
	        filename = ""

Region:
	              id = 2136
	        start_va = 0x4700000
	          end_va = 0x47fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004700000"
	        filename = ""

Region:
	              id = 2137
	        start_va = 0x4800000
	          end_va = 0x48fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004800000"
	        filename = ""

Region:
	              id = 2138
	        start_va = 0x4900000
	          end_va = 0x49fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004900000"
	        filename = ""

Region:
	              id = 2139
	        start_va = 0x4b00000
	          end_va = 0x4bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b00000"
	        filename = ""

Region:
	              id = 2140
	        start_va = 0x4c00000
	          end_va = 0x4cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c00000"
	        filename = ""

Region:
	              id = 2141
	        start_va = 0x4d00000
	          end_va = 0x4dfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d00000"
	        filename = ""

Region:
	              id = 2142
	        start_va = 0x4e00000
	          end_va = 0x55fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat"
	        filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1560258661-3990802383-1811730007-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat")

Region:
	              id = 2143
	        start_va = 0x5700000
	          end_va = 0x57fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005700000"
	        filename = ""

Region:
	              id = 2144
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2145
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 2146
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 2147
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 2148
	        start_va = 0x7ff6a3140000
	          end_va = 0x7ff6a314cfff
	       monitored = 0
	     entry_point = 0x7ff6a3143980
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 2149
	        start_va = 0x7ff8660f0000
	          end_va = 0x7ff866101fff
	       monitored = 0
	     entry_point = 0x7ff8660f1a80
	     region_type = mapped_file
	            name = "bitsproxy.dll"
	        filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll")

Region:
	              id = 2150
	        start_va = 0x7ff86ad40000
	          end_va = 0x7ff86adf0fff
	       monitored = 0
	     entry_point = 0x7ff86adb1ca0
	     region_type = mapped_file
	            name = "windows.security.authentication.web.core.dll"
	        filename = "\\Windows\\System32\\Windows.Security.Authentication.Web.Core.dll" (normalized: "c:\\windows\\system32\\windows.security.authentication.web.core.dll")

Region:
	              id = 2151
	        start_va = 0x7ff86b0b0000
	          end_va = 0x7ff86b174fff
	       monitored = 0
	     entry_point = 0x7ff86b0be740
	     region_type = mapped_file
	            name = "windows.web.dll"
	        filename = "\\Windows\\System32\\Windows.Web.dll" (normalized: "c:\\windows\\system32\\windows.web.dll")

Region:
	              id = 2152
	        start_va = 0x7ff86f220000
	          end_va = 0x7ff86f236fff
	       monitored = 0
	     entry_point = 0x7ff86f226620
	     region_type = mapped_file
	            name = "msauserext.dll"
	        filename = "\\Windows\\System32\\msauserext.dll" (normalized: "c:\\windows\\system32\\msauserext.dll")

Region:
	              id = 2153
	        start_va = 0x7ff86f440000
	          end_va = 0x7ff86f457fff
	       monitored = 0
	     entry_point = 0x7ff86f444a20
	     region_type = mapped_file
	            name = "perftrack.dll"
	        filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll")

Region:
	              id = 2154
	        start_va = 0x7ff870b40000
	          end_va = 0x7ff870b5cfff
	       monitored = 0
	     entry_point = 0x7ff870b46190
	     region_type = mapped_file
	            name = "wdi.dll"
	        filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll")

Region:
	              id = 2155
	        start_va = 0x7ff872540000
	          end_va = 0x7ff8727b9fff
	       monitored = 0
	     entry_point = 0x7ff87255a7a0
	     region_type = mapped_file
	            name = "msxml6.dll"
	        filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll")

Region:
	              id = 2156
	        start_va = 0x7ff872a10000
	          end_va = 0x7ff872a1ffff
	       monitored = 0
	     entry_point = 0x7ff872a11690
	     region_type = mapped_file
	            name = "wups.dll"
	        filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll")

Region:
	              id = 2157
	        start_va = 0x7ff873450000
	          end_va = 0x7ff873471fff
	       monitored = 0
	     entry_point = 0x7ff873462540
	     region_type = mapped_file
	            name = "updatepolicy.dll"
	        filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll")

Region:
	              id = 2158
	        start_va = 0x7ff873480000
	          end_va = 0x7ff873554fff
	       monitored = 0
	     entry_point = 0x7ff87349cf80
	     region_type = mapped_file
	            name = "wuapi.dll"
	        filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll")

