# Flog Txt Version 1
# Analyzer Version: 4.5.0
# Analyzer Build Date: Apr 22 2022 21:04:16
# Log Creation Date: 04.05.2022 19:58:24.744

Process:
	id = "1"
	image_name = "cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"
	filename = "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"
	page_root = "0x6d2a9000"
	os_pid = "0x594"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x78c"
	cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe\" "
	cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\"
	os_username = "XC64ZB\\RDhJ0CNFevzX"
	bitness = "32"
	os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fe14" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 121
	        start_va = 0x10000
	          end_va = 0x2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 122
	        start_va = 0x30000
	          end_va = 0x31fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 123
	        start_va = 0x40000
	          end_va = 0x54fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 124
	        start_va = 0x60000
	          end_va = 0x9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 125
	        start_va = 0xa0000
	          end_va = 0x19ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 126
	        start_va = 0x1a0000
	          end_va = 0x1a3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 127
	        start_va = 0x1b0000
	          end_va = 0x1b1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 128
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 129
	        start_va = 0xa00000
	          end_va = 0xaa5fff
	       monitored = 1
	     entry_point = 0xa8e000
	     region_type = mapped_file
	            name = "cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"
	        filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe")

Region:
	              id = 130
	        start_va = 0x77830000
	          end_va = 0x779aafff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 131
	        start_va = 0x7ffb0000
	          end_va = 0x7ffd2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007ffb0000"
	        filename = ""

Region:
	              id = 132
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 133
	        start_va = 0x7fff0000
	          end_va = 0x7ffdab58ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 134
	        start_va = 0x7ffdab590000
	          end_va = 0x7ffdab750fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 135
	        start_va = 0x7ffdab751000
	          end_va = 0x7ffffffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffdab751000"
	        filename = ""

Region:
	              id = 274
	        start_va = 0x460000
	          end_va = 0x46ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000460000"
	        filename = ""

Region:
	              id = 275
	        start_va = 0x639e0000
	          end_va = 0x63a2ffff
	       monitored = 0
	     entry_point = 0x639f8180
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 276
	        start_va = 0x63a40000
	          end_va = 0x63ab9fff
	       monitored = 0
	     entry_point = 0x63a53290
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 277
	        start_va = 0x74580000
	          end_va = 0x7465ffff
	       monitored = 0
	     entry_point = 0x74593980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 278
	        start_va = 0x63a30000
	          end_va = 0x63a37fff
	       monitored = 0
	     entry_point = 0x63a317c0
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 279
	        start_va = 0x470000
	          end_va = 0x71ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000470000"
	        filename = ""

Region:
	              id = 280
	        start_va = 0x74580000
	          end_va = 0x7465ffff
	       monitored = 0
	     entry_point = 0x74593980
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 281
	        start_va = 0x77420000
	          end_va = 0x7759dfff
	       monitored = 0
	     entry_point = 0x774d1b90
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 282
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 283
	        start_va = 0x7feb0000
	          end_va = 0x7ffaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007feb0000"
	        filename = ""

Region:
	              id = 284
	        start_va = 0x470000
	          end_va = 0x52dfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 285
	        start_va = 0x620000
	          end_va = 0x71ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000620000"
	        filename = ""

Region:
	              id = 286
	        start_va = 0x744b0000
	          end_va = 0x74541fff
	       monitored = 0
	     entry_point = 0x744f0380
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll")

Region:
	              id = 287
	        start_va = 0x7fb00000
	          end_va = 0x7fea0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sysmain.sdb"
	        filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb")

Region:
	              id = 288
	        start_va = 0x20000
	          end_va = 0x23fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 289
	        start_va = 0x30000
	          end_va = 0x30fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 290
	        start_va = 0x75640000
	          end_va = 0x75786fff
	       monitored = 0
	     entry_point = 0x75651cf0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 291
	        start_va = 0x771b0000
	          end_va = 0x772fefff
	       monitored = 0
	     entry_point = 0x77266820
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 292
	        start_va = 0x1c0000
	          end_va = 0x1fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 293
	        start_va = 0x720000
	          end_va = 0x81ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000720000"
	        filename = ""

Region:
	              id = 294
	        start_va = 0x74810000
	          end_va = 0x7488afff
	       monitored = 0
	     entry_point = 0x7482e970
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 295
	        start_va = 0x74db0000
	          end_va = 0x74e6dfff
	       monitored = 0
	     entry_point = 0x74de5630
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 296
	        start_va = 0x757e0000
	          end_va = 0x75823fff
	       monitored = 0
	     entry_point = 0x757f9d80
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 297
	        start_va = 0x759b0000
	          end_va = 0x75a5cfff
	       monitored = 0
	     entry_point = 0x759c4f00
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 298
	        start_va = 0x74560000
	          end_va = 0x7457dfff
	       monitored = 0
	     entry_point = 0x7456b640
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 299
	        start_va = 0x74550000
	          end_va = 0x74559fff
	       monitored = 0
	     entry_point = 0x74552a00
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 300
	        start_va = 0x777d0000
	          end_va = 0x77827fff
	       monitored = 0
	     entry_point = 0x778125c0
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 301
	        start_va = 0x75db0000
	          end_va = 0x771aefff
	       monitored = 0
	     entry_point = 0x75f6b990
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 302
	        start_va = 0x77640000
	          end_va = 0x77676fff
	       monitored = 0
	     entry_point = 0x77643b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 303
	        start_va = 0x74ed0000
	          end_va = 0x753c8fff
	       monitored = 0
	     entry_point = 0x750d7610
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll")

Region:
	              id = 304
	        start_va = 0x75bf0000
	          end_va = 0x75dacfff
	       monitored = 0
	     entry_point = 0x75cd2a10
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll")

Region:
	              id = 305
	        start_va = 0x77680000
	          end_va = 0x776c4fff
	       monitored = 0
	     entry_point = 0x7769de90
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 306
	        start_va = 0x77730000
	          end_va = 0x7773bfff
	       monitored = 0
	     entry_point = 0x77733930
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll")

Region:
	              id = 307
	        start_va = 0x77390000
	          end_va = 0x7741cfff
	       monitored = 0
	     entry_point = 0x773d9b90
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll")

Region:
	              id = 308
	        start_va = 0x74e70000
	          end_va = 0x74eb3fff
	       monitored = 0
	     entry_point = 0x74e77410
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll")

Region:
	              id = 309
	        start_va = 0x77320000
	          end_va = 0x7732efff
	       monitored = 0
	     entry_point = 0x77322e40
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 310
	        start_va = 0x6d350000
	          end_va = 0x6d3a8fff
	       monitored = 1
	     entry_point = 0x6d360780
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 311
	        start_va = 0x6d240000
	          end_va = 0x6d2d1fff
	       monitored = 0
	     entry_point = 0x6d24dd60
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll")

Region:
	              id = 312
	        start_va = 0x400000
	          end_va = 0x43ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 313
	        start_va = 0x820000
	          end_va = 0x91ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000820000"
	        filename = ""

Region:
	              id = 314
	        start_va = 0xab0000
	          end_va = 0xc37fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ab0000"
	        filename = ""

Region:
	              id = 315
	        start_va = 0x530000
	          end_va = 0x559fff
	       monitored = 0
	     entry_point = 0x535680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 316
	        start_va = 0x77740000
	          end_va = 0x7776afff
	       monitored = 0
	     entry_point = 0x77745680
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 317
	        start_va = 0x440000
	          end_va = 0x440fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000440000"
	        filename = ""

Region:
	              id = 318
	        start_va = 0x450000
	          end_va = 0x450fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000450000"
	        filename = ""

Region:
	              id = 319
	        start_va = 0xc40000
	          end_va = 0xdc0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c40000"
	        filename = ""

Region:
	              id = 320
	        start_va = 0xdd0000
	          end_va = 0x21cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000dd0000"
	        filename = ""

Region:
	              id = 321
	        start_va = 0x21d0000
	          end_va = 0x237ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021d0000"
	        filename = ""

Region:
	              id = 322
	        start_va = 0x530000
	          end_va = 0x55ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000530000"
	        filename = ""

Region:
	              id = 323
	        start_va = 0x21d0000
	          end_va = 0x233ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021d0000"
	        filename = ""

Region:
	              id = 324
	        start_va = 0x2370000
	          end_va = 0x237ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002370000"
	        filename = ""

Region:
	              id = 325
	        start_va = 0x560000
	          end_va = 0x5a2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000560000"
	        filename = ""

Region:
	              id = 326
	        start_va = 0x74800000
	          end_va = 0x74805fff
	       monitored = 0
	     entry_point = 0x74801460
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")

Region:
	              id = 327
	        start_va = 0x5b0000
	          end_va = 0x606fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005b0000"
	        filename = ""

Region:
	              id = 328
	        start_va = 0x530000
	          end_va = 0x533fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000530000"
	        filename = ""

Region:
	              id = 329
	        start_va = 0x550000
	          end_va = 0x55ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000550000"
	        filename = ""

Region:
	              id = 330
	        start_va = 0x540000
	          end_va = 0x540fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000540000"
	        filename = ""

Region:
	              id = 331
	        start_va = 0x5b0000
	          end_va = 0x5b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005b0000"
	        filename = ""

Region:
	              id = 332
	        start_va = 0x920000
	          end_va = 0x9e2fff
	       monitored = 1
	     entry_point = 0x9ae000
	     region_type = mapped_file
	            name = "cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"
	        filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe")

Region:
	              id = 333
	        start_va = 0x5c0000
	          end_va = 0x5c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005c0000"
	        filename = ""

Region:
	              id = 334
	        start_va = 0x2380000
	          end_va = 0x26b6fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 335
	        start_va = 0x6d1c0000
	          end_va = 0x6d238fff
	       monitored = 1
	     entry_point = 0x6d1cf82a
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 336
	        start_va = 0x6d340000
	          end_va = 0x6d347fff
	       monitored = 0
	     entry_point = 0x6d3417b0
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 337
	        start_va = 0x6b290000
	          end_va = 0x6b940fff
	       monitored = 1
	     entry_point = 0x6b2a5d20
	     region_type = mapped_file
	            name = "clr.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")

Region:
	              id = 338
	        start_va = 0x6d0c0000
	          end_va = 0x6d1b4fff
	       monitored = 0
	     entry_point = 0x6d114160
	     region_type = mapped_file
	            name = "msvcr120_clr0400.dll"
	        filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll")

Region:
	              id = 339
	        start_va = 0x5d0000
	          end_va = 0x5d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005d0000"
	        filename = ""

Region:
	              id = 340
	        start_va = 0x5e0000
	          end_va = 0x5effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005e0000"
	        filename = ""

Region:
	              id = 341
	        start_va = 0x5f0000
	          end_va = 0x5fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005f0000"
	        filename = ""

Region:
	              id = 342
	        start_va = 0x600000
	          end_va = 0x60ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 343
	        start_va = 0x610000
	          end_va = 0x61ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000610000"
	        filename = ""

Region:
	              id = 344
	        start_va = 0x920000
	          end_va = 0x92ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000920000"
	        filename = ""

Region:
	              id = 345
	        start_va = 0x930000
	          end_va = 0x93ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000930000"
	        filename = ""

Region:
	              id = 346
	        start_va = 0x940000
	          end_va = 0x940fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000940000"
	        filename = ""

Region:
	              id = 347
	        start_va = 0x950000
	          end_va = 0x950fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000950000"
	        filename = ""

Region:
	              id = 348
	        start_va = 0x26c0000
	          end_va = 0x28affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000026c0000"
	        filename = ""

Region:
	              id = 349
	        start_va = 0x960000
	          end_va = 0x97ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000960000"
	        filename = ""

Region:
	              id = 350
	        start_va = 0x980000
	          end_va = 0x9bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000980000"
	        filename = ""

Region:
	              id = 351
	        start_va = 0x21d0000
	          end_va = 0x22cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021d0000"
	        filename = ""

Region:
	              id = 352
	        start_va = 0x2330000
	          end_va = 0x233ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002330000"
	        filename = ""

Region:
	              id = 353
	        start_va = 0x960000
	          end_va = 0x96ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000960000"
	        filename = ""

Region:
	              id = 354
	        start_va = 0x970000
	          end_va = 0x97ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000970000"
	        filename = ""

Region:
	              id = 355
	        start_va = 0x28b0000
	          end_va = 0x48affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028b0000"
	        filename = ""

Region:
	              id = 356
	        start_va = 0x26c0000
	          end_va = 0x275ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000026c0000"
	        filename = ""

Region:
	              id = 357
	        start_va = 0x28a0000
	          end_va = 0x28affff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028a0000"
	        filename = ""

Region:
	              id = 358
	        start_va = 0x9c0000
	          end_va = 0x9fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009c0000"
	        filename = ""

Region:
	              id = 359
	        start_va = 0x2760000
	          end_va = 0x285ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002760000"
	        filename = ""

Region:
	              id = 360
	        start_va = 0x6a060000
	          end_va = 0x6b287fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll")

Region:
	              id = 361
	        start_va = 0x753d0000
	          end_va = 0x754bafff
	       monitored = 0
	     entry_point = 0x7540d650
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 362
	        start_va = 0x48b0000
	          end_va = 0x4940fff
	       monitored = 0
	     entry_point = 0x48e8cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 363
	        start_va = 0x960000
	          end_va = 0x96ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000960000"
	        filename = ""

Region:
	              id = 364
	        start_va = 0x6bc10000
	          end_va = 0x6c5bbfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\cc4e5d110dd318e8b7d61a9ed184ab74\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\cc4e5d110dd318e8b7d61a9ed184ab74\\system.ni.dll")

Region:
	              id = 365
	        start_va = 0x69940000
	          end_va = 0x6a051fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.core.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\abad45b9cc652ba7e38c4c837234c0ab\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\abad45b9cc652ba7e38c4c837234c0ab\\system.core.ni.dll")

Region:
	              id = 366
	        start_va = 0x22d0000
	          end_va = 0x22dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022d0000"
	        filename = ""

Region:
	              id = 367
	        start_va = 0x6d040000
	          end_va = 0x6d0bdfff
	       monitored = 1
	     entry_point = 0x6d041140
	     region_type = mapped_file
	            name = "clrjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")

Region:
	              id = 368
	        start_va = 0x74660000
	          end_va = 0x746f1fff
	       monitored = 0
	     entry_point = 0x74698cf0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 369
	        start_va = 0x22e0000
	          end_va = 0x22effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022e0000"
	        filename = ""

Region:
	              id = 370
	        start_va = 0x68de0000
	          end_va = 0x6993bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "presentationcore.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\PresentationCore\\453066eba7980c1ec9a76f27291d3285\\PresentationCore.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\presentationcore\\453066eba7980c1ec9a76f27291d3285\\presentationcore.ni.dll")

Region:
	              id = 371
	        start_va = 0x70410000
	          end_va = 0x70422fff
	       monitored = 0
	     entry_point = 0x70419950
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 372
	        start_va = 0x703e0000
	          end_va = 0x7040efff
	       monitored = 0
	     entry_point = 0x703f95e0
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 373
	        start_va = 0x74200000
	          end_va = 0x7421afff
	       monitored = 0
	     entry_point = 0x74209050
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 374
	        start_va = 0x67b60000
	          end_va = 0x68dd7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "presentationframework.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio5ae0f00f#\\0af50700201d066842a881f90e679009\\PresentationFramework.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\presentatio5ae0f00f#\\0af50700201d066842a881f90e679009\\presentationframework.ni.dll")

Region:
	              id = 375
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 376
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 377
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 378
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 379
	        start_va = 0x67790000
	          end_va = 0x67b57fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "windowsbase.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WindowsBase\\d31693d2e7ad7a9d698064f574cd5f06\\WindowsBase.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\windowsbase\\d31693d2e7ad7a9d698064f574cd5f06\\windowsbase.ni.dll")

Region:
	              id = 380
	        start_va = 0x6d4e0000
	          end_va = 0x6d6d0fff
	       monitored = 0
	     entry_point = 0x6d5c3cd0
	     region_type = mapped_file
	            name = "dwrite.dll"
	        filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll")

Region:
	              id = 381
	        start_va = 0x6cea0000
	          end_va = 0x6d03efff
	       monitored = 1
	     entry_point = 0x6cf04792
	     region_type = mapped_file
	            name = "wpfgfx_v0400.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\wpfgfx_v0400.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\wpfgfx_v0400.dll")

Region:
	              id = 382
	        start_va = 0x6cdd0000
	          end_va = 0x6ce90fff
	       monitored = 1
	     entry_point = 0x6cdf5293
	     region_type = mapped_file
	            name = "presentationnative_v0400.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationNative_v0400.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationnative_v0400.dll")

Region:
	              id = 383
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 384
	        start_va = 0x2300000
	          end_va = 0x230ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 385
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 386
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 387
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 388
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 389
	        start_va = 0x2300000
	          end_va = 0x230ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 390
	        start_va = 0x2300000
	          end_va = 0x230ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 391
	        start_va = 0x2300000
	          end_va = 0x230ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 392
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 393
	        start_va = 0x2300000
	          end_va = 0x230ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 394
	        start_va = 0x2310000
	          end_va = 0x231ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002310000"
	        filename = ""

Region:
	              id = 395
	        start_va = 0x2320000
	          end_va = 0x232ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002320000"
	        filename = ""

Region:
	              id = 396
	        start_va = 0x2340000
	          end_va = 0x234ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002340000"
	        filename = ""

Region:
	              id = 397
	        start_va = 0x2350000
	          end_va = 0x235ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002350000"
	        filename = ""

Region:
	              id = 398
	        start_va = 0x2360000
	          end_va = 0x236ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002360000"
	        filename = ""

Region:
	              id = 399
	        start_va = 0x2860000
	          end_va = 0x286ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002860000"
	        filename = ""

Region:
	              id = 400
	        start_va = 0x2870000
	          end_va = 0x287ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002870000"
	        filename = ""

Region:
	              id = 401
	        start_va = 0x2880000
	          end_va = 0x288ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002880000"
	        filename = ""

Region:
	              id = 402
	        start_va = 0x2890000
	          end_va = 0x289ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002890000"
	        filename = ""

Region:
	              id = 403
	        start_va = 0x48b0000
	          end_va = 0x48cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048b0000"
	        filename = ""

Region:
	              id = 404
	        start_va = 0x48d0000
	          end_va = 0x48dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048d0000"
	        filename = ""

Region:
	              id = 405
	        start_va = 0x48e0000
	          end_va = 0x48effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048e0000"
	        filename = ""

Region:
	              id = 406
	        start_va = 0x48f0000
	          end_va = 0x48fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048f0000"
	        filename = ""

Region:
	              id = 407
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 408
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 409
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 410
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 411
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 412
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 413
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 414
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 415
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 416
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 417
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 418
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 419
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 420
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 421
	        start_va = 0x22f0000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022f0000"
	        filename = ""

Region:
	              id = 422
	        start_va = 0x22f0000
	          end_va = 0x22f0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 423
	        start_va = 0x22f0000
	          end_va = 0x22f8fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 424
	        start_va = 0x22f0000
	          end_va = 0x22f0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 425
	        start_va = 0x22f0000
	          end_va = 0x22f8fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 426
	        start_va = 0x22f0000
	          end_va = 0x22f0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 427
	        start_va = 0x22f0000
	          end_va = 0x22f8fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 428
	        start_va = 0x22f0000
	          end_va = 0x22f0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000022f0000"
	        filename = ""