Region:
	              id = 2159
	        start_va = 0x7ff873560000
	          end_va = 0x7ff873611fff
	       monitored = 0
	     entry_point = 0x7ff87357f750
	     region_type = mapped_file
	            name = "windows.security.authentication.onlineid.dll"
	        filename = "\\Windows\\System32\\Windows.Security.Authentication.OnlineId.dll" (normalized: "c:\\windows\\system32\\windows.security.authentication.onlineid.dll")

Region:
	              id = 2160
	        start_va = 0x7ff873620000
	          end_va = 0x7ff8736b3fff
	       monitored = 0
	     entry_point = 0x7ff873659210
	     region_type = mapped_file
	            name = "staterepository.core.dll"
	        filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll")

Region:
	              id = 2161
	        start_va = 0x7ff8736c0000
	          end_va = 0x7ff873962fff
	       monitored = 0
	     entry_point = 0x7ff8736e6190
	     region_type = mapped_file
	            name = "windows.staterepository.dll"
	        filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll")

Region:
	              id = 2162
	        start_va = 0x7ff873970000
	          end_va = 0x7ff873985fff
	       monitored = 0
	     entry_point = 0x7ff87397b550
	     region_type = mapped_file
	            name = "clipc.dll"
	        filename = "\\Windows\\System32\\Clipc.dll" (normalized: "c:\\windows\\system32\\clipc.dll")

Region:
	              id = 2163
	        start_va = 0x7ff873990000
	          end_va = 0x7ff873accfff
	       monitored = 0
	     entry_point = 0x7ff8739aa6a0
	     region_type = mapped_file
	            name = "licensemanager.dll"
	        filename = "\\Windows\\System32\\LicenseManager.dll" (normalized: "c:\\windows\\system32\\licensemanager.dll")

Region:
	              id = 2164
	        start_va = 0x7ff873ad0000
	          end_va = 0x7ff873adafff
	       monitored = 0
	     entry_point = 0x7ff873ad1a20
	     region_type = mapped_file
	            name = "licensemanagersvc.dll"
	        filename = "\\Windows\\System32\\LicenseManagerSvc.dll" (normalized: "c:\\windows\\system32\\licensemanagersvc.dll")

Region:
	              id = 2165
	        start_va = 0x7ff874830000
	          end_va = 0x7ff874839fff
	       monitored = 0
	     entry_point = 0x7ff8748314c0
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 2166
	        start_va = 0x7ff874840000
	          end_va = 0x7ff87485dfff
	       monitored = 0
	     entry_point = 0x7ff874841690
	     region_type = mapped_file
	            name = "bluetoothapis.dll"
	        filename = "\\Windows\\System32\\BluetoothApis.dll" (normalized: "c:\\windows\\system32\\bluetoothapis.dll")

Region:
	              id = 2167
	        start_va = 0x7ff874860000
	          end_va = 0x7ff874878fff
	       monitored = 0
	     entry_point = 0x7ff874862180
	     region_type = mapped_file
	            name = "bthradiomedia.dll"
	        filename = "\\Windows\\System32\\BthRadioMedia.dll" (normalized: "c:\\windows\\system32\\bthradiomedia.dll")

Region:
	              id = 2168
	        start_va = 0x7ff874880000
	          end_va = 0x7ff874893fff
	       monitored = 0
	     entry_point = 0x7ff874881a50
	     region_type = mapped_file
	            name = "wlanradiomanager.dll"
	        filename = "\\Windows\\System32\\WlanRadioManager.dll" (normalized: "c:\\windows\\system32\\wlanradiomanager.dll")

Region:
	              id = 2169
	        start_va = 0x7ff874a90000
	          end_va = 0x7ff874a9dfff
	       monitored = 0
	     entry_point = 0x7ff874a91460
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 2170
	        start_va = 0x7ff874b70000
	          end_va = 0x7ff874bfafff
	       monitored = 0
	     entry_point = 0x7ff874b8d2a0
	     region_type = mapped_file
	            name = "netprofmsvc.dll"
	        filename = "\\Windows\\System32\\netprofmsvc.dll" (normalized: "c:\\windows\\system32\\netprofmsvc.dll")

Region:
	              id = 2171
	        start_va = 0x7ff8750d0000
	          end_va = 0x7ff8750dafff
	       monitored = 0
	     entry_point = 0x7ff8750d1d30
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 2172
	        start_va = 0x7ff875230000
	          end_va = 0x7ff875245fff
	       monitored = 0
	     entry_point = 0x7ff875231b60
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 2173
	        start_va = 0x7ff875250000
	          end_va = 0x7ff875269fff
	       monitored = 0
	     entry_point = 0x7ff875252430
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 2174
	        start_va = 0x7ff875270000
	          end_va = 0x7ff875285fff
	       monitored = 0
	     entry_point = 0x7ff8752719f0
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 2175
	        start_va = 0x7ff875480000
	          end_va = 0x7ff8754b7fff
	       monitored = 0
	     entry_point = 0x7ff875498cc0
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 2176
	        start_va = 0x7ff875e90000
	          end_va = 0x7ff875e9cfff
	       monitored = 0
	     entry_point = 0x7ff875e92650
	     region_type = mapped_file
	            name = "nsisvc.dll"
	        filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll")

Region:
	              id = 2177
	        start_va = 0x7ff8764e0000
	          end_va = 0x7ff876861fff
	       monitored = 0
	     entry_point = 0x7ff876531220
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 2178
	        start_va = 0x7ff876870000
	          end_va = 0x7ff8769a5fff
	       monitored = 0
	     entry_point = 0x7ff87689f350
	     region_type = mapped_file
	            name = "wintypes.dll"
	        filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll")

Region:
	              id = 2179
	        start_va = 0x7ff877eb0000
	          end_va = 0x7ff877ed8fff
	       monitored = 0
	     entry_point = 0x7ff877ec24d0
	     region_type = mapped_file
	            name = "fontprovider.dll"
	        filename = "\\Windows\\System32\\FontProvider.dll" (normalized: "c:\\windows\\system32\\fontprovider.dll")

Region:
	              id = 2180
	        start_va = 0x7ff877ee0000
	          end_va = 0x7ff878081fff
	       monitored = 0
	     entry_point = 0x7ff877f2c2d0
	     region_type = mapped_file
	            name = "fntcache.dll"
	        filename = "\\Windows\\System32\\FntCache.dll" (normalized: "c:\\windows\\system32\\fntcache.dll")

Region:
	              id = 2181
	        start_va = 0x7ff878580000
	          end_va = 0x7ff8785f9fff
	       monitored = 0
	     entry_point = 0x7ff8785a7630
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 2182
	        start_va = 0x7ff8786b0000
	          end_va = 0x7ff8786c7fff
	       monitored = 0
	     entry_point = 0x7ff8786b5910
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 2183
	        start_va = 0x7ff878820000
	          end_va = 0x7ff87882bfff
	       monitored = 0
	     entry_point = 0x7ff8788214d0
	     region_type = mapped_file
	            name = "locationframeworkps.dll"
	        filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll")

Region:
	              id = 2184
	        start_va = 0x7ff878b20000
	          end_va = 0x7ff878be7fff
	       monitored = 0
	     entry_point = 0x7ff878b613f0
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 2185
	        start_va = 0x7ff878bf0000
	          end_va = 0x7ff878c50fff
	       monitored = 0
	     entry_point = 0x7ff878bf4b50
	     region_type = mapped_file
	            name = "wlanapi.dll"
	        filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll")

Region:
	              id = 2186
	        start_va = 0x7ff878df0000
	          end_va = 0x7ff878e39fff
	       monitored = 0
	     entry_point = 0x7ff878dfac30
	     region_type = mapped_file
	            name = "deviceaccess.dll"
	        filename = "\\Windows\\System32\\deviceaccess.dll" (normalized: "c:\\windows\\system32\\deviceaccess.dll")

Region:
	              id = 2187
	        start_va = 0x7ff878e40000
	          end_va = 0x7ff878e72fff
	       monitored = 0
	     entry_point = 0x7ff878e4d5a0
	     region_type = mapped_file
	            name = "biwinrt.dll"
	        filename = "\\Windows\\System32\\biwinrt.dll" (normalized: "c:\\windows\\system32\\biwinrt.dll")

Region:
	              id = 2188
	        start_va = 0x7ff878e80000
	          end_va = 0x7ff878f11fff
	       monitored = 0
	     entry_point = 0x7ff878eca780
	     region_type = mapped_file
	            name = "msvcp110_win.dll"
	        filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll")

Region:
	              id = 2189
	        start_va = 0x7ff878f20000
	          end_va = 0x7ff878f98fff
	       monitored = 0
	     entry_point = 0x7ff878f37800
	     region_type = mapped_file
	            name = "geolocation.dll"
	        filename = "\\Windows\\System32\\Geolocation.dll" (normalized: "c:\\windows\\system32\\geolocation.dll")