Region:
	              id = 429
	        start_va = 0x74d20000
	          end_va = 0x74da3fff
	       monitored = 0
	     entry_point = 0x74d46220
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 430
	        start_va = 0x48b0000
	          end_va = 0x492ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048b0000"
	        filename = ""

Region:
	              id = 431
	        start_va = 0x2300000
	          end_va = 0x230ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 432
	        start_va = 0x2310000
	          end_va = 0x2310fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002310000"
	        filename = ""

Region:
	              id = 433
	        start_va = 0x2860000
	          end_va = 0x289ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002860000"
	        filename = ""

Region:
	              id = 434
	        start_va = 0x4930000
	          end_va = 0x4a2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004930000"
	        filename = ""

Region:
	              id = 435
	        start_va = 0x48b0000
	          end_va = 0x48effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048b0000"
	        filename = ""

Region:
	              id = 436
	        start_va = 0x4920000
	          end_va = 0x492ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004920000"
	        filename = ""

Region:
	              id = 437
	        start_va = 0x4a30000
	          end_va = 0x4b2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a30000"
	        filename = ""

Region:
	              id = 438
	        start_va = 0x4b30000
	          end_va = 0x4b6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b30000"
	        filename = ""

Region:
	              id = 439
	        start_va = 0x4b70000
	          end_va = 0x4c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b70000"
	        filename = ""

Region:
	              id = 440
	        start_va = 0x2340000
	          end_va = 0x236dfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002340000"
	        filename = ""

Region:
	              id = 441
	        start_va = 0x4c70000
	          end_va = 0x4caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 442
	        start_va = 0x4cb0000
	          end_va = 0x4daffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cb0000"
	        filename = ""

Region:
	              id = 443
	        start_va = 0x4db0000
	          end_va = 0x4deffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004db0000"
	        filename = ""

Region:
	              id = 444
	        start_va = 0x4df0000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004df0000"
	        filename = ""

Region:
	              id = 445
	        start_va = 0x2320000
	          end_va = 0x232ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002320000"
	        filename = ""

Region:
	              id = 446
	        start_va = 0x2320000
	          end_va = 0x232ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002320000"
	        filename = ""

Region:
	              id = 447
	        start_va = 0x2320000
	          end_va = 0x232ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002320000"
	        filename = ""

Region:
	              id = 448
	        start_va = 0x4e30000
	          end_va = 0x5321fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004e30000"
	        filename = ""

Region:
	              id = 449
	        start_va = 0x515c0000
	          end_va = 0x51ba7fff
	       monitored = 1
	     entry_point = 0x51b930d6
	     region_type = mapped_file
	            name = "system.servicemodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.servicemodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.servicemodel.dll")

Region:
	              id = 450
	        start_va = 0x5330000
	          end_va = 0x636ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "staticcache.dat"
	        filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat")

Region:
	              id = 451
	        start_va = 0x6370000
	          end_va = 0x6957fff
	       monitored = 1
	     entry_point = 0x69430d6
	     region_type = mapped_file
	            name = "system.servicemodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.servicemodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.servicemodel.dll")

Region:
	              id = 452
	        start_va = 0x6960000
	          end_va = 0x699ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006960000"
	        filename = ""

Region:
	              id = 453
	        start_va = 0x2320000
	          end_va = 0x232ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002320000"
	        filename = ""

Region:
	              id = 454
	        start_va = 0x48f0000
	          end_va = 0x48fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048f0000"
	        filename = ""

Region:
	              id = 455
	        start_va = 0x70610000
	          end_va = 0x70684fff
	       monitored = 0
	     entry_point = 0x70649a60
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 456
	        start_va = 0x69a0000
	          end_va = 0x69dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000069a0000"
	        filename = ""

Region:
	              id = 457
	        start_va = 0x69e0000
	          end_va = 0x6adffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000069e0000"
	        filename = ""

Region:
	              id = 458
	        start_va = 0x6ae0000
	          end_va = 0x6b8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ae0000"
	        filename = ""

Region:
	              id = 459
	        start_va = 0x4900000
	          end_va = 0x490ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004900000"
	        filename = ""

Region:
	              id = 460
	        start_va = 0x4910000
	          end_va = 0x491ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004910000"
	        filename = ""

Region:
	              id = 461
	        start_va = 0x6b90000
	          end_va = 0x7177fff
	       monitored = 1
	     entry_point = 0x71630d6
	     region_type = mapped_file
	            name = "system.servicemodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.servicemodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.servicemodel.dll")

Region:
	              id = 462
	        start_va = 0x75a70000
	          end_va = 0x75b8efff
	       monitored = 0
	     entry_point = 0x75ab5980
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 463
	        start_va = 0x6ae0000
	          end_va = 0x6ae0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006ae0000"
	        filename = ""

Region:
	              id = 464
	        start_va = 0x6b80000
	          end_va = 0x6b8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b80000"
	        filename = ""

Region:
	              id = 465
	        start_va = 0x6b90000
	          end_va = 0x6c4bfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006b90000"
	        filename = ""

Region:
	              id = 466
	        start_va = 0x6ae0000
	          end_va = 0x6ae3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006ae0000"
	        filename = ""

Region:
	              id = 467
	        start_va = 0x6fef0000
	          end_va = 0x6ff0cfff
	       monitored = 0
	     entry_point = 0x6fef3b10
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 468
	        start_va = 0x4db0000
	          end_va = 0x4db1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004db0000"
	        filename = ""

Region:
	              id = 469
	        start_va = 0x4dc0000
	          end_va = 0x4dc0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004dc0000"
	        filename = ""

Region:
	              id = 470
	        start_va = 0x4dd0000
	          end_va = 0x4dd4fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui")

Region:
	              id = 471
	        start_va = 0x4de0000
	          end_va = 0x4de3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004de0000"
	        filename = ""

Region:
	              id = 472
	        start_va = 0x4df0000
	          end_va = 0x4df0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004df0000"
	        filename = ""

Region:
	              id = 473
	        start_va = 0x4e00000
	          end_va = 0x4e00fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004e00000"
	        filename = ""

Region:
	              id = 474
	        start_va = 0x4e10000
	          end_va = 0x4e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e10000"
	        filename = ""

Region:
	              id = 475
	        start_va = 0x6af0000
	          end_va = 0x6b6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006af0000"
	        filename = ""

Region:
	              id = 476
	        start_va = 0x6c50000
	          end_va = 0x6c73fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006c50000"
	        filename = ""

Region:
	              id = 477
	        start_va = 0x6cdb0000
	          end_va = 0x6cdcdfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "smdiagnostics.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMDiagnostics\\607f34b8be4f2014b99872617699b357\\SMDiagnostics.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\smdiagnostics\\607f34b8be4f2014b99872617699b357\\smdiagnostics.ni.dll")

Region:
	              id = 478
	        start_va = 0x6c80000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 479
	        start_va = 0x6cc0000
	          end_va = 0x6cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 480
	        start_va = 0x4e00000
	          end_va = 0x4e0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e00000"
	        filename = ""

Region:
	              id = 481
	        start_va = 0x4e10000
	          end_va = 0x4e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e10000"
	        filename = ""

Region:
	              id = 482
	        start_va = 0x50ea0000
	          end_va = 0x50fa3fff
	       monitored = 1
	     entry_point = 0x50f9f3aa
	     region_type = mapped_file
	            name = "system.identitymodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.identitymodel.dll")

Region:
	              id = 483
	        start_va = 0x6d00000
	          end_va = 0x6e03fff
	       monitored = 1
	     entry_point = 0x6dff3aa
	     region_type = mapped_file
	            name = "system.identitymodel.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.identitymodel.dll")

Region:
	              id = 484
	        start_va = 0x4e10000
	          end_va = 0x4e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e10000"
	        filename = ""

Region:
	              id = 485
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 486
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 487
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 488
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 489
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 490
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 491
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 492
	        start_va = 0x6b960000
	          end_va = 0x6bc07fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.runtime.serialization.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runteb92aa12#\\43ca3f2fcd379964cef1dc5898cb9248\\System.Runtime.Serialization.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runteb92aa12#\\43ca3f2fcd379964cef1dc5898cb9248\\system.runtime.serialization.ni.dll")

Region:
	              id = 493
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 494
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 495
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 496
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 497
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 498
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 499
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 500
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 501
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 502
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 503
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 504
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 505
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 506
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 507
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 508
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 509
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 510
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 511
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 512
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 513
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 514
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 515
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 516
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 517
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 518
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 519
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 520
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 521
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 522
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 523
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 524
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 525
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 526
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 527
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 528
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 529
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 530
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 531
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 532
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 533
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 534
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 535
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 536
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 537
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 538
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 539
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 540
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 541
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 542
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 543
	        start_va = 0x67070000
	          end_va = 0x67785fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.xml.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\1f87b5140145c221b5201351fffc52d8\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\1f87b5140145c221b5201351fffc52d8\\system.xml.ni.dll")

Region:
	              id = 544
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 545
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 546
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 547
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 548
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 549
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 550
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 551
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 552
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 553
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 554
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 555
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 556
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 557
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 558
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 559
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 560
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 561
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 562
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 563
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 564
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 565
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 566
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 567
	        start_va = 0x6b70000
	          end_va = 0x6b7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b70000"
	        filename = ""

Region:
	              id = 568
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 569
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 570
	        start_va = 0x66fa0000
	          end_va = 0x67062fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.servicemodel.internals.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servd1dec626#\\80366b2f53761589c602827eb7cee9f2\\System.ServiceModel.Internals.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.servd1dec626#\\80366b2f53761589c602827eb7cee9f2\\system.servicemodel.internals.ni.dll")

Region:
	              id = 571
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 572
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 573
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 574
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 575
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 576
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 577
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 578
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 579
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 580
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 581
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 582
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 583
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 584
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 585
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 586
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 587
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 588
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 589
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 590
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 591
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 592
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 593
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 594
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 595
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 596
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 597
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 598
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 599
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 600
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 601
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 602
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 603
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 604
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 605
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 606
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 607
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 608
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 609
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 610
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 611
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 612
	        start_va = 0x66eb0000
	          end_va = 0x66f9efff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.configuration.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\1b51e779650e38bb712f3e535efcf132\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\1b51e779650e38bb712f3e535efcf132\\system.configuration.ni.dll")

Region:
	              id = 613
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 614
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 615
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 616
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 617
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 618
	        start_va = 0x6b70000
	          end_va = 0x6b7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b70000"
	        filename = ""

Region:
	              id = 619
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 620
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 621
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 622
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 623
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 624
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 625
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 626
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 627
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 628
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 629
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 630
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 631
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 632
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 633
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 634
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 635
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 636
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 637
	        start_va = 0x6b70000
	          end_va = 0x6b7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b70000"
	        filename = ""

Region:
	              id = 638
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 639
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 640
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 641
	        start_va = 0x4e20000
	          end_va = 0x4e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e20000"
	        filename = ""

Region:
	              id = 642
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 643
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 644
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 645
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 646
	        start_va = 0x66e00000
	          end_va = 0x66eadfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.transactions.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Transactions\\8a03e2886313defa91cef9f385480f4e\\System.Transactions.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.transactions\\8a03e2886313defa91cef9f385480f4e\\system.transactions.ni.dll")

Region:
	              id = 647
	        start_va = 0x66db0000
	          end_va = 0x66dfafff
	       monitored = 1
	     entry_point = 0x66dcf53e
	     region_type = mapped_file
	            name = "system.transactions.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll")

Region:
	              id = 648
	        start_va = 0x6c60000
	          end_va = 0x6caafff
	       monitored = 1
	     entry_point = 0x6c7f53e
	     region_type = mapped_file
	            name = "system.transactions.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll")

Region:
	              id = 649
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 650
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 651
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 652
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 653
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 654
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 655
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 656
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 657
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 658
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 659
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 660
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 661
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 662
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 663
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 664
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 665
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 666
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 667
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 668
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 669
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 670
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 671
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 672
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 673
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 674
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 675
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 676
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 677
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 678
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 679
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 680
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 681
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 682
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 683
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 684
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 685
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 686
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 687
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 688
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 689
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 690
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 691
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 692
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 693
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 694
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 695
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 696
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 697
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 698
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 699
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 700
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 701
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 702
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 703
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 704
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 705
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 706
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 707
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 708
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 709
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 710
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 711
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 712
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 713
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 714
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 715
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 716
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 717
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 718
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 719
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 720
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 721
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 722
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 723
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 724
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 725
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 726
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 727
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 728
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 729
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 730
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 731
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 732
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 733
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 734
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 735
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 736
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 737
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 738
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 739
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 740
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 741
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 742
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 743
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 744
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 745
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 746
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 747
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 748
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 749
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 750
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 751
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 752
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 753
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 754
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 755
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 756
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 757
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 758
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 759
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 760
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 761
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 762
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 763
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 764
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 765
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 766
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 767
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 768
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 769
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 770
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 771
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 772
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 773
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 774
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 775
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 776
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 777
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 778
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 779
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 780
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 781
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 782
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 783
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 784
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 785
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 786
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 787
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 788
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 789
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 790
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 791
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 792
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 793
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 794
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 795
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 796
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 797
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 798
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 799
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 800
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 801
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 802
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 803
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 804
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 805
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 806
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 807
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 808
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 809
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 810
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 811
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 812
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 813
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 814
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 815
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 816
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 817
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 818
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 819
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 820
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 821
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 822
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 823
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 824
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 825
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 826
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 827
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 828
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 829
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 830
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 831
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 832
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 833
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 834
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 835
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 836
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 837
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 838
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 839
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 840
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 841
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 842
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 843
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 844
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 845
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 846
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 847
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 848
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 849
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 850
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 851
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 852
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 853
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 854
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 855
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 856
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 857
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 858
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 859
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 860
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 861
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 862
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 863
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 864
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 865
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 866
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 867
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 868
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 869
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 870
	        start_va = 0x6c50000
	          end_va = 0x6c5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 871
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 872
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 873
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 874
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 875
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 876
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 877
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 878
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 879
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 880
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 881
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 882
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 883
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 884
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 885
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 886
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 887
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 888
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 889
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 890
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 891
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 892
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 893
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 894
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 895
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 896
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 897
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 898
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 899
	        start_va = 0x6c60000
	          end_va = 0x6c6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c60000"
	        filename = ""

Region:
	              id = 900
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 901
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 902
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 903
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 904
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 905
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 906
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 907
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 908
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 909
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 910
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 911
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 912
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 913
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 914
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 915
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 916
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 917
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 918
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 919
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 920
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 921
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 922
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 923
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 924
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 925
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 926
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 927
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 928
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 929
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 930
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 931
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 932
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 933
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 934
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 935
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 936
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 937
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 938
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 939
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 940
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 941
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 942
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 943
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 944
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 945
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 946
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 947
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 948
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 949
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 950
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 951
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 952
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 953
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 954
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 955
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 956
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 957
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 958
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 959
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 960
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 961
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 962
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 963
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 964
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 965
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 966
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 967
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 968
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 969
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 970
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 971
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 972
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 973
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 974
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 975
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 976
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 977
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 978
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 979
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 980
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 981
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 982
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 983
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 984
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 985
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 986
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 987
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 988
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 989
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 990
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 991
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 992
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 993
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 994
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 995
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 996
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 997
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 998
	        start_va = 0x6c70000
	          end_va = 0x6c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c70000"
	        filename = ""

Region:
	              id = 999
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1000
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1001
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1002
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1003
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1004
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1005
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1006
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1007
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1008
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1009
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1010
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1011
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1012
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1013
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1014
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1015
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1016
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1017
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1018
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1019
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1020
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1021
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1022
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1023
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1024
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1025
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1026
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1027
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1028
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1029
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1030
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1031
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1032
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1033
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1034
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1035
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1036
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1037
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1038
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1039
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1040
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1041
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1042
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1043
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1044
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1045
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1046
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1047
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1048
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1049
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1050
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1051
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1052
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1053
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1054
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1055
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1056
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1057
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1058
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1059
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1060
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1061
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1062
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1063
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1064
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1065
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1066
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1067
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1068
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1069
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1070
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1071
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1072
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1073
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1074
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1075
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1076
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1077
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1078
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1079
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1080
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1081
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1082
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1083
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1084
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1085
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1086
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1087
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1088
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1089
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1090
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1091
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1092
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1093
	        start_va = 0x6c80000
	          end_va = 0x6c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c80000"
	        filename = ""

Region:
	              id = 1094
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1095
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1096
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1097
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1098
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1099
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1100
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1101
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1102
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1103
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1104
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1105
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1106
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1107
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1108
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1109
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1110
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1111
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1112
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1113
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1114
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1115
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1116
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1117
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1118
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1119
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1120
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1121
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1122
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1123
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1124
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1125
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1126
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1127
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1128
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1129
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1130
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1131
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1132
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1133
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1134
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1135
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1136
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1137
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1138
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1139
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1140
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1141
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1142
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1143
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1144
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1145
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1146
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1147
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1148
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1149
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1150
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1151
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1152
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1153
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1154
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1155
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1156
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1157
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1158
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1159
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1160
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1161
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1162
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1163
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1164
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1165
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1166
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1167
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1168
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1169
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1170
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1171
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1172
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1173
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1174
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1175
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1176
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1177
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1178
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1179
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1180
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1181
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1182
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1183
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1184
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1185
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1186
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1187
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1188
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1189
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1190
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1191
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1192
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1193
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1194
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1195
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1196
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1197
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1198
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1199
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1200
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1201
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1202
	        start_va = 0x6c90000
	          end_va = 0x6c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c90000"
	        filename = ""

Region:
	              id = 1203
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1204
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1205
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1206
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1207
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1208
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1209
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1210
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1211
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1212
	        start_va = 0x6ca0000
	          end_va = 0x6caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ca0000"
	        filename = ""

Region:
	              id = 1213
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1214
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1215
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1216
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1217
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1218
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1219
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1220
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1221
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1222
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1223
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1224
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1225
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1226
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1227
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1228
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1229
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1230
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1231
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1232
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1233
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1234
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1235
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1236
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1237
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1238
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1239
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1240
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1241
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1242
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1243
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1244
	        start_va = 0x6cb0000
	          end_va = 0x6cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cb0000"
	        filename = ""

Region:
	              id = 1245
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1246
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1247
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1248
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1249
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1250
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1251
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1252
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1253
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1254
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1255
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1256
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1257
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1258
	        start_va = 0x6cf0000
	          end_va = 0x6cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cf0000"
	        filename = ""

Region:
	              id = 1259
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1260
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1261
	        start_va = 0x6e30000
	          end_va = 0x6e3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e30000"
	        filename = ""

Region:
	              id = 1262
	        start_va = 0x6e40000
	          end_va = 0x6e4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e40000"
	        filename = ""

Region:
	              id = 1263
	        start_va = 0x6e50000
	          end_va = 0x6e5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e50000"
	        filename = ""

Region:
	              id = 1264
	        start_va = 0x6e60000
	          end_va = 0x6e6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e60000"
	        filename = ""

Region:
	              id = 1265
	        start_va = 0x6e70000
	          end_va = 0x6e7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e70000"
	        filename = ""

Region:
	              id = 1266
	        start_va = 0x6e80000
	          end_va = 0x6e8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e80000"
	        filename = ""

Region:
	              id = 1267
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1268
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1269
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1270
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1271
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1272
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1273
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1274
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1275
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1276
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1277
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1278
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1279
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1280
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1281
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1282
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1283
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1284
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1285
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1286
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1287
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1288
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1289
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1290
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1291
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1292
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1293
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1294
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1295
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1296
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1297
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1298
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1299
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1300
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1301
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1302
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1303
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1304
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1305
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1306
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1307
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1308
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1309
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1310
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1311
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1312
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1313
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1314
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1315
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1316
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1317
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1318
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1319
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1320
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1321
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1322
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1323
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1324
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1325
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1326
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1327
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1328
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1329
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1330
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1331
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1332
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1333
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1334
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1335
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1336
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1337
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1338
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1339
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1340
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1341
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1342
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1343
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1344
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1345
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1346
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1347
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1348
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1349
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1350
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1351
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1352
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1353
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1354
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1355
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1356
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1357
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1358
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1359
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1360
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1361
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1362
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1363
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1364
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1365
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1366
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1367
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1368
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1369
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1370
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1371
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1372
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1373
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1374
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1375
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1376
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1377
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1378
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1379
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1380
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1381
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1382
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1383
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1384
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1385
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1386
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1387
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1388
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1389
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1390
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1391
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1392
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1393
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1394
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1395
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1396
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1397
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1398
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1399
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1400
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1401
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1402
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1403
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1404
	        start_va = 0x7fe60000
	          end_va = 0x7feaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fe60000"
	        filename = ""

Region:
	              id = 1405
	        start_va = 0x7fe50000
	          end_va = 0x7fe5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fe50000"
	        filename = ""

Region:
	              id = 1406
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1407
	        start_va = 0x6cc0000
	          end_va = 0x6ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cc0000"
	        filename = ""

Region:
	              id = 1408
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1409
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1410
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1411
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1412
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1413
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1414
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1415
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1416
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1417
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1418
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1419
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1420
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1421
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1422
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1423
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1424
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1425
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1426
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1427
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1428
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1429
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1430
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1431
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1432
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1433
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1434
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1435
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1436
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1437
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1438
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1439
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1440
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1441
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1442
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1443
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1444
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1445
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1446
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1447
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1448
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1449
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1450
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1451
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1452
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1453
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1454
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1455
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1456
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1457
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1458
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1459
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1460
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1461
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1462
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1463
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1464
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1465
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1466
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1467
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1468
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1469
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1470
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1471
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1472
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1473
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1474
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1475
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1476
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1477
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1478
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1479
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1480
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1481
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1482
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1483
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1484
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1485
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1486
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1487
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1488
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1489
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1490
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1491
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1492
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1493
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1494
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1495
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1496
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1497
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1498
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1499
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1500
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1501
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1502
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1503
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1504
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1505
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1506
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1507
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1508
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1509
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1510
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1511
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1512
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1513
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1514
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1515
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1516
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1517
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1518
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1519
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1520
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1521
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1522
	        start_va = 0x6cf0000
	          end_va = 0x6cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cf0000"
	        filename = ""

Region:
	              id = 1523
	        start_va = 0x6cf0000
	          end_va = 0x6cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cf0000"
	        filename = ""

Region:
	              id = 1524
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1525
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1526
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1527
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1528
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1529
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1530
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1531
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1532
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1533
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1534
	        start_va = 0x6cf0000
	          end_va = 0x6cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cf0000"
	        filename = ""

Region:
	              id = 1535
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1536
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1537
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1538
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1539
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1540
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1541
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1542
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1543
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1544
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1545
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1546
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1547
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1548
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1549
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1550
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1551
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1552
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1553
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1554
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1555
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1556
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1557
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1558
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1559
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1560
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1561
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1562
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1563
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1564
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1565
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1566
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1567
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1568
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1569
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1570
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1571
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1572
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1573
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1574
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1575
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1576
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1577
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1578
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1579
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1580
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1581
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1582
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1583
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1584
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1585
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1586
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1587
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1588
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1589
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1590
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1591
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1592
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1593
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1594
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1595
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1596
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1597
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1598
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1599
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1600
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1601
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1602
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1603
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1604
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1605
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1606
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1607
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1608
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1609
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1610
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1611
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1612
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1613
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1614
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1615
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1616
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1617
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1618
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1619
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1620
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1621
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1622
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1623
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1624
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1625
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1626
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1627
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1628
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1629
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1630
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1631
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1632
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1633
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1634
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1635
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1636
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1637
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1638
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1639
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1640
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1641
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1642
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1643
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1644
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1645
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1646
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1647
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1648
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1649
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1650
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1651
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1652
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1653
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1654
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1655
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1656
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1657
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1658
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1659
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1660
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1661
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1662
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1663
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1664
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1665
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1666
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1667
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1668
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1669
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1670
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1671
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1672
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1673
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1674
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1675
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1676
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1677
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1678
	        start_va = 0x6cd0000
	          end_va = 0x6cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006cd0000"
	        filename = ""

Region:
	              id = 1679
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1680
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1681
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1682
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1683
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1684
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1685
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1686
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1687
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1688
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1689
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1690
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1691
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1692
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1693
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1694
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1695
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1696
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1697
	        start_va = 0x75b90000
	          end_va = 0x75beefff
	       monitored = 0
	     entry_point = 0x75b94af0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 1698
	        start_va = 0x72040000
	          end_va = 0x7208efff
	       monitored = 0
	     entry_point = 0x7204d850
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 1699
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1700
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1701
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1702
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1703
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1704
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1705
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1706
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1707
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1708
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1709
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1710
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1711
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1712
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1713
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1714
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1715
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1716
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1717
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1718
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1719
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1720
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1721
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1722
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1723
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1724
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1725
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1726
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1727
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1728
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1729
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1730
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1731
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1732
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1733
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1734
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1735
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1736
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1737
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1738
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1739
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1740
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1741
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1742
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1743
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1744
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1745
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1746
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1747
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1748
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1749
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1750
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1751
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1752
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1753
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1754
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1755
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1756
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1757
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1758
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1759
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1760
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1761
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1762
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1763
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1764
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1765
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1766
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1767
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1768
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1769
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1770
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1771
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1772
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1773
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1774
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1775
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1776
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1777
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1778
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1779
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1780
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1781
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1782
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1783
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1784
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1785
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1786
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1787
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1788
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1789
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1790
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1791
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1792
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1793
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1794
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1795
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1796
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1797
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1798
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1799
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1800
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1801
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1802
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1803
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1804
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1805
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1806
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1807
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1808
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1809
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1810
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1811
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1812
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1813
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1814
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1815
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1816
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1817
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1818
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1819
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1820
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1821
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1822
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1823
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1824
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1825
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1826
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1827
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1828
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1829
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1830
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1831
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1832
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1833
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1834
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1835
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1836
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1837
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1838
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1839
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1840
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1841
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1842
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1843
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1844
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1845
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1846
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1847
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1848
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1849
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1850
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1851
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1852
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1853
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1854
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1855
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1856
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1857
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1858
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1859
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1860
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1861
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1862
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1863
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1864
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1865
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1866
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1867
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1868
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1869
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1870
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1871
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1872
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1873
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1874
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1875
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1876
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1877
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1878
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1879
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1880
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1881
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1882
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1883
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1884
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1885
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1886
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1887
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1888
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1889
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1890
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1891
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1892
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1893
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1894
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1895
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1896
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1897
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1898
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1899
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1900
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1901
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1902
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1903
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1904
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1905
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1906
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1907
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1908
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1909
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1910
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1911
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1912
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1913
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1914
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1915
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1916
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1917
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1918
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1919
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1920
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1921
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1922
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1923
	        start_va = 0x6ce0000
	          end_va = 0x6ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1924
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1925
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1926
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1927
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1928
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1929
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1930
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1931
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1932
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1933
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1934
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1935
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1936
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1937
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1938
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1939
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1940
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1941
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1942
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1943
	        start_va = 0x6e10000
	          end_va = 0x6e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e10000"
	        filename = ""

Region:
	              id = 1944
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1945
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1946
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1947
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1948
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1949
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1950
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1951
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1952
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1953
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1954
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1955
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1956
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1957
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1958
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1959
	        start_va = 0x6e30000
	          end_va = 0x6e3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e30000"
	        filename = ""

Region:
	              id = 1960
	        start_va = 0x6e40000
	          end_va = 0x6e4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e40000"
	        filename = ""

Region:
	              id = 1961
	        start_va = 0x6e50000
	          end_va = 0x6e5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e50000"
	        filename = ""

Region:
	              id = 1962
	        start_va = 0x6e60000
	          end_va = 0x6e6ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e60000"
	        filename = ""

Region:
	              id = 1963
	        start_va = 0x6e70000
	          end_va = 0x6e7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e70000"
	        filename = ""

Region:
	              id = 1964
	        start_va = 0x6e80000
	          end_va = 0x6e8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e80000"
	        filename = ""

Region:
	              id = 1965
	        start_va = 0x6e90000
	          end_va = 0x6e9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e90000"
	        filename = ""

Region:
	              id = 1966
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1967
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1968
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1969
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1970
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1971
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1972
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1973
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1974
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1975
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1976
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1977
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1978
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1979
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1980
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1981
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1982
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1983
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1984
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1985
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1986
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1987
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1988
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1989
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1990
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1991
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1992
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1993
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1994
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1995
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1996
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1997
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1998
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 1999
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2000
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2001
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2002
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2003
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2004
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2005
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2006
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2007
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2008
	        start_va = 0x6e30000
	          end_va = 0x6e3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e30000"
	        filename = ""

Region:
	              id = 2009
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2010
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2011
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2012
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2013
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2014
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2015
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2016
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2017
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2018
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2019
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2020
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2021
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2022
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2023
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2024
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2025
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2026
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2027
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2028
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2029
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2030
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2031
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2032
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2033
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2034
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2035
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2036
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2037
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2038
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2039
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2040
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2041
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2042
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2043
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2044
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2045
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2046
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2047
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2048
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2049
	        start_va = 0x6e20000
	          end_va = 0x6e2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2050
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2051
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2052
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2053
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2054
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2055
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2056
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2057
	        start_va = 0x4c80000
	          end_va = 0x4c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2058
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2059
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2060
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2061
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2062
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2063
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2064
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2065
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2066
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2067
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2068
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2069
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2070
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2071
	        start_va = 0x4c80000
	          end_va = 0x4c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2072
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2073
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2074
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2075
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2076
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2077
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2078
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2079
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2080
	        start_va = 0x4c80000
	          end_va = 0x4c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2081
	        start_va = 0x4c80000
	          end_va = 0x4c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2082
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2083
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2084
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2085
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2086
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2087
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2088
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2089
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2090
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2091
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2092
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2093
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2094
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2095
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2096
	        start_va = 0x4c80000
	          end_va = 0x4c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2097
	        start_va = 0x4c90000
	          end_va = 0x4c9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c90000"
	        filename = ""

Region:
	              id = 2098
	        start_va = 0x4ca0000
	          end_va = 0x4caffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ca0000"
	        filename = ""

Region:
	              id = 2099
	        start_va = 0x4cb0000
	          end_va = 0x4cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cb0000"
	        filename = ""

Region:
	              id = 2100
	        start_va = 0x4cc0000
	          end_va = 0x4ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cc0000"
	        filename = ""

Region:
	              id = 2101
	        start_va = 0x4cd0000
	          end_va = 0x4cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cd0000"
	        filename = ""

Region:
	              id = 2102
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2103
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2104
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2105
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2106
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2107
	        start_va = 0x4c80000
	          end_va = 0x4c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2108
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2109
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2110
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2111
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2112
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2113
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2114
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2115
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2116
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2117
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2118
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2119
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2120
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2121
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2122
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2123
	        start_va = 0x4c80000
	          end_va = 0x4c8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2124
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2125
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2126
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2127
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2128
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2129
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2130
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2131
	        start_va = 0x66c20000
	          end_va = 0x66dacfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.drawing.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\9b645a48c9bcfc95aaadf6a069bb4ebe\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\9b645a48c9bcfc95aaadf6a069bb4ebe\\system.drawing.ni.dll")

Region:
	              id = 2132
	        start_va = 0x65fc0000
	          end_va = 0x66c18fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.windows.forms.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\8cd2187094ba6cade0ca0fab4f932654\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\8cd2187094ba6cade0ca0fab4f932654\\system.windows.forms.ni.dll")

Region:
	              id = 2133
	        start_va = 0x6c600000
	          end_va = 0x6c609fff
	       monitored = 0
	     entry_point = 0x6c603200
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll")

Region:
	              id = 2134
	        start_va = 0x69a0000
	          end_va = 0x6a9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000069a0000"
	        filename = ""

Region:
	              id = 2135
	        start_va = 0x65ea0000
	          end_va = 0x65fbbfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\d2f554a0c84513cd793fdcd77a86dab1\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.management\\d2f554a0c84513cd793fdcd77a86dab1\\system.management.ni.dll")

Region:
	              id = 2136
	        start_va = 0x6d330000
	          end_va = 0x6d339fff
	       monitored = 1
	     entry_point = 0x6d3339f9
	     region_type = mapped_file
	            name = "wminet_utils.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wminet_utils.dll")

Region:
	              id = 2137
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2138
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2139
	        start_va = 0x4c70000
	          end_va = 0x4c7ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2140
	        start_va = 0x6cd90000
	          end_va = 0x6cdabfff
	       monitored = 0
	     entry_point = 0x6cd9aa90
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wmiutils.dll")

Region:
	              id = 2141
	        start_va = 0x65e30000
	          end_va = 0x65e96fff
	       monitored = 0
	     entry_point = 0x65e4b610
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll")

Region:
	              id = 2142
	        start_va = 0x6cd80000
	          end_va = 0x6cd8cfff
	       monitored = 0
	     entry_point = 0x6cd83520
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll")

Region:
	              id = 2665
	        start_va = 0x65e10000
	          end_va = 0x65e20fff
	       monitored = 0
	     entry_point = 0x65e18fa0
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll")

Region:
	              id = 2666
	        start_va = 0x65d50000
	          end_va = 0x65e0efff
	       monitored = 0
	     entry_point = 0x65d81e80
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll")

Region:
	              id = 2667
	        start_va = 0x4c70000
	          end_va = 0x4c73fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 2764
	        start_va = 0x4c80000
	          end_va = 0x4c82fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2765
	        start_va = 0x65bc0000
	          end_va = 0x65d43fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "microsoft.csharp.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.CSharp\\4b4bc9f75377aaea11113089f0188e82\\Microsoft.CSharp.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.csharp\\4b4bc9f75377aaea11113089f0188e82\\microsoft.csharp.ni.dll")

Region:
	              id = 2766
	        start_va = 0x65a50000
	          end_va = 0x65bbafff
	       monitored = 0
	     entry_point = 0x65abe360
	     region_type = mapped_file
	            name = "gdiplus.dll"
	        filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll")

Region:
	              id = 2767
	        start_va = 0x6e20000
	          end_va = 0x6fcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2768
	        start_va = 0x6e20000
	          end_va = 0x6e5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e20000"
	        filename = ""

Region:
	              id = 2769
	        start_va = 0x6e60000
	          end_va = 0x6f5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e60000"
	        filename = ""

Region:
	              id = 2770
	        start_va = 0x6fc0000
	          end_va = 0x6fcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006fc0000"
	        filename = ""

Region:
	              id = 2771
	        start_va = 0x4c80000
	          end_va = 0x4cbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 2772
	        start_va = 0x6fd0000
	          end_va = 0x70cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006fd0000"
	        filename = ""

Region:
	              id = 2773
	        start_va = 0x659f0000
	          end_va = 0x65a4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.dynamic.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dynamic\\f7209dae192c8b5254852d8a975aed4e\\System.Dynamic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.dynamic\\f7209dae192c8b5254852d8a975aed4e\\system.dynamic.ni.dll")

Region:
	              id = 2774
	        start_va = 0x4cc0000
	          end_va = 0x4ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cc0000"
	        filename = ""

Region:
	              id = 2775
	        start_va = 0x4ce0000
	          end_va = 0x4ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ce0000"
	        filename = ""

Region:
	              id = 2776
	        start_va = 0x4cf0000
	          end_va = 0x4cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004cf0000"
	        filename = ""

Region:
	              id = 2777
	        start_va = 0x4d00000
	          end_va = 0x4d0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d00000"
	        filename = ""

Region:
	              id = 2778
	        start_va = 0x4ce0000
	          end_va = 0x4ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ce0000"
	        filename = ""

Region:
	              id = 2779
	        start_va = 0x4ce0000
	          end_va = 0x4cf0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004ce0000"
	        filename = ""

Region:
	              id = 2780
	        start_va = 0x4d10000
	          end_va = 0x4d11fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "iexplore.exe.mui"
	        filename = "\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")

Region:
	              id = 2781
	        start_va = 0x70d0000
	          end_va = 0x7199fff
	       monitored = 0
	     entry_point = 0x70d21f0
	     region_type = mapped_file
	            name = "iexplore.exe"
	        filename = "\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")

Region:
	              id = 2782
	        start_va = 0x4d10000
	          end_va = 0x4d11fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "iexplore.exe.mui"
	        filename = "\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")

Region:
	              id = 2783
	        start_va = 0x70d0000
	          end_va = 0x7199fff
	       monitored = 0
	     entry_point = 0x70d21f0
	     region_type = mapped_file
	            name = "iexplore.exe"
	        filename = "\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")

Region:
	              id = 2784
	        start_va = 0x4d10000
	          end_va = 0x4d14fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll"
	        filename = "\\Windows\\SysWOW64\\winnlsres.dll" (normalized: "c:\\windows\\syswow64\\winnlsres.dll")

Region:
	              id = 2785
	        start_va = 0x4d20000
	          end_va = 0x4d2ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\winnlsres.dll.mui")

Region:
	              id = 2786
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2787
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2788
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d40000"
	        filename = ""

Region:
	              id = 2789
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2790
	        start_va = 0x70d0000
	          end_va = 0x71cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000070d0000"
	        filename = ""

Region:
	              id = 2800
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2801
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2802
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d40000"
	        filename = ""

Region:
	              id = 2803
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2804
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2805
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2806
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2807
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2808
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d40000"
	        filename = ""

Region:
	              id = 2809
	        start_va = 0x4d50000
	          end_va = 0x4d5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d50000"
	        filename = ""

Region:
	              id = 2875
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2876
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2877
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2878
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2879
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2880
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2881
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2882
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2883
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2929
	        start_va = 0x4d30000
	          end_va = 0x4d32fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2930
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2931
	        start_va = 0x4d30000
	          end_va = 0x4d32fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2932
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d30000"
	        filename = ""

Region:
	              id = 2933
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d40000"
	        filename = ""

Region:
	              id = 2934
	        start_va = 0x71d0000
	          end_va = 0x76c1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000071d0000"
	        filename = ""

Region:
	              id = 2935
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d40000"
	        filename = ""

Region:
	              id = 2936
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d40000"
	        filename = ""

Region:
	              id = 2942
	        start_va = 0x76d0000
	          end_va = 0x7bc1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000076d0000"
	        filename = ""

Region:
	              id = 2943
	        start_va = 0x65870000
	          end_va = 0x659e2fff
	       monitored = 0
	     entry_point = 0x6591d220
	     region_type = mapped_file
	            name = "windowscodecs.dll"
	        filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll")