Region:
	              id = 2190
	        start_va = 0x7ff878ff0000
	          end_va = 0x7ff879025fff
	       monitored = 0
	     entry_point = 0x7ff879000070
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 2191
	        start_va = 0x7ff879c90000
	          end_va = 0x7ff87a122fff
	       monitored = 0
	     entry_point = 0x7ff879c9f760
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 2192
	        start_va = 0x7ff87ae40000
	          end_va = 0x7ff87ae6bfff
	       monitored = 0
	     entry_point = 0x7ff87ae41d20
	     region_type = mapped_file
	            name = "authbroker.dll"
	        filename = "\\Windows\\System32\\AuthBroker.dll" (normalized: "c:\\windows\\system32\\authbroker.dll")

Region:
	              id = 2193
	        start_va = 0x7ff87afe0000
	          end_va = 0x7ff87b006fff
	       monitored = 0
	     entry_point = 0x7ff87afe7940
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 2194
	        start_va = 0x7ff87b030000
	          end_va = 0x7ff87b0d9fff
	       monitored = 0
	     entry_point = 0x7ff87b057910
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 2195
	        start_va = 0x7ff87b0e0000
	          end_va = 0x7ff87b1dffff
	       monitored = 0
	     entry_point = 0x7ff87b120f80
	     region_type = mapped_file
	            name = "twinapi.appcore.dll"
	        filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll")

Region:
	              id = 2196
	        start_va = 0x7ff87b5c0000
	          end_va = 0x7ff87b5e3fff
	       monitored = 0
	     entry_point = 0x7ff87b5c3260
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 2197
	        start_va = 0x7ff87b760000
	          end_va = 0x7ff87b853fff
	       monitored = 0
	     entry_point = 0x7ff87b76a960
	     region_type = mapped_file
	            name = "ucrtbase.dll"
	        filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")

Region:
	              id = 2198
	        start_va = 0x7ff87b9d0000
	          end_va = 0x7ff87b9dbfff
	       monitored = 0
	     entry_point = 0x7ff87b9d27e0
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 2199
	        start_va = 0x7ff87bbd0000
	          end_va = 0x7ff87bc03fff
	       monitored = 0
	     entry_point = 0x7ff87bbeae70
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2200
	        start_va = 0x7ff87bc10000
	          end_va = 0x7ff87bc19fff
	       monitored = 0
	     entry_point = 0x7ff87bc11830
	     region_type = mapped_file
	            name = "dpapi.dll"
	        filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll")

Region:
	              id = 2201
	        start_va = 0x7ff87bd20000
	          end_va = 0x7ff87bd3efff
	       monitored = 0
	     entry_point = 0x7ff87bd25d30
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 2202
	        start_va = 0x7ff87be90000
	          end_va = 0x7ff87beebfff
	       monitored = 0
	     entry_point = 0x7ff87bea6f70
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 2203
	        start_va = 0x7ff87bf40000
	          end_va = 0x7ff87bf56fff
	       monitored = 0
	     entry_point = 0x7ff87bf479d0
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2204
	        start_va = 0x7ff87c060000
	          end_va = 0x7ff87c06afff
	       monitored = 0
	     entry_point = 0x7ff87c0619a0
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2205
	        start_va = 0x7ff87c450000
	          end_va = 0x7ff87c478fff
	       monitored = 0
	     entry_point = 0x7ff87c464530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 2206
	        start_va = 0x7ff87c480000
	          end_va = 0x7ff87c518fff
	       monitored = 0
	     entry_point = 0x7ff87c4af4e0
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 2207
	        start_va = 0x7ff87c5c0000
	          end_va = 0x7ff87c5cffff
	       monitored = 0
	     entry_point = 0x7ff87c5c56e0
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2208
	        start_va = 0x7ff87c5d0000
	          end_va = 0x7ff87c5e3fff
	       monitored = 0
	     entry_point = 0x7ff87c5d52e0
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 2209
	        start_va = 0x7ff87c5f0000
	          end_va = 0x7ff87c63afff
	       monitored = 0
	     entry_point = 0x7ff87c5f35f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 2210
	        start_va = 0x7ff87c640000
	          end_va = 0x7ff87c64efff
	       monitored = 0
	     entry_point = 0x7ff87c643210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 2211
	        start_va = 0x7ff87c650000
	          end_va = 0x7ff87c704fff
	       monitored = 0
	     entry_point = 0x7ff87c6922e0
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll")

Region:
	              id = 2212
	        start_va = 0x7ff87c710000
	          end_va = 0x7ff87c752fff
	       monitored = 0
	     entry_point = 0x7ff87c724b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2213
	        start_va = 0x7ff87c760000
	          end_va = 0x7ff87cda3fff
	       monitored = 0
	     entry_point = 0x7ff87c9264b0
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll")