Region:
	              id = 2944
	        start_va = 0x7bd0000
	          end_va = 0x7ccffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007bd0000"
	        filename = ""

Region:
	              id = 2945
	        start_va = 0x7cd0000
	          end_va = 0x7d6efff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007cd0000"
	        filename = ""

Region:
	              id = 2946
	        start_va = 0x4d50000
	          end_va = 0x4d8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d50000"
	        filename = ""

Region:
	              id = 2947
	        start_va = 0x7cd0000
	          end_va = 0x7dcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007cd0000"
	        filename = ""

Region:
	              id = 2951
	        start_va = 0x657b0000
	          end_va = 0x65865fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "system.security.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Security\\4e4cb6e2e651b6d243241e4edd14b3f3\\System.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.security\\4e4cb6e2e651b6d243241e4edd14b3f3\\system.security.ni.dll")

Region:
	              id = 2952
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2953
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2954
	        start_va = 0x4da0000
	          end_va = 0x4daffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004da0000"
	        filename = ""

Region:
	              id = 2955
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2956
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2957
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2958
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2959
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2960
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2961
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2962
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2963
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2964
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2972
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2973
	        start_va = 0x4da0000
	          end_va = 0x4daffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004da0000"
	        filename = ""

Region:
	              id = 2974
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2975
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2976
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2977
	        start_va = 0x4da0000
	          end_va = 0x4daffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004da0000"
	        filename = ""

Region:
	              id = 2978
	        start_va = 0x6aa0000
	          end_va = 0x6aaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006aa0000"
	        filename = ""

Region:
	              id = 2979
	        start_va = 0x6ab0000
	          end_va = 0x6abffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ab0000"
	        filename = ""

Region:
	              id = 2980
	        start_va = 0x6ac0000
	          end_va = 0x6acffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ac0000"
	        filename = ""

Region:
	              id = 2981
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2982
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2983
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2984
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2985
	        start_va = 0x4d90000
	          end_va = 0x4d9ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 3021
	        start_va = 0x1c0000
	          end_va = 0x1cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 3022
	        start_va = 0x1c0000
	          end_va = 0x1cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 3023
	        start_va = 0x1c0000
	          end_va = 0x1cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 3024
	        start_va = 0x1c0000
	          end_va = 0x1cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 3025
	        start_va = 0x1c0000
	          end_va = 0x1cffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""


Thread:
	id = 1
	os_tid = 0xb20

	[0186.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19ff50 | out: lpSystemTimeAsFileTime=0x19ff50*(dwLowDateTime=0xbeb9f991, dwHighDateTime=0x1d85ff1)) 
	[0186.788] GetProcessHeap () returned 0x620000
	[0186.834] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x174
	[0186.834] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x6d7fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0186.834] ReadFile (in: hFile=0x174, lpBuffer=0x63b640, nNumberOfBytesToRead=0x54e93, lpNumberOfBytesRead=0x19ff44, lpOverlapped=0x0 | out: lpBuffer=0x63b640*, lpNumberOfBytesRead=0x19ff44*=0x54e93, lpOverlapped=0x0) returned 1
	[0186.839] CloseHandle (hObject=0x174) returned 1
	[0187.100] GetProcessHeap () returned 0x620000
	[0187.102] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0187.103] GetFileSize (in: hFile=0x174, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc2690
	[0187.103] GetFileInformationByHandle (in: hFile=0x174, lpFileInformation=0x56a66c | out: lpFileInformation=0x56a66c) returned 1
	[0187.103] CloseHandle (hObject=0x174) returned 1
	[0187.138] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0187.178] ReadFile (in: hFile=0x174, lpBuffer=0x5b0000, nNumberOfBytesToRead=0x56200, lpNumberOfBytesRead=0x19ff4c, lpOverlapped=0x0 | out: lpBuffer=0x5b0000*, lpNumberOfBytesRead=0x19ff4c*=0x56200, lpOverlapped=0x0) returned 1
	[0187.187] CloseHandle (hObject=0x174) returned 1
	[0187.237] GetSystemInfo (in: lpSystemInfo=0x19ff08 | out: lpSystemInfo=0x19ff08*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0187.460] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName="ç\x8c¿ã\x82\x82æ\x9c¨ã\x81\x8bã\x82\x89è\x90½ã\x81¡ã\x82\x8b") returned 0x174
	[0187.480] GetCommandLineW () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe\" "
	[0187.481] Sleep (dwMilliseconds=0x0) 
	[0187.521] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178
	[0187.534] CloseHandle (hObject=0x17c) returned 1
	[0187.534] CloseHandle (hObject=0x178) returned 1
	[0187.535] GetProcessHeap () returned 0x620000
	[0187.547] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Obsidium\\{58C1303D-3FA5B8BC-76149B59-B364DB4C}.Extensions" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\obsidium\\{58c1303d-3fa5b8bc-76149b59-b364db4c}.extensions"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.551] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\.obs32\\{58C1303D-3FA5B8BC-76149B59-B364DB4C}.Language" (normalized: "c:\\users\\rdhj0cnfevzx\\.obs32\\{58c1303d-3fa5b8bc-76149b59-b364db4c}.language"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.566] GetProcessHeap () returned 0x620000
	[0187.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v1.0.3705\\clr.dll", nBufferLength=0x104, lpBuffer=0x19f13c, lpFilePart=0x19f138 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll", lpFilePart=0x19f138*="clr.dll") returned 0x34
	[0187.920] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v1.0.3705\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705\\clr.dll"), dwDesiredAccess=0x20000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x10000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v1.0.3705\\mscorwks.dll", nBufferLength=0x104, lpBuffer=0x19f13c, lpFilePart=0x19f138 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll", lpFilePart=0x19f138*="mscorwks.dll") returned 0x39
	[0187.924] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v1.0.3705\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705\\mscorwks.dll"), dwDesiredAccess=0x20000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x10000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v1.1.4322\\clr.dll", nBufferLength=0x104, lpBuffer=0x19f13c, lpFilePart=0x19f138 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll", lpFilePart=0x19f138*="clr.dll") returned 0x34
	[0187.925] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v1.1.4322\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.1.4322\\clr.dll"), dwDesiredAccess=0x20000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x10000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v1.1.4322\\mscorwks.dll", nBufferLength=0x104, lpBuffer=0x19f13c, lpFilePart=0x19f138 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll", lpFilePart=0x19f138*="mscorwks.dll") returned 0x39
	[0187.926] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v1.1.4322\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.1.4322\\mscorwks.dll"), dwDesiredAccess=0x20000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x10000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v2.0.50727\\clr.dll", nBufferLength=0x104, lpBuffer=0x19f13c, lpFilePart=0x19f138 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll", lpFilePart=0x19f138*="clr.dll") returned 0x35
	[0187.926] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v2.0.50727\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\clr.dll"), dwDesiredAccess=0x20000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x10000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v2.0.50727\\mscorwks.dll", nBufferLength=0x104, lpBuffer=0x19f13c, lpFilePart=0x19f138 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll", lpFilePart=0x19f138*="mscorwks.dll") returned 0x3a
	[0187.927] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll"), dwDesiredAccess=0x20000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x10000000, hTemplateFile=0x0) returned 0x1b0
	[0187.928] CloseHandle (hObject=0x1b0) returned 1
	[0187.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v4.0.30319\\clr.dll", nBufferLength=0x104, lpBuffer=0x19f13c, lpFilePart=0x19f138 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll", lpFilePart=0x19f138*="clr.dll") returned 0x35
	[0187.929] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll"), dwDesiredAccess=0x20000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x10000000, hTemplateFile=0x0) returned 0x1b0
	[0187.933] CloseHandle (hObject=0x1b0) returned 1
	[0187.949] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config", nBufferLength=0x104, lpBuffer=0x19f158, lpFilePart=0x19f154 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config", lpFilePart=0x19f154*="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config") returned 0x69
	[0187.949] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.951] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0
	[0187.951] GetFileInformationByHandle (in: hFile=0x1b0, lpFileInformation=0x19f354 | out: lpFileInformation=0x19f354) returned 1
	[0187.959] CloseHandle (hObject=0x1b0) returned 1
	[0187.960] CloseHandle (hObject=0x1b4) returned 1
	[0187.960] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b4
	[0187.960] GetFileInformationByHandle (in: hFile=0x1b4, lpFileInformation=0x19f354 | out: lpFileInformation=0x19f354) returned 1
	[0187.961] CloseHandle (hObject=0x1b4) returned 1
	[0187.961] CloseHandle (hObject=0x1b0) returned 1
	[0187.967] CloseHandle (hObject=0x1b4) returned 1
	[0187.967] CloseHandle (hObject=0x1b0) returned 1
	[0188.325] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll", nBufferLength=0x104, lpBuffer=0x19f674, lpFilePart=0x19f670 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll", lpFilePart=0x19f670*="clr.dll") returned 0x35
	[0188.326] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll"), dwDesiredAccess=0x20000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x10000000, hTemplateFile=0x0) returned 0x1ac
	[0188.326] CloseHandle (hObject=0x1ac) returned 1
	[0191.024] CloseHandle (hObject=0x1bc) returned 1
	[0191.024] CloseHandle (hObject=0x1b8) returned 1
	[0191.031] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config", nBufferLength=0x104, lpBuffer=0x19f4b0, lpFilePart=0x19f4ac | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config", lpFilePart=0x19f4ac*="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config") returned 0x69
	[0191.031] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0191.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x104, lpBuffer=0x19f4d0, lpFilePart=0x19f4cc | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x19f4cc*="machine.config") returned 0x43
	[0191.033] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8
	[0191.050] ReadFile (in: hFile=0x1b8, lpBuffer=0x640270, nNumberOfBytesToRead=0xfff, lpNumberOfBytesRead=0x19f70c, lpOverlapped=0x0 | out: lpBuffer=0x640270*, lpNumberOfBytesRead=0x19f70c*=0xfff, lpOverlapped=0x0) returned 1
	[0191.064] ReadFile (in: hFile=0x1b8, lpBuffer=0x63e268, nNumberOfBytesToRead=0x17f7, lpNumberOfBytesRead=0x19f6f4, lpOverlapped=0x0 | out: lpBuffer=0x63e268*, lpNumberOfBytesRead=0x19f6f4*=0x17f7, lpOverlapped=0x0) returned 1
	[0191.067] ReadFile (in: hFile=0x1b8, lpBuffer=0x63e268, nNumberOfBytesToRead=0x1001, lpNumberOfBytesRead=0x19f704, lpOverlapped=0x0 | out: lpBuffer=0x63e268*, lpNumberOfBytesRead=0x19f704*=0x1001, lpOverlapped=0x0) returned 1
	[0191.068] ReadFile (in: hFile=0x1b8, lpBuffer=0x63e268, nNumberOfBytesToRead=0x1002, lpNumberOfBytesRead=0x19f704, lpOverlapped=0x0 | out: lpBuffer=0x63e268*, lpNumberOfBytesRead=0x19f704*=0x1002, lpOverlapped=0x0) returned 1
	[0191.072] ReadFile (in: hFile=0x1b8, lpBuffer=0x6455f8, nNumberOfBytesToRead=0x1f28, lpNumberOfBytesRead=0x19f6f8, lpOverlapped=0x0 | out: lpBuffer=0x6455f8*, lpNumberOfBytesRead=0x19f6f8*=0x1f28, lpOverlapped=0x0) returned 1
	[0191.088] CloseHandle (hObject=0x1b8) returned 1
	[0191.126] CloseHandle (hObject=0x1d4) returned 1
	[0191.126] CloseHandle (hObject=0x1d8) returned 1
	[0191.129] CloseHandle (hObject=0x1d4) returned 1
	[0191.129] CloseHandle (hObject=0x1dc) returned 1
	[0191.133] CloseHandle (hObject=0x1dc) returned 1
	[0191.133] CloseHandle (hObject=0x1d4) returned 1
	[0191.176] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log", nBufferLength=0x104, lpBuffer=0x19f990, lpFilePart=0x19f98c | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log", lpFilePart=0x19f98c*="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log") returned 0x8c
	[0191.176] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.219] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19fc30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19fc30*=0x21c) returned 1
	[0191.219] CloseHandle (hObject=0x0) returned 0
	[0191.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19ef18, lpFilePart=0x19ef14 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll.aux", lpFilePart=0x19ef14*="mscorlib.ni.dll.aux") returned 0x6c
	[0191.876] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\8062d427acd64e37f4fded7b00f4a869\\mscorlib.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2b8
	[0191.878] GetFileSize (in: hFile=0x2b8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb0
	[0191.878] ReadFile (in: hFile=0x2b8, lpBuffer=0x19f260, nNumberOfBytesToRead=0xb0, lpNumberOfBytesRead=0x19f1fc, lpOverlapped=0x0 | out: lpBuffer=0x19f260*, lpNumberOfBytesRead=0x19f1fc*=0xb0, lpOverlapped=0x0) returned 1
	[0191.879] CloseHandle (hObject=0x2b8) returned 1
	[0193.542] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x28c
	[0193.542] GetFileInformationByHandle (in: hFile=0x28c, lpFileInformation=0x19f184 | out: lpFileInformation=0x19f184) returned 1
	[0193.546] CloseHandle (hObject=0x28c) returned 1
	[0195.705] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0195.757] RoInitialize () returned 0x1
	[0195.757] RoUninitialize () returned 0x0
	[0196.074] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\pubpol36.dat", nBufferLength=0x104, lpBuffer=0x19c6d0, lpFilePart=0x19c6cc | out: lpBuffer="C:\\Windows\\assembly\\pubpol36.dat", lpFilePart=0x19c6cc*="pubpol36.dat") returned 0x20
	[0196.074] CreateFileW (lpFileName="C:\\Windows\\assembly\\pubpol36.dat" (normalized: "c:\\windows\\assembly\\pubpol36.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8
	[0196.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x104, lpBuffer=0x19ce3c, lpFilePart=0x19ce38 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x19ce38*="machine.config") returned 0x43
	[0196.239] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0196.240] ReadFile (in: hFile=0x2dc, lpBuffer=0x6757d8, nNumberOfBytesToRead=0xfff, lpNumberOfBytesRead=0x19cfd0, lpOverlapped=0x0 | out: lpBuffer=0x6757d8*, lpNumberOfBytesRead=0x19cfd0*=0xfff, lpOverlapped=0x0) returned 1
	[0196.243] ReadFile (in: hFile=0x2dc, lpBuffer=0x6737d0, nNumberOfBytesToRead=0x17f7, lpNumberOfBytesRead=0x19cfb8, lpOverlapped=0x0 | out: lpBuffer=0x6737d0*, lpNumberOfBytesRead=0x19cfb8*=0x17f7, lpOverlapped=0x0) returned 1
	[0196.246] ReadFile (in: hFile=0x2dc, lpBuffer=0x6737d0, nNumberOfBytesToRead=0x1001, lpNumberOfBytesRead=0x19cfc8, lpOverlapped=0x0 | out: lpBuffer=0x6737d0*, lpNumberOfBytesRead=0x19cfc8*=0x1001, lpOverlapped=0x0) returned 1
	[0196.247] ReadFile (in: hFile=0x2dc, lpBuffer=0x6737d0, nNumberOfBytesToRead=0x1002, lpNumberOfBytesRead=0x19cfc8, lpOverlapped=0x0 | out: lpBuffer=0x6737d0*, lpNumberOfBytesRead=0x19cfc8*=0x1002, lpOverlapped=0x0) returned 1
	[0196.249] ReadFile (in: hFile=0x2dc, lpBuffer=0x67ad20, nNumberOfBytesToRead=0x1f28, lpNumberOfBytesRead=0x19cfbc, lpOverlapped=0x0 | out: lpBuffer=0x67ad20*, lpNumberOfBytesRead=0x19cfbc*=0x1f28, lpOverlapped=0x0) returned 1
	[0196.254] CloseHandle (hObject=0x2dc) returned 1
	[0196.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\abad45b9cc652ba7e38c4c837234c0ab\\System.Core.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19c8d8, lpFilePart=0x19c8d4 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\abad45b9cc652ba7e38c4c837234c0ab\\System.Core.ni.dll.aux", lpFilePart=0x19c8d4*="System.Core.ni.dll.aux") returned 0x72
	[0196.430] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\abad45b9cc652ba7e38c4c837234c0ab\\System.Core.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\abad45b9cc652ba7e38c4c837234c0ab\\system.core.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e0
	[0196.443] GetFileSize (in: hFile=0x2e0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x384
	[0196.443] ReadFile (in: hFile=0x2e0, lpBuffer=0x676c60, nNumberOfBytesToRead=0x384, lpNumberOfBytesRead=0x19cbbc, lpOverlapped=0x0 | out: lpBuffer=0x676c60*, lpNumberOfBytesRead=0x19cbbc*=0x384, lpOverlapped=0x0) returned 1
	[0196.446] CloseHandle (hObject=0x2e0) returned 1
	[0196.481] CloseHandle (hObject=0x2e0) returned 1
	[0196.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\cc4e5d110dd318e8b7d61a9ed184ab74\\System.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19bf98, lpFilePart=0x19bf94 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\cc4e5d110dd318e8b7d61a9ed184ab74\\System.ni.dll.aux", lpFilePart=0x19bf94*="System.ni.dll.aux") returned 0x68
	[0196.487] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\cc4e5d110dd318e8b7d61a9ed184ab74\\System.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\cc4e5d110dd318e8b7d61a9ed184ab74\\system.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e4
	[0196.488] GetFileSize (in: hFile=0x2e4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x26c
	[0196.488] ReadFile (in: hFile=0x2e4, lpBuffer=0x678630, nNumberOfBytesToRead=0x26c, lpNumberOfBytesRead=0x19c27c, lpOverlapped=0x0 | out: lpBuffer=0x678630*, lpNumberOfBytesRead=0x19c27c*=0x26c, lpOverlapped=0x0) returned 1
	[0196.490] CloseHandle (hObject=0x2e4) returned 1
	[0196.509] CloseHandle (hObject=0x2e4) returned 1
	[0196.792] CloseHandle (hObject=0x2e4) returned 1
	[0197.650] CloseHandle (hObject=0x2e0) returned 1
	[0197.670] CloseHandle (hObject=0x2e0) returned 1
	[0199.383] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio5ae0f00f#\\0af50700201d066842a881f90e679009\\PresentationFramework.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19b6a8, lpFilePart=0x19b6a4 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio5ae0f00f#\\0af50700201d066842a881f90e679009\\PresentationFramework.ni.dll.aux", lpFilePart=0x19b6a4*="PresentationFramework.ni.dll.aux") returned 0x85
	[0199.383] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Presentatio5ae0f00f#\\0af50700201d066842a881f90e679009\\PresentationFramework.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\presentatio5ae0f00f#\\0af50700201d066842a881f90e679009\\presentationframework.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e0
	[0199.383] GetFileSize (in: hFile=0x2e0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9d4
	[0199.384] ReadFile (in: hFile=0x2e0, lpBuffer=0x67da10, nNumberOfBytesToRead=0x9d4, lpNumberOfBytesRead=0x19b98c, lpOverlapped=0x0 | out: lpBuffer=0x67da10*, lpNumberOfBytesRead=0x19b98c*=0x9d4, lpOverlapped=0x0) returned 1
	[0199.387] CloseHandle (hObject=0x2e0) returned 1
	[0199.413] CloseHandle (hObject=0x2e0) returned 1
	[0199.432] CloseHandle (hObject=0x2e0) returned 1
	[0199.435] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\PresentationCore\\453066eba7980c1ec9a76f27291d3285\\PresentationCore.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19ad68, lpFilePart=0x19ad64 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\PresentationCore\\453066eba7980c1ec9a76f27291d3285\\PresentationCore.ni.dll.aux", lpFilePart=0x19ad64*="PresentationCore.ni.dll.aux") returned 0x7c
	[0199.435] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\PresentationCore\\453066eba7980c1ec9a76f27291d3285\\PresentationCore.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\presentationcore\\453066eba7980c1ec9a76f27291d3285\\presentationcore.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e4
	[0199.436] GetFileSize (in: hFile=0x2e4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x778
	[0199.436] ReadFile (in: hFile=0x2e4, lpBuffer=0x682690, nNumberOfBytesToRead=0x778, lpNumberOfBytesRead=0x19b04c, lpOverlapped=0x0 | out: lpBuffer=0x682690*, lpNumberOfBytesRead=0x19b04c*=0x778, lpOverlapped=0x0) returned 1
	[0199.441] CloseHandle (hObject=0x2e4) returned 1
	[0199.469] CloseHandle (hObject=0x2e4) returned 1
	[0199.485] CloseHandle (hObject=0x2e4) returned 1
	[0199.516] CloseHandle (hObject=0x2e4) returned 1
	[0199.534] CloseHandle (hObject=0x2e4) returned 1
	[0199.557] CloseHandle (hObject=0x2e4) returned 1
	[0201.068] CloseHandle (hObject=0x2e0) returned 1
	[0201.256] CloseHandle (hObject=0x2e0) returned 1
	[0201.390] CloseHandle (hObject=0x2e0) returned 1
	[0201.419] CloseHandle (hObject=0x2e0) returned 1
	[0203.762] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x67c9f0
	[0203.877] ??2@YAPAXI@Z () returned 0x6847d0
	[0203.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WindowsBase\\d31693d2e7ad7a9d698064f574cd5f06\\WindowsBase.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19a888, lpFilePart=0x19a884 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WindowsBase\\d31693d2e7ad7a9d698064f574cd5f06\\WindowsBase.ni.dll.aux", lpFilePart=0x19a884*="WindowsBase.ni.dll.aux") returned 0x72
	[0203.900] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\WindowsBase\\d31693d2e7ad7a9d698064f574cd5f06\\WindowsBase.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\windowsbase\\d31693d2e7ad7a9d698064f574cd5f06\\windowsbase.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e0
	[0203.901] GetFileSize (in: hFile=0x2e0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49c
	[0203.901] ReadFile (in: hFile=0x2e0, lpBuffer=0x67df08, nNumberOfBytesToRead=0x49c, lpNumberOfBytesRead=0x19ab6c, lpOverlapped=0x0 | out: lpBuffer=0x67df08*, lpNumberOfBytesRead=0x19ab6c*=0x49c, lpOverlapped=0x0) returned 1
	[0203.911] CloseHandle (hObject=0x2e0) returned 1
	[0204.602] SetProcessDPIAware () returned 1
	[0204.611] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Net Framework Setup\\NDP\\v4\\Client", ulOptions=0x0, samDesired=0x20019, phkResult=0x19cd44 | out: phkResult=0x19cd44*=0x2dc) returned 0x0
	[0204.612] RegQueryValueExW (in: hKey=0x2dc, lpValueName="InstallPath", lpReserved=0x0, lpType=0x19cd40, lpData=0x19cf9c, lpcbData=0x19cd3c*=0x208 | out: lpType=0x19cd40*=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpcbData=0x19cd3c*=0x5e) returned 0x0
	[0204.614] RegCloseKey (hKey=0x2dc) returned 0x0
	[0204.623] PathAppendW (in: pszPath="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", pMore="WPF" | out: pszPath="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF") returned 1
	[0204.624] PathCombineW (in: pszDest=0x19d1a4, pszDir="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF", pszFile="wpftxt_v0400.dll" | out: pszDest="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\wpftxt_v0400.dll") returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\wpftxt_v0400.dll"
	[0204.625] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18
	[0204.626] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b
	[0204.626] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x4) returned 0xdb
	[0204.627] VerifyVersionInfoW (in: lpVersionInformation=0x19ce58, dwTypeMask=0x7, dwlConditionMask=0xdb | out: lpVersionInformation=0x19ce58) returned 1
	[0204.921] PathCombineW (in: pszDest=0x19cd70, pszDir="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF", pszFile="wpfgfx_v0400.dll" | out: pszDest="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\wpfgfx_v0400.dll") returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\wpfgfx_v0400.dll"
	[0205.592] PathCombineW (in: pszDest=0x19cd70, pszDir="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF", pszFile="PresentationNative_v0400.dll" | out: pszDest="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationNative_v0400.dll") returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationNative_v0400.dll"
	[0206.468] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x19f078 | out: pTimeZoneInformation=0x19f078) returned 0x2
	[0206.479] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f15c | out: phkResult=0x19f15c*=0x31c) returned 0x0
	[0206.480] RegQueryValueExW (in: hKey=0x31c, lpValueName="TZI", lpReserved=0x0, lpType=0x19f178, lpData=0x0, lpcbData=0x19f174*=0x0 | out: lpType=0x19f178*=0x3, lpData=0x0, lpcbData=0x19f174*=0x2c) returned 0x0
	[0206.480] RegQueryValueExW (in: hKey=0x31c, lpValueName="TZI", lpReserved=0x0, lpType=0x19f178, lpData=0x28be000, lpcbData=0x19f174*=0x2c | out: lpType=0x19f178*=0x3, lpData=0x28be000*, lpcbData=0x19f174*=0x2c) returned 0x0
	[0206.481] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x19efb0 | out: phkResult=0x19efb0*=0x0) returned 0x2
	[0206.485] RegQueryValueExW (in: hKey=0x31c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19f150, lpData=0x0, lpcbData=0x19f14c*=0x0 | out: lpType=0x19f150*=0x1, lpData=0x0, lpcbData=0x19f14c*=0x20) returned 0x0
	[0206.485] RegQueryValueExW (in: hKey=0x31c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19f150, lpData=0x28be53c, lpcbData=0x19f14c*=0x20 | out: lpType=0x19f150*=0x1, lpData="@tzres.dll,-320", lpcbData=0x19f14c*=0x20) returned 0x0
	[0206.486] RegQueryValueExW (in: hKey=0x31c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19f150, lpData=0x0, lpcbData=0x19f14c*=0x0 | out: lpType=0x19f150*=0x1, lpData=0x0, lpcbData=0x19f14c*=0x20) returned 0x0
	[0206.486] RegQueryValueExW (in: hKey=0x31c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19f150, lpData=0x28be594, lpcbData=0x19f14c*=0x20 | out: lpType=0x19f150*=0x1, lpData="@tzres.dll,-322", lpcbData=0x19f14c*=0x20) returned 0x0
	[0206.486] RegQueryValueExW (in: hKey=0x31c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19f150, lpData=0x0, lpcbData=0x19f14c*=0x0 | out: lpType=0x19f150*=0x1, lpData=0x0, lpcbData=0x19f14c*=0x20) returned 0x0
	[0206.486] RegQueryValueExW (in: hKey=0x31c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19f150, lpData=0x28be5ec, lpcbData=0x19f14c*=0x20 | out: lpType=0x19f150*=0x1, lpData="@tzres.dll,-321", lpcbData=0x19f14c*=0x20) returned 0x0
	[0206.518] CoTaskMemAlloc (cb=0x20c) returned 0x690690
	[0206.518] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x690690 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0206.521] CoTaskMemFree (pv=0x690690) 
	[0206.525] CoTaskMemAlloc (cb=0x20c) returned 0x690690
	[0206.525] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19f16c, pwszFileMUIPath=0x690690, pcchFileMUIPath=0x19f170, pululEnumerator=0x19f164 | out: pwszLanguage=0x0, pcchLanguage=0x19f16c, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19f170, pululEnumerator=0x19f164) returned 1
	[0206.551] CoTaskMemFree (pv=0x0) 
	[0206.551] CoTaskMemFree (pv=0x690690) 
	[0206.614] CoTaskMemAlloc (cb=0x3ec) returned 0x67de18
	[0206.614] LoadStringW (in: hInstance=0x22f0001, uID=0x140, lpBuffer=0x67de18, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c
	[0206.615] CoTaskMemFree (pv=0x67de18) 
	[0206.616] CoTaskMemAlloc (cb=0x20c) returned 0x690690
	[0206.616] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x690690 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0206.616] CoTaskMemFree (pv=0x690690) 
	[0206.616] CoTaskMemAlloc (cb=0x20c) returned 0x690690