Region:
	              id = 2214
	        start_va = 0x7ff87ce40000
	          end_va = 0x7ff87d027fff
	       monitored = 0
	     entry_point = 0x7ff87ce6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2215
	        start_va = 0x7ff87d030000
	          end_va = 0x7ff87d099fff
	       monitored = 0
	     entry_point = 0x7ff87d066d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 2216
	        start_va = 0x7ff87d170000
	          end_va = 0x7ff87d336fff
	       monitored = 0
	     entry_point = 0x7ff87d1cdb80
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2217
	        start_va = 0x7ff87d340000
	          end_va = 0x7ff87d394fff
	       monitored = 0
	     entry_point = 0x7ff87d357970
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 2218
	        start_va = 0x7ff87d3a0000
	          end_va = 0x7ff87d4e2fff
	       monitored = 0
	     entry_point = 0x7ff87d3c8210
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2219
	        start_va = 0x7ff87ed60000
	          end_va = 0x7ff87eeb5fff
	       monitored = 0
	     entry_point = 0x7ff87ed6a8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2220
	        start_va = 0x7ff87eed0000
	          end_va = 0x7ff87ef3afff
	       monitored = 0
	     entry_point = 0x7ff87eee90c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2221
	        start_va = 0x7ff87efa0000
	          end_va = 0x7ff87efa7fff
	       monitored = 0
	     entry_point = 0x7ff87efa1ea0
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2222
	        start_va = 0x7ff87f3e0000
	          end_va = 0x7ff87f565fff
	       monitored = 0
	     entry_point = 0x7ff87f42ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2223
	        start_va = 0x7ff87f640000
	          end_va = 0x7ff87f6ecfff
	       monitored = 0
	     entry_point = 0x7ff87f6581a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2224
	        start_va = 0x7ff87f6f0000
	          end_va = 0x7ff87f96cfff
	       monitored = 0
	     entry_point = 0x7ff87f7c4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 2225
	        start_va = 0x7ff87f970000
	          end_va = 0x7ff87f9cafff
	       monitored = 0
	     entry_point = 0x7ff87f9838b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2226
	        start_va = 0x7ff87f9d0000
	          end_va = 0x7ff87fa76fff
	       monitored = 0
	     entry_point = 0x7ff87f9db4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2227
	        start_va = 0x7ff87fa80000
	          end_va = 0x7ff87fb40fff
	       monitored = 0
	     entry_point = 0x7ff87faa0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2228
	        start_va = 0x7ff87fb50000
	          end_va = 0x7ff87fba1fff
	       monitored = 0
	     entry_point = 0x7ff87fb5f530
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2229
	        start_va = 0x7ff87fd30000
	          end_va = 0x7ff87fdd6fff
	       monitored = 0
	     entry_point = 0x7ff87fd458d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2230
	        start_va = 0x7ff87fde0000
	          end_va = 0x7ff87fe7cfff
	       monitored = 0
	     entry_point = 0x7ff87fde78a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2231
	        start_va = 0x7ff87fe80000
	          end_va = 0x7ff87ff9bfff
	       monitored = 0
	     entry_point = 0x7ff87fec02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2232
	        start_va = 0x7ff87ffa0000
	          end_va = 0x7ff880160fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")


Thread:
	id = 159
	os_tid = 0x354


Thread:
	id = 160
	os_tid = 0x398


Thread:
	id = 161
	os_tid = 0x11d8


Thread:
	id = 162
	os_tid = 0xd48


Thread:
	id = 163
	os_tid = 0x920


Thread:
	id = 164
	os_tid = 0x418


Thread:
	id = 165
	os_tid = 0x7b0


Thread:
	id = 166
	os_tid = 0x734


Thread:
	id = 167
	os_tid = 0x644


Thread:
	id = 168
	os_tid = 0x640


Thread:
	id = 169
	os_tid = 0x624


Thread:
	id = 170
	os_tid = 0x594


Thread:
	id = 171
	os_tid = 0x578


Thread:
	id = 172
	os_tid = 0x530


Thread:
	id = 173
	os_tid = 0x52c


Thread:
	id = 174
	os_tid = 0x528


Thread:
	id = 175
	os_tid = 0x51c


Thread:
	id = 176
	os_tid = 0x518


Thread:
	id = 177
	os_tid = 0x508


Thread:
	id = 178
	os_tid = 0x308


Thread:
	id = 179
	os_tid = 0x2ec


Thread:
	id = 180
	os_tid = 0x2cc


Thread:
	id = 181
	os_tid = 0x268


Thread:
	id = 182
	os_tid = 0x3e4


Thread:
	id = 183
	os_tid = 0x3e0


Thread:
	id = 184
	os_tid = 0x3dc


Thread:
	id = 185
	os_tid = 0x3d0