	[0206.616] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19f16c, pwszFileMUIPath=0x690690, pcchFileMUIPath=0x19f170, pululEnumerator=0x19f164 | out: pwszLanguage=0x0, pcchLanguage=0x19f16c, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19f170, pululEnumerator=0x19f164) returned 1
	[0206.619] CoTaskMemFree (pv=0x0) 
	[0206.619] CoTaskMemFree (pv=0x690690) 
	[0206.625] CoTaskMemAlloc (cb=0x3ec) returned 0x67de18
	[0206.625] LoadStringW (in: hInstance=0x22f0001, uID=0x142, lpBuffer=0x67de18, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17
	[0206.626] CoTaskMemFree (pv=0x67de18) 
	[0206.627] CoTaskMemAlloc (cb=0x20c) returned 0x690690
	[0206.627] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x690690 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0206.627] CoTaskMemFree (pv=0x690690) 
	[0206.628] CoTaskMemAlloc (cb=0x20c) returned 0x690690
	[0206.628] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19f16c, pwszFileMUIPath=0x690690, pcchFileMUIPath=0x19f170, pululEnumerator=0x19f164 | out: pwszLanguage=0x0, pcchLanguage=0x19f16c, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19f170, pululEnumerator=0x19f164) returned 1
	[0206.631] CoTaskMemFree (pv=0x0) 
	[0206.631] CoTaskMemFree (pv=0x690690) 
	[0206.635] CoTaskMemAlloc (cb=0x3ec) returned 0x67de18
	[0206.636] LoadStringW (in: hInstance=0x22f0001, uID=0x141, lpBuffer=0x67de18, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17
	[0206.636] CoTaskMemFree (pv=0x67de18) 
	[0206.638] RegCloseKey (hKey=0x31c) returned 0x0
	[0206.980] WindowsCreateStringReference () returned 0x0
	[0206.980] RoGetActivationFactory () returned 0x0
	[0207.444] QueryInterface () returned 0x0
	[0207.445] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002
	[0207.445] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002
	[0207.445] QueryInterface () returned 0x0
	[0207.446] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::GetRuntimeClassName () returned 0x8000000e
	[0207.446] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3
	[0207.446] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::AddRef () returned 0x4
	[0207.446] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002
	[0207.446] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0
	[0207.446] Release () returned 0x4
	[0207.446] CoGetContextToken (in: pToken=0x19dfe0 | out: pToken=0x19dfe0) returned 0x0
	[0207.446] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002
	[0207.447] CoGetContextToken (in: pToken=0x19e2e8 | out: pToken=0x19e2e8) returned 0x0
	[0207.447] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0
	[0207.447] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x4
	[0207.447] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3
	[0207.447] WindowsDeleteString () returned 0x0
	[0207.447] Release () returned 0x2
	[0207.447] CoGetContextToken (in: pToken=0x19ea58 | out: pToken=0x19ea58) returned 0x0
	[0207.448] CoGetContextToken (in: pToken=0x19e9b8 | out: pToken=0x19e9b8) returned 0x0
	[0207.449] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0
	[0207.449] AddRef () returned 0x4
	[0207.449] Release () returned 0x3
	[0207.468] IIDFromString (in: lpsz="{410B7711-FF3B-477F-9C9A-D2EFDA302DC3}", lpiid=0x19e0f0 | out: lpiid=0x19e0f0) returned 0x0
	[0207.469] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::add_TracingStatusChanged () returned 0x0
	[0207.602] GenericStreamBase<IStream>::Write () returned 0x0
	[0207.602] GenericStreamBase<IStream>::Write () returned 0x0
	[0207.602] CoCreateGuid (in: pguid=0x6b8e529c | out: pguid=0x6b8e529c*(Data1=0x1f43b3db, Data2=0xb9db, Data3=0x474a, Data4=([0]=0xa5, [1]=0xea, [2]=0xf1, [3]=0xc5, [4]=0x37, [5]=0xde, [6]=0xf7, [7]=0xba))) returned 0x0
	[0207.602] GenericStreamBase<IStream>::Write () returned 0x0
	[0207.609] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0
	[0207.610] Microsoft::WRL::Details::RuntimeClass<Microsoft::WRL::Details::InterfaceList<IInspectable,Microsoft::WRL::Details::InterfaceList<Microsoft::WRL::FtmBase,Microsoft::WRL::Details::Nil> >,Microsoft::WRL::RuntimeClassFlags<1>,1,1,0>::AddRef () returned 0x3
	[0207.610] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002
	[0207.610] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0
	[0207.610] Release () returned 0x3
	[0207.610] CoGetContextToken (in: pToken=0x19deb8 | out: pToken=0x19deb8) returned 0x0
	[0207.610] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002
	[0207.611] WindowsCreateString () returned 0x0
	[0207.611] Microsoft::WRL::Details::RuntimeClass<Microsoft::WRL::Details::InterfaceList<IInspectable,Microsoft::WRL::Details::InterfaceList<Microsoft::WRL::FtmBase,Microsoft::WRL::Details::Nil> >,Microsoft::WRL::RuntimeClassFlags<1>,1,1,0>::AddRef () returned 0x4
	[0207.611] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3
	[0207.612] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0
	[0207.632] EtwEventRegister (in: ProviderId=0x28c3264, EnableCallback=0x4920b7e, CallbackContext=0x0, RegHandle=0x28c3240 | out: RegHandle=0x28c3240) returned 0x0
	[0207.636] EtwEventSetInformation (RegHandle=0x637738, InformationClass=0x45, EventInformation=0x2, InformationLength=0x28c31e0) returned 0x0
	[0207.637] EtwEventRegister (in: ProviderId=0x28c38f8, EnableCallback=0x4920ba6, CallbackContext=0x0, RegHandle=0x28c38d4 | out: RegHandle=0x28c38d4) returned 0x0
	[0207.637] EtwEventSetInformation (RegHandle=0x69b1d8, InformationClass=0x46, EventInformation=0x2, InformationLength=0x28c3898) returned 0x0
	[0207.643] CloseHandle (hObject=0x3a0) returned 1
	[0207.770] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll", nBufferLength=0x104, lpBuffer=0x19b188, lpFilePart=0x19b184 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll", lpFilePart=0x19b184*="System.ServiceModel.dll") returned 0x75
	[0207.770] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.servicemodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.servicemodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a4
	[0207.770] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll", nBufferLength=0x104, lpBuffer=0x19aeb8, lpFilePart=0x19aeb4 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll", lpFilePart=0x19aeb4*="System.ServiceModel.dll") returned 0x75
	[0207.770] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.ServiceModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.ServiceModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.servicemodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.servicemodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a8
	[0208.062] CloseHandle (hObject=0x3a8) returned 1
	[0210.368] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMDiagnostics\\607f34b8be4f2014b99872617699b357\\SMDiagnostics.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x199fe0, lpFilePart=0x199fdc | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMDiagnostics\\607f34b8be4f2014b99872617699b357\\SMDiagnostics.ni.dll.aux", lpFilePart=0x199fdc*="SMDiagnostics.ni.dll.aux") returned 0x76
	[0210.368] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\SMDiagnostics\\607f34b8be4f2014b99872617699b357\\SMDiagnostics.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\smdiagnostics\\607f34b8be4f2014b99872617699b357\\smdiagnostics.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0210.368] GetFileSize (in: hFile=0x3f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39c
	[0210.371] ReadFile (in: hFile=0x3f8, lpBuffer=0x6ccad0, nNumberOfBytesToRead=0x39c, lpNumberOfBytesRead=0x19a2c4, lpOverlapped=0x0 | out: lpBuffer=0x6ccad0*, lpNumberOfBytesRead=0x19a2c4*=0x39c, lpOverlapped=0x0) returned 1
	[0210.376] CloseHandle (hObject=0x3f8) returned 1
	[0210.500] CloseHandle (hObject=0x3f8) returned 1
	[0211.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll", nBufferLength=0x104, lpBuffer=0x19ac18, lpFilePart=0x19ac14 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll", lpFilePart=0x19ac14*="System.IdentityModel.dll") returned 0x77
	[0211.544] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.identitymodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0211.545] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll", nBufferLength=0x104, lpBuffer=0x19a948, lpFilePart=0x19a944 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll", lpFilePart=0x19a944*="System.IdentityModel.dll") returned 0x77
	[0211.545] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.identitymodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0211.587] CloseHandle (hObject=0x3fc) returned 1
	[0211.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runteb92aa12#\\43ca3f2fcd379964cef1dc5898cb9248\\System.Runtime.Serialization.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19b638, lpFilePart=0x19b634 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runteb92aa12#\\43ca3f2fcd379964cef1dc5898cb9248\\System.Runtime.Serialization.ni.dll.aux", lpFilePart=0x19b634*="System.Runtime.Serialization.ni.dll.aux") returned 0x8c
	[0211.808] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runteb92aa12#\\43ca3f2fcd379964cef1dc5898cb9248\\System.Runtime.Serialization.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runteb92aa12#\\43ca3f2fcd379964cef1dc5898cb9248\\system.runtime.serialization.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x408
	[0211.809] GetFileSize (in: hFile=0x408, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x44c
	[0211.809] ReadFile (in: hFile=0x408, lpBuffer=0x6c12b8, nNumberOfBytesToRead=0x44c, lpNumberOfBytesRead=0x19b91c, lpOverlapped=0x0 | out: lpBuffer=0x6c12b8*, lpNumberOfBytesRead=0x19b91c*=0x44c, lpOverlapped=0x0) returned 1
	[0211.811] CloseHandle (hObject=0x408) returned 1
	[0213.076] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\1f87b5140145c221b5201351fffc52d8\\System.Xml.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19a8a8, lpFilePart=0x19a8a4 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\1f87b5140145c221b5201351fffc52d8\\System.Xml.ni.dll.aux", lpFilePart=0x19a8a4*="System.Xml.ni.dll.aux") returned 0x70
	[0213.076] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\1f87b5140145c221b5201351fffc52d8\\System.Xml.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\1f87b5140145c221b5201351fffc52d8\\system.xml.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0213.076] GetFileSize (in: hFile=0x3fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ec
	[0213.077] ReadFile (in: hFile=0x3fc, lpBuffer=0x6ad128, nNumberOfBytesToRead=0x2ec, lpNumberOfBytesRead=0x19ab8c, lpOverlapped=0x0 | out: lpBuffer=0x6ad128*, lpNumberOfBytesRead=0x19ab8c*=0x2ec, lpOverlapped=0x0) returned 1
	[0213.079] CloseHandle (hObject=0x3fc) returned 1
	[0213.102] CloseHandle (hObject=0x3fc) returned 1
	[0213.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servd1dec626#\\80366b2f53761589c602827eb7cee9f2\\System.ServiceModel.Internals.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19acc8, lpFilePart=0x19acc4 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servd1dec626#\\80366b2f53761589c602827eb7cee9f2\\System.ServiceModel.Internals.ni.dll.aux", lpFilePart=0x19acc4*="System.ServiceModel.Internals.ni.dll.aux") returned 0x8d
	[0213.884] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Servd1dec626#\\80366b2f53761589c602827eb7cee9f2\\System.ServiceModel.Internals.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.servd1dec626#\\80366b2f53761589c602827eb7cee9f2\\system.servicemodel.internals.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0213.885] GetFileSize (in: hFile=0x3fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x250
	[0213.885] ReadFile (in: hFile=0x3fc, lpBuffer=0x6acfd0, nNumberOfBytesToRead=0x250, lpNumberOfBytesRead=0x19afac, lpOverlapped=0x0 | out: lpBuffer=0x6acfd0*, lpNumberOfBytesRead=0x19afac*=0x250, lpOverlapped=0x0) returned 1
	[0213.893] CloseHandle (hObject=0x3fc) returned 1
	[0214.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\1b51e779650e38bb712f3e535efcf132\\System.Configuration.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19b3e0, lpFilePart=0x19b3dc | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\1b51e779650e38bb712f3e535efcf132\\System.Configuration.ni.dll.aux", lpFilePart=0x19b3dc*="System.Configuration.ni.dll.aux") returned 0x84
	[0214.810] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\1b51e779650e38bb712f3e535efcf132\\System.Configuration.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\1b51e779650e38bb712f3e535efcf132\\system.configuration.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0214.811] GetFileSize (in: hFile=0x3fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360
	[0214.811] ReadFile (in: hFile=0x3fc, lpBuffer=0x6c1498, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19b6c4, lpOverlapped=0x0 | out: lpBuffer=0x6c1498*, lpNumberOfBytesRead=0x19b6c4*=0x360, lpOverlapped=0x0) returned 1
	[0214.813] CloseHandle (hObject=0x3fc) returned 1
	[0215.165] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config", nBufferLength=0x105, lpBuffer=0x19e560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config", lpFilePart=0x0) returned 0x69
	[0215.177] GetCurrentProcess () returned 0xffffffff
	[0215.177] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e918 | out: TokenHandle=0x19e918*=0x3f4) returned 1
	[0215.180] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19e3f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0215.182] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19e918 | out: lpFileInformation=0x19e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0215.184] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0215.185] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19e918 | out: lpFileInformation=0x19e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0215.186] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0215.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e844) returned 1
	[0215.187] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x104, lpBuffer=0x19e544, lpFilePart=0x19e540 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x19e540*="machine.config") returned 0x43
	[0215.187] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3fc
	[0215.187] GetFileType (hFile=0x3fc) returned 0x1
	[0215.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e840) returned 1
	[0215.187] GetFileType (hFile=0x3fc) returned 0x1
	[0215.211] GetFileSize (in: hFile=0x3fc, lpFileSizeHigh=0x19e90c | out: lpFileSizeHigh=0x19e90c*=0x0) returned 0x8c8f
	[0215.211] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e8c8, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e8c8*=0x1000, lpOverlapped=0x0) returned 1
	[0215.233] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e764, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e764*=0x1000, lpOverlapped=0x0) returned 1
	[0215.238] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e618, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e618*=0x1000, lpOverlapped=0x0) returned 1
	[0215.239] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e618, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e618*=0x1000, lpOverlapped=0x0) returned 1
	[0215.241] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e618, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e618*=0x1000, lpOverlapped=0x0) returned 1
	[0215.242] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e550, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e550*=0x1000, lpOverlapped=0x0) returned 1
	[0215.245] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e6cc, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e6cc*=0x1000, lpOverlapped=0x0) returned 1
	[0215.246] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e5e0, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e5e0*=0x1000, lpOverlapped=0x0) returned 1
	[0215.247] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e5e0, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e5e0*=0xc8f, lpOverlapped=0x0) returned 1
	[0215.247] ReadFile (in: hFile=0x3fc, lpBuffer=0x28d4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e6a0, lpOverlapped=0x0 | out: lpBuffer=0x28d4440*, lpNumberOfBytesRead=0x19e6a0*=0x0, lpOverlapped=0x0) returned 1
	[0215.247] CloseHandle (hObject=0x3fc) returned 1
	[0215.249] GetCurrentProcess () returned 0xffffffff
	[0215.249] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea40 | out: TokenHandle=0x19ea40*=0x3fc) returned 1
	[0215.249] GetCurrentProcess () returned 0xffffffff
	[0215.249] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea40 | out: TokenHandle=0x19ea40*=0x408) returned 1
	[0215.250] GetCurrentProcess () returned 0xffffffff
	[0215.250] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e918 | out: TokenHandle=0x19e918*=0x40c) returned 1
	[0215.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19e918 | out: lpFileInformation=0x19e918*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0215.250] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config", nBufferLength=0x105, lpBuffer=0x19e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config", lpFilePart=0x0) returned 0x69
	[0215.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19e918 | out: lpFileInformation=0x19e918*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0215.251] GetCurrentProcess () returned 0xffffffff
	[0215.251] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea40 | out: TokenHandle=0x19ea40*=0x410) returned 1
	[0215.252] GetCurrentProcess () returned 0xffffffff
	[0215.252] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea40 | out: TokenHandle=0x19ea40*=0x414) returned 1
	[0215.271] GetCurrentProcess () returned 0xffffffff
	[0215.271] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e804 | out: TokenHandle=0x19e804*=0x418) returned 1
	[0215.332] GetCurrentProcess () returned 0xffffffff
	[0215.332] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e818 | out: TokenHandle=0x19e818*=0x41c) returned 1
	[0215.427] GetCurrentProcess () returned 0xffffffff
	[0215.427] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e030 | out: TokenHandle=0x19e030*=0x420) returned 1
	[0215.448] GetCurrentProcess () returned 0xffffffff
	[0215.448] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e044 | out: TokenHandle=0x19e044*=0x424) returned 1
	[0215.703] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Transactions\\8a03e2886313defa91cef9f385480f4e\\System.Transactions.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x199898, lpFilePart=0x199894 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Transactions\\8a03e2886313defa91cef9f385480f4e\\System.Transactions.ni.dll.aux", lpFilePart=0x199894*="System.Transactions.ni.dll.aux") returned 0x82
	[0215.703] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Transactions\\8a03e2886313defa91cef9f385480f4e\\System.Transactions.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.transactions\\8a03e2886313defa91cef9f385480f4e\\system.transactions.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x42c
	[0215.703] GetFileSize (in: hFile=0x42c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39c
	[0215.704] ReadFile (in: hFile=0x42c, lpBuffer=0x6c1498, nNumberOfBytesToRead=0x39c, lpNumberOfBytesRead=0x199b7c, lpOverlapped=0x0 | out: lpBuffer=0x6c1498*, lpNumberOfBytesRead=0x199b7c*=0x39c, lpOverlapped=0x0) returned 1
	[0215.705] CloseHandle (hObject=0x42c) returned 1
	[0215.737] CloseHandle (hObject=0x42c) returned 1
	[0215.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x104, lpBuffer=0x19b420, lpFilePart=0x19b41c | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x19b41c*="System.Transactions.dll") returned 0x73
	[0215.810] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428
	[0215.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x104, lpBuffer=0x19a9d8, lpFilePart=0x19a9d4 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x19a9d4*="System.Transactions.dll") returned 0x73
	[0215.958] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x42c
	[0215.959] GetFileSize (in: hFile=0x42c, lpFileSizeHigh=0x19ac58 | out: lpFileSizeHigh=0x19ac58*=0x0) returned 0x4a2d0
	[0215.959] CreateFileMappingW (hFile=0x42c, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x430
	[0215.966] CloseHandle (hObject=0x42c) returned 1
	[0215.967] CloseHandle (hObject=0x430) returned 1
	[0215.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x104, lpBuffer=0x19a9d8, lpFilePart=0x19a9d4 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x19a9d4*="System.Transactions.dll") returned 0x73
	[0215.967] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x430
	[0215.969] GetFileSize (in: hFile=0x430, lpFileSizeHigh=0x19ac58 | out: lpFileSizeHigh=0x19ac58*=0x0) returned 0x4a2d0
	[0215.970] CloseHandle (hObject=0x430) returned 1
	[0215.972] CloseHandle (hObject=0x42c) returned 1
	[0215.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll.config", nBufferLength=0x104, lpBuffer=0x199f68, lpFilePart=0x199f64 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll.config", lpFilePart=0x199f64*="System.Transactions.dll.config") returned 0x7a
	[0215.973] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll.config" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0215.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x104, lpBuffer=0x199f70, lpFilePart=0x199f6c | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x199f6c*="System.Transactions.dll") returned 0x73
	[0215.974] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x430
	[0215.975] GetFileSize (in: hFile=0x430, lpFileSizeHigh=0x19a1f0 | out: lpFileSizeHigh=0x19a1f0*=0x0) returned 0x4a2d0
	[0215.976] CloseHandle (hObject=0x430) returned 1
	[0215.977] CloseHandle (hObject=0x434) returned 1
	[0215.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x104, lpBuffer=0x199f70, lpFilePart=0x199f6c | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x199f6c*="System.Transactions.dll") returned 0x73
	[0215.977] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x434
	[0215.977] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x19a1f0 | out: lpFileSizeHigh=0x19a1f0*=0x0) returned 0x4a2d0
	[0215.979] CloseHandle (hObject=0x434) returned 1
	[0215.980] CloseHandle (hObject=0x430) returned 1
	[0215.999] CloseHandle (hObject=0x428) returned 1
	[0217.705] GetCurrentProcess () returned 0xffffffff
	[0217.706] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ef18 | out: TokenHandle=0x19ef18*=0x428) returned 1
	[0217.715] GetCurrentProcess () returned 0xffffffff
	[0217.715] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ef2c | out: TokenHandle=0x19ef2c*=0x42c) returned 1
	[0218.370] GetCurrentPackageId () returned 0x3d54
	[0220.865] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e7f4 | out: phkResult=0x19e7f4*=0x0) returned 0x2
	[0220.865] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e7f4 | out: phkResult=0x19e7f4*=0x0) returned 0x2
	[0221.955] EtwEventRegister (in: ProviderId=0x29612ac, EnableCallback=0x4920c26, CallbackContext=0x0, RegHandle=0x2961288 | out: RegHandle=0x2961288) returned 0x0
	[0224.124] CoCreateGuid (in: pguid=0x19f048 | out: pguid=0x19f048*(Data1=0xfceb4d59, Data2=0x79c3, Data3=0x43cd, Data4=([0]=0xb1, [1]=0x58, [2]=0x31, [3]=0x70, [4]=0x57, [5]=0xb, [6]=0x41, [7]=0xe7))) returned 0x0
	[0224.495] CoCreateGuid (in: pguid=0x19ef78 | out: pguid=0x19ef78*(Data1=0x96269db0, Data2=0x500d, Data3=0x425f, Data4=([0]=0xbb, [1]=0xb3, [2]=0xa0, [3]=0x4f, [4]=0x89, [5]=0xe6, [6]=0x52, [7]=0x52))) returned 0x0
	[0225.203] CoCreateGuid (in: pguid=0x19edf0 | out: pguid=0x19edf0*(Data1=0xc130e97b, Data2=0xd761, Data3=0x4078, Data4=([0]=0xa1, [1]=0x87, [2]=0x36, [3]=0x97, [4]=0xcf, [5]=0xe5, [6]=0xd0, [7]=0xd0))) returned 0x0
	[0226.292] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19eb00 | out: lpWSAData=0x19eb00) returned 0
	[0226.300] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x45c
	[0226.699] setsockopt (s=0x45c, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0226.699] closesocket (s=0x45c) returned 0
	[0226.699] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x45c
	[0226.701] setsockopt (s=0x45c, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0226.701] closesocket (s=0x45c) returned 0
	[0226.711] GetCurrentProcess () returned 0xffffffff
	[0226.711] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e8b4 | out: TokenHandle=0x19e8b4*=0x45c) returned 1
	[0226.717] GetCurrentProcess () returned 0xffffffff
	[0226.717] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e8c8 | out: TokenHandle=0x19e8c8*=0x460) returned 1
	[0226.750] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x464
	[0226.757] WSAConnect (in: s=0x464, name=0x296bbe8*(sa_family=2, sin_port=0x1bc6, sin_addr="51.79.188.112"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0226.982] setsockopt (s=0x464, level=65535, optname=4098, optval="", optlen=4) returned 0
	[0226.982] setsockopt (s=0x464, level=65535, optname=4097, optval="", optlen=4) returned 0
	[0227.136] setsockopt (s=0x464, level=6, optname=1, optval="\x01", optlen=4) returned 0
	[0227.209] setsockopt (s=0x464, level=65535, optname=4101, optval="ûo\x1b", optlen=4) returned 0
	[0227.210] send (s=0x464, buf=0x296450c*, len=39, flags=0) returned 39
	[0227.313] setsockopt (s=0x464, level=65535, optname=4102, optval="ho\x1b", optlen=4) returned 0
	[0227.313] recv (in: s=0x464, buf=0x298c004, len=1, flags=0 | out: buf=0x298c004*) returned 1
	[0228.231] send (s=0x464, buf=0x298c9a7*, len=204, flags=0) returned 204
	[0228.291] recv (in: s=0x464, buf=0x298de1c, len=8192, flags=0 | out: buf=0x298de1c*) returned 142
	[0234.858] CoCreateGuid (in: pguid=0x19f054 | out: pguid=0x19f054*(Data1=0xb04f582b, Data2=0x7692, Data3=0x48e6, Data4=([0]=0x83, [1]=0xc4, [2]=0x20, [3]=0x1, [4]=0x33, [5]=0xfc, [6]=0x3c, [7]=0x13))) returned 0x0
	[0234.900] CoCreateGuid (in: pguid=0x19ef84 | out: pguid=0x19ef84*(Data1=0xdbd2fb8b, Data2=0xf9c0, Data3=0x48d2, Data4=([0]=0xa9, [1]=0xff, [2]=0xf6, [3]=0xd6, [4]=0x29, [5]=0xd0, [6]=0x14, [7]=0x50))) returned 0x0
	[0234.997] send (s=0x464, buf=0x298c9a7*, len=154, flags=0) returned 154
	[0234.998] recv (in: s=0x464, buf=0x298de1c, len=8192, flags=0 | out: buf=0x298de1c*) returned 3698
	[0235.873] GetCurrentProcess () returned 0xffffffff
	[0235.873] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e7d8 | out: TokenHandle=0x19e7d8*=0x3ac) returned 1
	[0235.874] GetCurrentProcess () returned 0xffffffff
	[0235.874] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e7ec | out: TokenHandle=0x19e7ec*=0x3cc) returned 1
	[0237.829] CoTaskMemAlloc (cb=0x20c) returned 0x704cc8
	[0237.829] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x704cc8 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local") returned 0x0
	[0237.834] CoTaskMemFree (pv=0x704cc8) 
	[0237.834] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19ed94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23
	[0237.839] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon", nBufferLength=0x105, lpBuffer=0x19ee30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon", lpFilePart=0x0) returned 0x32
	[0237.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f28c) returned 1
	[0237.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yaaddon"), fInfoLevelId=0x0, lpFileInformation=0x19f308 | out: lpFileInformation=0x19f308*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0237.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f288) returned 1
	[0237.902] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon", nBufferLength=0x105, lpBuffer=0x19ee2c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon", lpFilePart=0x0) returned 0x32
	[0237.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f214) returned 1
	[0237.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yaaddon"), fInfoLevelId=0x0, lpFileInformation=0x19f290 | out: lpFileInformation=0x19f290*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0237.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0237.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f214) returned 1
	[0237.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yaaddon"), fInfoLevelId=0x0, lpFileInformation=0x19f290 | out: lpFileInformation=0x19f290*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0237.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0237.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f214) returned 1
	[0237.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex"), fInfoLevelId=0x0, lpFileInformation=0x19f290 | out: lpFileInformation=0x19f290*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0237.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0237.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f214) returned 1
	[0237.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x19f290 | out: lpFileInformation=0x19f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0237.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f210) returned 1
	[0237.904] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex"), lpSecurityAttributes=0x0) returned 1
	[0237.911] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YaAddon" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yaaddon"), lpSecurityAttributes=0x0) returned 1
	[0237.983] GetUserNameW (in: lpBuffer=0x19f108, pcbBuffer=0x19f380 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x19f380) returned 1
	[0238.222] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\8cd2187094ba6cade0ca0fab4f932654\\System.Windows.Forms.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19b620, lpFilePart=0x19b61c | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\8cd2187094ba6cade0ca0fab4f932654\\System.Windows.Forms.ni.dll.aux", lpFilePart=0x19b61c*="System.Windows.Forms.ni.dll.aux") returned 0x84
	[0238.222] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\8cd2187094ba6cade0ca0fab4f932654\\System.Windows.Forms.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\8cd2187094ba6cade0ca0fab4f932654\\system.windows.forms.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c8
	[0238.223] GetFileSize (in: hFile=0x3c8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6b8
	[0238.223] ReadFile (in: hFile=0x3c8, lpBuffer=0x71e920, nNumberOfBytesToRead=0x6b8, lpNumberOfBytesRead=0x19b904, lpOverlapped=0x0 | out: lpBuffer=0x71e920*, lpNumberOfBytesRead=0x19b904*=0x6b8, lpOverlapped=0x0) returned 1
	[0238.225] CloseHandle (hObject=0x3c8) returned 1
	[0238.256] CloseHandle (hObject=0x3c8) returned 1
	[0238.259] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\9b645a48c9bcfc95aaadf6a069bb4ebe\\System.Drawing.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19ace0, lpFilePart=0x19acdc | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\9b645a48c9bcfc95aaadf6a069bb4ebe\\System.Drawing.ni.dll.aux", lpFilePart=0x19acdc*="System.Drawing.ni.dll.aux") returned 0x78
	[0238.259] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\9b645a48c9bcfc95aaadf6a069bb4ebe\\System.Drawing.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\9b645a48c9bcfc95aaadf6a069bb4ebe\\system.drawing.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c0
	[0238.260] GetFileSize (in: hFile=0x3c0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x248
	[0238.260] ReadFile (in: hFile=0x3c0, lpBuffer=0x707dd8, nNumberOfBytesToRead=0x248, lpNumberOfBytesRead=0x19afc4, lpOverlapped=0x0 | out: lpBuffer=0x707dd8*, lpNumberOfBytesRead=0x19afc4*=0x248, lpOverlapped=0x0) returned 1
	[0238.262] CloseHandle (hObject=0x3c0) returned 1
	[0238.429] CloseHandle (hObject=0x3c8) returned 1
	[0239.466] GetCurrentProcess () returned 0xffffffff
	[0239.466] GetCurrentThread () returned 0xfffffffe
	[0239.466] GetCurrentProcess () returned 0xffffffff
	[0239.469] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19f33c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19f33c*=0x3c4) returned 1
	[0239.478] GetCurrentThreadId () returned 0xb20
	[0239.480] OleInitialize (pvReserved=0x0) returned 0x80010106
	[0239.484] GetKeyboardLayout (idThread=0x0) returned 0x4090409
	[0239.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="IsWow64Process", cchWideChar=14, lpMultiByteStr=0x19f2e4, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IsWow64ProcessHjP»\x95÷ «)khö\x19", lpUsedDefaultChar=0x0) returned 14
	[0239.506] GetCurrentProcess () returned 0xffffffff
	[0239.507] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19f344 | out: Wow64Process=0x19f344*=1) returned 1
	[0239.523] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2d8 | out: phkResult=0x19f2d8*=0x3c8) returned 0x0
	[0239.525] RegQueryValueExW (in: hKey=0x3c8, lpValueName="ProductName", lpReserved=0x0, lpType=0x19f2f8, lpData=0x0, lpcbData=0x19f2f4*=0x0 | out: lpType=0x19f2f8*=0x1, lpData=0x0, lpcbData=0x19f2f4*=0x1e) returned 0x0
	[0239.525] RegQueryValueExW (in: hKey=0x3c8, lpValueName="ProductName", lpReserved=0x0, lpType=0x19f2f8, lpData=0x29c713c, lpcbData=0x19f2f4*=0x1e | out: lpType=0x19f2f8*=0x1, lpData="Windows 10 Pro", lpcbData=0x19f2f4*=0x1e) returned 0x0
	[0239.526] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2d0 | out: phkResult=0x19f2d0*=0x3c0) returned 0x0
	[0239.526] RegQueryValueExW (in: hKey=0x3c0, lpValueName="CSDVersion", lpReserved=0x0, lpType=0x19f2f0, lpData=0x0, lpcbData=0x19f2ec*=0x0 | out: lpType=0x19f2f0*=0x0, lpData=0x0, lpcbData=0x19f2ec*=0x0) returned 0x2
	[0239.567] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe", nBufferLength=0x105, lpBuffer=0x19ede4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe", lpFilePart=0x0) returned 0x62
	[0239.737] CoTaskMemAlloc (cb=0x804) returned 0x710dd0
	[0239.738] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x710dd0, nSize=0x19f36c | out: lpNameBuffer="XC64ZB\\RDhJ0CNFevzX", nSize=0x19f36c) returned 0x1
	[0239.738] CoTaskMemFree (pv=0x710dd0) 
	[0239.738] GetUserNameW (in: lpBuffer=0x19f100, pcbBuffer=0x19f378 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x19f378) returned 1
	[0239.757] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\d2f554a0c84513cd793fdcd77a86dab1\\System.Management.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19b618, lpFilePart=0x19b614 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\d2f554a0c84513cd793fdcd77a86dab1\\System.Management.ni.dll.aux", lpFilePart=0x19b614*="System.Management.ni.dll.aux") returned 0x7e
	[0239.757] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\d2f554a0c84513cd793fdcd77a86dab1\\System.Management.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.management\\d2f554a0c84513cd793fdcd77a86dab1\\system.management.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468
	[0239.758] GetFileSize (in: hFile=0x468, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fc
	[0239.758] ReadFile (in: hFile=0x468, lpBuffer=0x6c1498, nNumberOfBytesToRead=0x2fc, lpNumberOfBytesRead=0x19b8fc, lpOverlapped=0x0 | out: lpBuffer=0x6c1498*, lpNumberOfBytesRead=0x19b8fc*=0x2fc, lpOverlapped=0x0) returned 1
	[0239.760] CloseHandle (hObject=0x468) returned 1
	[0239.797] CloseHandle (hObject=0x468) returned 1
	[0239.818] CloseHandle (hObject=0x468) returned 1
	[0239.961] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d0
	[0239.965] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebc8 | out: ppv=0x19ebc8*=0x66b664) returned 0x0
	[0239.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19de54, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0239.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=63, lpMultiByteStr=0x19e358, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll\x06ò\x18öeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 63
	[0240.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x19e38c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 13
	[0240.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x19e38c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 11
	[0240.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x19e388, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 18
	[0240.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x19e380, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObjectD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 24
	[0240.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x19e388, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 17
	[0240.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x19e388, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValueöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 18
	[0240.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x19e394, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 5
	[0240.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x19e388, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 15
	[0240.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x19e388, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 15
	[0240.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x19e394, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 3
	[0240.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x19e394, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 3
	[0240.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x19e394, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 6
	[0240.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x19e390, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNamesD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 8
	[0240.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x19e388, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumerationD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 16
	[0240.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x19e394, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 4
	[0240.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x19e38c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumerationöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 14
	[0240.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x19e380, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 23
	[0240.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x19e394, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 5
	[0240.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x19e38c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 13
	[0240.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x19e388, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 17
	[0240.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x19e38c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 13
	[0240.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x19e390, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 9
	[0240.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x19e388, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 17
	[0240.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x19e38c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFromD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 12
	[0240.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x19e390, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 9
	[0240.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x19e390, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 9
	[0240.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x19e38c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethodD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 12
	[0240.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x19e384, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumerationöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 22
	[0240.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x19e390, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethodöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 10
	[0240.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x19e384, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumerationD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 20
	[0240.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x19e384, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 21
	[0240.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x19e388, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 15
	[0240.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x19e388, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 16
	[0240.390] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x19e388, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_PutD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 16
	[0240.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x19e384, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 19
	[0240.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x19e384, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 21
	[0240.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x19e37c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 29
	[0240.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x19e388, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 17
	[0240.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x19e37c, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 27
	[0240.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x19e380, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 23
	[0240.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x19e384, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStubD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 20
	[0240.399] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x19e384, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 21
	[0240.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x19e388, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmiöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 18
	[0240.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x19e38c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmiD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 12
	[0240.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x19e380, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmiD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 24
	[0240.436] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x19e38c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmiöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 14
	[0240.438] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x19e38c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi\x06D\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 11
	[0240.438] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x19e380, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObjectD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 24
	[0240.439] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x19e388, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmiD\x1aöeP»\x95÷ «)kPæ\x19", lpUsedDefaultChar=0x0) returned 16
	[0240.442] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19ebc0 | out: pAptType=0x19ebc0*=1) returned 0x0
	[0240.444] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19ebc4 | out: ppvObject=0x19ebc4*=0x0) returned 0x80004002
	[0240.444] IUnknown:Release (This=0x66b664) returned 0x0
	[0240.463] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x19e81c | out: lpiid=0x19e81c) returned 0x0
	[0240.466] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19e530 | out: ppv=0x19e530*=0x7167a8) returned 0x0
	[0241.000] WbemDefPath:IUnknown:QueryInterface (in: This=0x7167a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e748 | out: ppvObject=0x19e748*=0x0) returned 0x80004002
	[0241.000] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7167a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e75c | out: ppvObject=0x19e75c*=0x63e610) returned 0x0
	[0241.002] WbemDefPath:IUnknown:Release (This=0x7167a8) returned 0x0
	[0241.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e610, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e37c | out: ppvObject=0x19e37c*=0x63e610) returned 0x0
	[0241.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e610, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e338 | out: ppvObject=0x19e338*=0x0) returned 0x80004002
	[0241.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e610, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19df2c | out: ppvObject=0x19df2c*=0x0) returned 0x80004002
	[0241.002] WbemDefPath:IUnknown:AddRef (This=0x63e610) returned 0x3
	[0241.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e610, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19dc94 | out: ppvObject=0x19dc94*=0x0) returned 0x80004002
	[0241.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e610, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19dc44 | out: ppvObject=0x19dc44*=0x0) returned 0x80004002
	[0241.002] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e610, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dc50 | out: ppvObject=0x19dc50*=0x6bcdd0) returned 0x0
	[0241.002] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6bcdd0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19dc58 | out: pCid=0x19dc58*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0241.002] WbemDefPath:IUnknown:Release (This=0x6bcdd0) returned 0x3
	[0241.002] CoGetContextToken (in: pToken=0x19dcb0 | out: pToken=0x19dcb0) returned 0x0
	[0241.002] CoGetContextToken (in: pToken=0x19e0b8 | out: pToken=0x19e0b8) returned 0x0
	[0241.003] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e610, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e148 | out: ppvObject=0x19e148*=0x0) returned 0x80004002
	[0241.003] WbemDefPath:IUnknown:Release (This=0x63e610) returned 0x2
	[0241.003] WbemDefPath:IUnknown:Release (This=0x63e610) returned 0x1
	[0241.003] CoGetContextToken (in: pToken=0x19ea40 | out: pToken=0x19ea40) returned 0x0
	[0241.003] CoGetContextToken (in: pToken=0x19e9a0 | out: pToken=0x19e9a0) returned 0x0
	[0241.003] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e610, riid=0x19ea70*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x63e610) returned 0x0
	[0241.003] WbemDefPath:IUnknown:AddRef (This=0x63e610) returned 0x3
	[0241.003] WbemDefPath:IUnknown:Release (This=0x63e610) returned 0x2
	[0241.005] WbemDefPath:IWbemPath:SetText (This=0x63e610, uMode=0x4, pszPath="//./root/cimv2") returned 0x0
	[0241.006] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f2ec | out: puCount=0x19f2ec*=0x2) returned 0x0
	[0241.006] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f2e8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2e8*=0xf, pszText=0x0) returned 0x0
	[0241.006] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f2e8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2e8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0241.010] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f270 | out: ppv=0x19f270*=0x66b664) returned 0x0
	[0241.010] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f268 | out: pAptType=0x19f268*=1) returned 0x0
	[0241.011] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f26c | out: ppvObject=0x19f26c*=0x0) returned 0x80004002
	[0241.011] IUnknown:Release (This=0x66b664) returned 0x0
	[0241.011] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x19f17c | out: lpiid=0x19f17c) returned 0x0
	[0241.012] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee90 | out: ppv=0x19ee90*=0x6bbfd8) returned 0x0
	[0241.176] WbemLocator:IUnknown:QueryInterface (in: This=0x6bbfd8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f0a8 | out: ppvObject=0x19f0a8*=0x0) returned 0x80004002
	[0241.177] WbemLocator:IClassFactory:CreateInstance (in: This=0x6bbfd8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0bc | out: ppvObject=0x19f0bc*=0x716818) returned 0x0
	[0241.178] WbemLocator:IUnknown:Release (This=0x6bbfd8) returned 0x0
	[0241.178] WbemLocator:IUnknown:QueryInterface (in: This=0x716818, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecdc | out: ppvObject=0x19ecdc*=0x716818) returned 0x0
	[0241.178] WbemLocator:IUnknown:QueryInterface (in: This=0x716818, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec98 | out: ppvObject=0x19ec98*=0x0) returned 0x80004002
	[0241.178] WbemLocator:IUnknown:QueryInterface (in: This=0x716818, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e88c | out: ppvObject=0x19e88c*=0x0) returned 0x80004002
	[0241.178] WbemLocator:IUnknown:AddRef (This=0x716818) returned 0x3
	[0241.178] WbemLocator:IUnknown:QueryInterface (in: This=0x716818, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5f4 | out: ppvObject=0x19e5f4*=0x0) returned 0x80004002
	[0241.178] WbemLocator:IUnknown:QueryInterface (in: This=0x716818, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5a4 | out: ppvObject=0x19e5a4*=0x0) returned 0x80004002
	[0241.178] WbemLocator:IUnknown:QueryInterface (in: This=0x716818, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5b0 | out: ppvObject=0x19e5b0*=0x0) returned 0x80004002
	[0241.178] CoGetContextToken (in: pToken=0x19e610 | out: pToken=0x19e610) returned 0x0
	[0241.178] CoGetObjectContext (in: riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6bbed4 | out: ppv=0x6bbed4*=0x66b658) returned 0x0
	[0241.179] CoGetContextToken (in: pToken=0x19ea18 | out: pToken=0x19ea18) returned 0x0
	[0241.179] WbemLocator:IUnknown:QueryInterface (in: This=0x716818, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eaa8 | out: ppvObject=0x19eaa8*=0x0) returned 0x80004002
	[0241.179] WbemLocator:IUnknown:Release (This=0x716818) returned 0x2
	[0241.179] WbemLocator:IUnknown:Release (This=0x716818) returned 0x1
	[0241.180] CoGetContextToken (in: pToken=0x19f088 | out: pToken=0x19f088) returned 0x0
	[0241.180] CoGetContextToken (in: pToken=0x19efe8 | out: pToken=0x19efe8) returned 0x0
	[0241.180] WbemLocator:IUnknown:QueryInterface (in: This=0x716818, riid=0x19f0b8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f0b4 | out: ppvObject=0x19f0b4*=0x716818) returned 0x0
	[0241.180] WbemLocator:IUnknown:AddRef (This=0x716818) returned 0x3
	[0241.180] WbemLocator:IUnknown:Release (This=0x716818) returned 0x2
	[0241.185] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f24c | out: puCount=0x19f24c*=0x2) returned 0x0
	[0241.186] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=8, puBuffLength=0x19f248*=0x0, pszText=0x0 | out: puBuffLength=0x19f248*=0xf, pszText=0x0) returned 0x0
	[0241.186] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=8, puBuffLength=0x19f248*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f248*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0241.199] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f124 | out: ppv=0x19f124*=0x716838) returned 0x0
	[0241.199] WbemLocator:IWbemLocator:ConnectServer (in: This=0x716838, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1b8 | out: ppNamespace=0x19f1b8*=0x709898) returned 0x0
	[0245.061] WbemLocator:IUnknown:QueryInterface (in: This=0x709898, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f054 | out: ppvObject=0x19f054*=0x7048d4) returned 0x0
	[0245.062] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7048d4, pProxy=0x709898, pAuthnSvc=0x19f0a4, pAuthzSvc=0x19f0a0, pServerPrincName=0x19f098, pAuthnLevel=0x19f09c, pImpLevel=0x19f08c, pAuthInfo=0x19f090, pCapabilites=0x19f094 | out: pAuthnSvc=0x19f0a4*=0xa, pAuthzSvc=0x19f0a0*=0x0, pServerPrincName=0x19f098, pAuthnLevel=0x19f09c*=0x6, pImpLevel=0x19f08c*=0x2, pAuthInfo=0x19f090, pCapabilites=0x19f094*=0x1) returned 0x0
	[0245.062] WbemLocator:IUnknown:Release (This=0x7048d4) returned 0x1
	[0245.062] WbemLocator:IUnknown:QueryInterface (in: This=0x709898, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f048 | out: ppvObject=0x19f048*=0x7048f8) returned 0x0
	[0245.062] WbemLocator:IUnknown:QueryInterface (in: This=0x709898, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x7048d4) returned 0x0
	[0245.062] WbemLocator:IClientSecurity:SetBlanket (This=0x7048d4, pProxy=0x709898, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0245.062] WbemLocator:IUnknown:Release (This=0x7048d4) returned 0x2
	[0245.062] WbemLocator:IUnknown:Release (This=0x7048f8) returned 0x1
	[0245.062] CoTaskMemFree (pv=0x69add18) 
	[0245.065] WbemLocator:IUnknown:Release (This=0x716838) returned 0x0
	[0245.065] WbemLocator:IUnknown:QueryInterface (in: This=0x709898, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec44 | out: ppvObject=0x19ec44*=0x7048f8) returned 0x0
	[0245.065] WbemLocator:IUnknown:QueryInterface (in: This=0x7048f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec00 | out: ppvObject=0x19ec00*=0x0) returned 0x80004002
	[0245.067] WbemLocator:IUnknown:QueryInterface (in: This=0x7048f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea1c | out: ppvObject=0x19ea1c*=0x0) returned 0x80004002
	[0245.067] WbemLocator:IUnknown:QueryInterface (in: This=0x709898, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7f4 | out: ppvObject=0x19e7f4*=0x0) returned 0x80004002
	[0245.068] WbemLocator:IUnknown:AddRef (This=0x7048f8) returned 0x3
	[0245.068] WbemLocator:IUnknown:QueryInterface (in: This=0x7048f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0245.068] WbemLocator:IUnknown:QueryInterface (in: This=0x7048f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e50c | out: ppvObject=0x19e50c*=0x0) returned 0x80004002
	[0245.068] WbemLocator:IUnknown:QueryInterface (in: This=0x7048f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e518 | out: ppvObject=0x19e518*=0x704854) returned 0x0
	[0245.068] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x704854, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e520 | out: pCid=0x19e520*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0245.068] WbemLocator:IUnknown:Release (This=0x704854) returned 0x3
	[0245.068] CoGetContextToken (in: pToken=0x19e578 | out: pToken=0x19e578) returned 0x0
	[0245.068] CoGetContextToken (in: pToken=0x19e980 | out: pToken=0x19e980) returned 0x0
	[0245.068] WbemLocator:IUnknown:QueryInterface (in: This=0x7048f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea10 | out: ppvObject=0x19ea10*=0x7048dc) returned 0x0
	[0245.069] WbemLocator:IRpcOptions:Query (in: This=0x7048dc, pPrx=0x7048f8, dwProperty=2, pdwValue=0x19ea38 | out: pdwValue=0x19ea38) returned 0x80004002
	[0245.069] WbemLocator:IUnknown:Release (This=0x7048dc) returned 0x3
	[0245.069] WbemLocator:IUnknown:Release (This=0x7048f8) returned 0x2
	[0245.069] CoGetContextToken (in: pToken=0x19ef58 | out: pToken=0x19ef58) returned 0x0
	[0245.069] CoGetContextToken (in: pToken=0x19eeb8 | out: pToken=0x19eeb8) returned 0x0
	[0245.069] WbemLocator:IUnknown:QueryInterface (in: This=0x7048f8, riid=0x19ef88*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef84 | out: ppvObject=0x19ef84*=0x709898) returned 0x0
	[0245.069] WbemLocator:IUnknown:AddRef (This=0x709898) returned 0x4
	[0245.069] WbemLocator:IUnknown:Release (This=0x709898) returned 0x3
	[0245.069] WbemLocator:IUnknown:Release (This=0x709898) returned 0x2
	[0245.082] SysStringLen (param_1=0x0) returned 0x0
	[0245.083] CoGetContextToken (in: pToken=0x19ef50 | out: pToken=0x19ef50) returned 0x0
	[0245.083] WbemLocator:IUnknown:AddRef (This=0x7048f8) returned 0x3
	[0245.083] WbemLocator:IUnknown:QueryInterface (in: This=0x7048f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ede4 | out: ppvObject=0x19ede4*=0x7048f8) returned 0x0
	[0245.083] WbemLocator:IUnknown:Release (This=0x7048f8) returned 0x3
	[0245.083] WbemLocator:IUnknown:Release (This=0x7048f8) returned 0x2
	[0245.084] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0245.084] WbemLocator:IUnknown:AddRef (This=0x709898) returned 0x3
	[0245.084] IWbemServices:ExecQuery (in: This=0x709898, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_DiskDrive", lFlags=16, pCtx=0x0, ppEnum=0x19f254 | out: ppEnum=0x19f254*=0x6f3b98) returned 0x0
	[0245.098] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0b8 | out: ppvObject=0x19f0b8*=0x6f3b9c) returned 0x0
	[0245.098] IClientSecurity:QueryBlanket (in: This=0x6f3b9c, pProxy=0x6f3b98, pAuthnSvc=0x19f108, pAuthzSvc=0x19f104, pServerPrincName=0x19f0fc, pAuthnLevel=0x19f100, pImpLevel=0x19f0f0, pAuthInfo=0x19f0f4, pCapabilites=0x19f0f8 | out: pAuthnSvc=0x19f108*=0xa, pAuthzSvc=0x19f104*=0x0, pServerPrincName=0x19f0fc, pAuthnLevel=0x19f100*=0x6, pImpLevel=0x19f0f0*=0x2, pAuthInfo=0x19f0f4, pCapabilites=0x19f0f8*=0x1) returned 0x0
	[0245.099] IUnknown:Release (This=0x6f3b9c) returned 0x1
	[0245.099] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0ac | out: ppvObject=0x19f0ac*=0x7059f8) returned 0x0
	[0245.099] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0a8 | out: ppvObject=0x19f0a8*=0x6f3b9c) returned 0x0
	[0245.099] IClientSecurity:SetBlanket (This=0x6f3b9c, pProxy=0x6f3b98, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0245.102] IUnknown:Release (This=0x6f3b9c) returned 0x2
	[0245.103] WbemLocator:IUnknown:Release (This=0x7059f8) returned 0x1
	[0245.103] CoTaskMemFree (pv=0x69ae078) 
	[0245.103] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eca4 | out: ppvObject=0x19eca4*=0x7059f8) returned 0x0
	[0245.103] WbemLocator:IUnknown:QueryInterface (in: This=0x7059f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec60 | out: ppvObject=0x19ec60*=0x0) returned 0x80004002
	[0245.104] WbemLocator:IUnknown:QueryInterface (in: This=0x7059f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea7c | out: ppvObject=0x19ea7c*=0x0) returned 0x80004002
	[0245.104] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0245.105] WbemLocator:IUnknown:AddRef (This=0x7059f8) returned 0x3
	[0245.105] WbemLocator:IUnknown:QueryInterface (in: This=0x7059f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5bc | out: ppvObject=0x19e5bc*=0x0) returned 0x80004002
	[0245.105] WbemLocator:IUnknown:QueryInterface (in: This=0x7059f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e56c | out: ppvObject=0x19e56c*=0x0) returned 0x80004002
	[0245.105] WbemLocator:IUnknown:QueryInterface (in: This=0x7059f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e578 | out: ppvObject=0x19e578*=0x705954) returned 0x0
	[0245.105] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705954, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e580 | out: pCid=0x19e580*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0245.105] WbemLocator:IUnknown:Release (This=0x705954) returned 0x3
	[0245.105] CoGetContextToken (in: pToken=0x19e5d8 | out: pToken=0x19e5d8) returned 0x0
	[0245.105] CoGetContextToken (in: pToken=0x19e9e0 | out: pToken=0x19e9e0) returned 0x0
	[0245.105] WbemLocator:IUnknown:QueryInterface (in: This=0x7059f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea70 | out: ppvObject=0x19ea70*=0x7059dc) returned 0x0
	[0245.105] WbemLocator:IRpcOptions:Query (in: This=0x7059dc, pPrx=0x7059f8, dwProperty=2, pdwValue=0x19ea98 | out: pdwValue=0x19ea98) returned 0x80004002
	[0245.135] WbemLocator:IUnknown:Release (This=0x7059dc) returned 0x3
	[0245.135] WbemLocator:IUnknown:Release (This=0x7059f8) returned 0x2
	[0245.135] CoGetContextToken (in: pToken=0x19efb8 | out: pToken=0x19efb8) returned 0x0
	[0245.135] CoGetContextToken (in: pToken=0x19ef18 | out: pToken=0x19ef18) returned 0x0
	[0245.135] WbemLocator:IUnknown:QueryInterface (in: This=0x7059f8, riid=0x19efe8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efe4 | out: ppvObject=0x19efe4*=0x6f3b98) returned 0x0
	[0245.135] IUnknown:AddRef (This=0x6f3b98) returned 0x4
	[0245.135] IUnknown:Release (This=0x6f3b98) returned 0x3
	[0245.135] IUnknown:Release (This=0x6f3b98) returned 0x2
	[0245.135] WbemLocator:IUnknown:Release (This=0x709898) returned 0x2
	[0245.135] SysStringLen (param_1=0x0) returned 0x0
	[0245.135] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f2a0 | out: puCount=0x19f2a0*=0x2) returned 0x0
	[0245.136] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f29c*=0x0, pszText=0x0 | out: puBuffLength=0x19f29c*=0xf, pszText=0x0) returned 0x0
	[0245.136] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f29c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f29c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0245.138] CoGetContextToken (in: pToken=0x19f0f0 | out: pToken=0x19f0f0) returned 0x0
	[0245.138] IUnknown:AddRef (This=0x6f3b98) returned 0x3
	[0245.138] IEnumWbemClassObject:Clone (in: This=0x6f3b98, ppEnum=0x19f2ac | out: ppEnum=0x19f2ac*=0x6f3c60) returned 0x0
	[0245.143] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f170 | out: ppvObject=0x19f170*=0x6f3c64) returned 0x0
	[0245.143] IClientSecurity:QueryBlanket (in: This=0x6f3c64, pProxy=0x6f3c60, pAuthnSvc=0x19f1c0, pAuthzSvc=0x19f1bc, pServerPrincName=0x19f1b4, pAuthnLevel=0x19f1b8, pImpLevel=0x19f1a8, pAuthInfo=0x19f1ac, pCapabilites=0x19f1b0 | out: pAuthnSvc=0x19f1c0*=0xa, pAuthzSvc=0x19f1bc*=0x0, pServerPrincName=0x19f1b4, pAuthnLevel=0x19f1b8*=0x6, pImpLevel=0x19f1a8*=0x2, pAuthInfo=0x19f1ac, pCapabilites=0x19f1b0*=0x1) returned 0x0
	[0245.143] IUnknown:Release (This=0x6f3c64) returned 0x1
	[0245.144] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f164 | out: ppvObject=0x19f164*=0x7062f8) returned 0x0
	[0245.144] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f160 | out: ppvObject=0x19f160*=0x6f3c64) returned 0x0
	[0245.144] IClientSecurity:SetBlanket (This=0x6f3c64, pProxy=0x6f3c60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0245.146] IUnknown:Release (This=0x6f3c64) returned 0x2
	[0245.146] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x1
	[0245.146] CoTaskMemFree (pv=0x69ae288) 
	[0245.146] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed4c | out: ppvObject=0x19ed4c*=0x7062f8) returned 0x0
	[0245.146] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ed08 | out: ppvObject=0x19ed08*=0x0) returned 0x80004002
	[0245.147] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb24 | out: ppvObject=0x19eb24*=0x0) returned 0x80004002
	[0245.147] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8fc | out: ppvObject=0x19e8fc*=0x0) returned 0x80004002
	[0245.148] WbemLocator:IUnknown:AddRef (This=0x7062f8) returned 0x3
	[0245.148] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e664 | out: ppvObject=0x19e664*=0x0) returned 0x80004002
	[0245.148] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e614 | out: ppvObject=0x19e614*=0x0) returned 0x80004002
	[0245.148] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e620 | out: ppvObject=0x19e620*=0x706254) returned 0x0
	[0245.148] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706254, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e628 | out: pCid=0x19e628*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0245.148] WbemLocator:IUnknown:Release (This=0x706254) returned 0x3
	[0245.148] CoGetContextToken (in: pToken=0x19e680 | out: pToken=0x19e680) returned 0x0
	[0245.148] CoGetContextToken (in: pToken=0x19ea88 | out: pToken=0x19ea88) returned 0x0
	[0245.148] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb18 | out: ppvObject=0x19eb18*=0x7062dc) returned 0x0
	[0245.148] WbemLocator:IRpcOptions:Query (in: This=0x7062dc, pPrx=0x7062f8, dwProperty=2, pdwValue=0x19eb40 | out: pdwValue=0x19eb40) returned 0x80004002
	[0245.148] WbemLocator:IUnknown:Release (This=0x7062dc) returned 0x3
	[0245.148] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x2
	[0245.148] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0245.148] CoGetContextToken (in: pToken=0x19efc0 | out: pToken=0x19efc0) returned 0x0
	[0245.149] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x19f090*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f08c | out: ppvObject=0x19f08c*=0x6f3c60) returned 0x0
	[0245.149] IUnknown:AddRef (This=0x6f3c60) returned 0x4
	[0245.149] IUnknown:Release (This=0x6f3c60) returned 0x3
	[0245.149] IUnknown:Release (This=0x6f3c60) returned 0x2
	[0245.149] IUnknown:Release (This=0x6f3b98) returned 0x2
	[0245.149] SysStringLen (param_1=0x0) returned 0x0
	[0245.149] IEnumWbemClassObject:Reset (This=0x6f3c60) returned 0x0
	[0245.372] CoTaskMemAlloc (cb=0x4) returned 0x69b0cb8
	[0245.372] IEnumWbemClassObject:Next (in: This=0x6f3c60, lTimeout=-1, uCount=0x1, apObjects=0x69b0cb8, puReturned=0x29cf378 | out: apObjects=0x69b0cb8*=0x658cb8, puReturned=0x29cf378*=0x1) returned 0x0
	[0245.537] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e918 | out: ppvObject=0x19e918*=0x658cb8) returned 0x0
	[0245.537] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e8d4 | out: ppvObject=0x19e8d4*=0x0) returned 0x80004002
	[0245.537] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6f4 | out: ppvObject=0x19e6f4*=0x0) returned 0x80004002
	[0245.537] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e4cc | out: ppvObject=0x19e4cc*=0x0) returned 0x80004002
	[0245.538] IUnknown:AddRef (This=0x658cb8) returned 0x3
	[0245.538] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e234 | out: ppvObject=0x19e234*=0x0) returned 0x80004002
	[0245.538] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e1e4 | out: ppvObject=0x19e1e4*=0x0) returned 0x80004002
	[0245.538] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1f0 | out: ppvObject=0x19e1f0*=0x658cbc) returned 0x0
	[0245.538] IMarshal:GetUnmarshalClass (in: This=0x658cbc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e1f8 | out: pCid=0x19e1f8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0245.538] IUnknown:Release (This=0x658cbc) returned 0x3
	[0245.538] CoGetContextToken (in: pToken=0x19e250 | out: pToken=0x19e250) returned 0x0
	[0245.538] CoGetContextToken (in: pToken=0x19e658 | out: pToken=0x19e658) returned 0x0
	[0245.538] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e6e8 | out: ppvObject=0x19e6e8*=0x0) returned 0x80004002
	[0245.539] IUnknown:Release (This=0x658cb8) returned 0x2
	[0245.539] CoGetContextToken (in: pToken=0x19ec28 | out: pToken=0x19ec28) returned 0x0
	[0245.539] CoGetContextToken (in: pToken=0x19eb88 | out: pToken=0x19eb88) returned 0x0
	[0245.539] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x19ec58*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec54 | out: ppvObject=0x19ec54*=0x658cb8) returned 0x0
	[0245.539] IUnknown:AddRef (This=0x658cb8) returned 0x4
	[0245.539] IUnknown:Release (This=0x658cb8) returned 0x3
	[0245.539] IUnknown:Release (This=0x658cb8) returned 0x2
	[0245.539] CoTaskMemFree (pv=0x69b0cb8) 
	[0245.539] CoGetContextToken (in: pToken=0x19ef90 | out: pToken=0x19ef90) returned 0x0
	[0245.539] IUnknown:AddRef (This=0x658cb8) returned 0x3
	[0245.544] IWbemClassObject:Get (in: This=0x658cb8, wszName="__GENUS", lFlags=0, pVal=0x19f29c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f31c*=0, plFlavor=0x19f318*=0 | out: pVal=0x19f29c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f31c*=3, plFlavor=0x19f318*=64) returned 0x0
	[0245.546] IWbemClassObject:Get (in: This=0x658cb8, wszName="__PATH", lFlags=0, pVal=0x19f280*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f304*=0, plFlavor=0x19f300*=0 | out: pVal=0x19f280*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_DiskDrive.DeviceID=\"\\\\\\\\.\\\\PHYSICALDRIVE0\"", varVal2=0x0), pType=0x19f304*=8, plFlavor=0x19f300*=64) returned 0x0
	[0245.548] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_DiskDrive.DeviceID=\"\\\\\\\\.\\\\PHYSICALDRIVE0\"") returned 0x88
	[0245.548] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_DiskDrive.DeviceID=\"\\\\\\\\.\\\\PHYSICALDRIVE0\"") returned 0x88
	[0245.548] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f2ac | out: ppv=0x19f2ac*=0x66b664) returned 0x0
	[0245.548] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f2a4 | out: pAptType=0x19f2a4*=1) returned 0x0
	[0245.548] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f2a8 | out: ppvObject=0x19f2a8*=0x0) returned 0x80004002
	[0245.548] IUnknown:Release (This=0x66b664) returned 0x1
	[0245.549] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec18 | out: ppv=0x19ec18*=0x69b81b8) returned 0x0
	[0245.550] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b81b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee30 | out: ppvObject=0x19ee30*=0x0) returned 0x80004002
	[0245.550] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b81b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee44 | out: ppvObject=0x19ee44*=0x63e680) returned 0x0
	[0245.550] WbemDefPath:IUnknown:Release (This=0x69b81b8) returned 0x0
	[0245.550] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e680, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea64 | out: ppvObject=0x19ea64*=0x63e680) returned 0x0
	[0245.550] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e680, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ea20 | out: ppvObject=0x19ea20*=0x0) returned 0x80004002
	[0245.550] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e680, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e614 | out: ppvObject=0x19e614*=0x0) returned 0x80004002
	[0245.550] WbemDefPath:IUnknown:AddRef (This=0x63e680) returned 0x3
	[0245.550] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e680, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e37c | out: ppvObject=0x19e37c*=0x0) returned 0x80004002
	[0245.550] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e680, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e32c | out: ppvObject=0x19e32c*=0x0) returned 0x80004002
	[0245.551] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e680, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e338 | out: ppvObject=0x19e338*=0x6bc2c0) returned 0x0
	[0245.551] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6bc2c0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e340 | out: pCid=0x19e340*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0245.551] WbemDefPath:IUnknown:Release (This=0x6bc2c0) returned 0x3
	[0245.551] CoGetContextToken (in: pToken=0x19e398 | out: pToken=0x19e398) returned 0x0
	[0245.551] CoGetContextToken (in: pToken=0x19e7a0 | out: pToken=0x19e7a0) returned 0x0
	[0245.551] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e680, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x0) returned 0x80004002
	[0245.551] WbemDefPath:IUnknown:Release (This=0x63e680) returned 0x2
	[0245.551] WbemDefPath:IUnknown:Release (This=0x63e680) returned 0x1
	[0245.551] CoGetContextToken (in: pToken=0x19f128 | out: pToken=0x19f128) returned 0x0
	[0245.551] CoGetContextToken (in: pToken=0x19f088 | out: pToken=0x19f088) returned 0x0
	[0245.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e680, riid=0x19f158*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f154 | out: ppvObject=0x19f154*=0x63e680) returned 0x0
	[0245.552] WbemDefPath:IUnknown:AddRef (This=0x63e680) returned 0x3
	[0245.552] WbemDefPath:IUnknown:Release (This=0x63e680) returned 0x2
	[0245.552] WbemDefPath:IWbemPath:SetText (This=0x63e680, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_DiskDrive.DeviceID=\"\\\\\\\\.\\\\PHYSICALDRIVE0\"") returned 0x0
	[0245.552] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f2d8 | out: puCount=0x19f2d8*=0x2) returned 0x0
	[0245.552] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f2d4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2d4*=0xf, pszText=0x0) returned 0x0
	[0245.552] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f2d4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2d4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0245.556] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f2a4 | out: puCount=0x19f2a4*=0x2) returned 0x0
	[0245.556] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f2a0*=0x0, pszText=0x0 | out: puBuffLength=0x19f2a0*=0xf, pszText=0x0) returned 0x0
	[0245.556] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f2a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2a0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0245.556] IWbemClassObject:Get (in: This=0x658cb8, wszName="SerialNumber", lFlags=0, pVal=0x19f2a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29cfc58*=0, plFlavor=0x29cfc5c*=0 | out: pVal=0x19f2a0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="I0J05L606GQ57D1", varVal2=0x0), pType=0x29cfc58*=8, plFlavor=0x29cfc5c*=0) returned 0x0
	[0245.556] SysStringByteLen (bstr="I0J05L606GQ57D1") returned 0x1e
	[0245.556] SysStringByteLen (bstr="I0J05L606GQ57D1") returned 0x1e
	[0245.557] IWbemClassObject:Get (in: This=0x658cb8, wszName="SerialNumber", lFlags=0, pVal=0x19f2a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29cfc58*=8, plFlavor=0x29cfc5c*=0 | out: pVal=0x19f2a8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="I0J05L606GQ57D1", varVal2=0x0), pType=0x29cfc58*=8, plFlavor=0x29cfc5c*=0) returned 0x0
	[0245.557] SysStringByteLen (bstr="I0J05L606GQ57D1") returned 0x1e
	[0245.557] SysStringByteLen (bstr="I0J05L606GQ57D1") returned 0x1e
	[0245.563] CoGetContextToken (in: pToken=0x19f1d8 | out: pToken=0x19f1d8) returned 0x0
	[0245.564] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x1
	[0245.564] IUnknown:Release (This=0x6f3c60) returned 0x0
	[0245.614] CoGetContextToken (in: pToken=0x19f1d8 | out: pToken=0x19f1d8) returned 0x0
	[0245.614] WbemLocator:IUnknown:Release (This=0x7059f8) returned 0x1
	[0245.614] IUnknown:Release (This=0x6f3b98) returned 0x0
	[0245.668] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x19f348 | out: pfEnabled=0x19f348) returned 0x0
	[0246.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.CSharp\\4b4bc9f75377aaea11113089f0188e82\\Microsoft.CSharp.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19b6e8, lpFilePart=0x19b6e4 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.CSharp\\4b4bc9f75377aaea11113089f0188e82\\Microsoft.CSharp.ni.dll.aux", lpFilePart=0x19b6e4*="Microsoft.CSharp.ni.dll.aux") returned 0x7c
	[0246.018] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.CSharp\\4b4bc9f75377aaea11113089f0188e82\\Microsoft.CSharp.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.csharp\\4b4bc9f75377aaea11113089f0188e82\\microsoft.csharp.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x49c
	[0246.019] GetFileSize (in: hFile=0x49c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bc
	[0246.019] ReadFile (in: hFile=0x49c, lpBuffer=0x69b9b08, nNumberOfBytesToRead=0x2bc, lpNumberOfBytesRead=0x19b9cc, lpOverlapped=0x0 | out: lpBuffer=0x69b9b08*, lpNumberOfBytesRead=0x19b9cc*=0x2bc, lpOverlapped=0x0) returned 1
	[0246.021] CloseHandle (hObject=0x49c) returned 1
	[0246.052] CloseHandle (hObject=0x49c) returned 1
	[0247.775] GdiplusStartup (in: token=0x6ce6e30, input=0x19e7f0, output=0x19e840 | out: token=0x6ce6e30, output=0x19e840) returned 0x0
	[0247.784] GdipCreateFromHWND (hwnd=0x0, graphics=0x19f2dc) returned 0x0
	[0247.796] GdipGetDC (graphics=0x6fc1f08, hdc=0x19f2f4) returned 0x0
	[0247.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdi32", cchWideChar=5, lpMultiByteStr=0x19f294, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gdi32ñá\x06P»\x95÷ «)khö\x19", lpUsedDefaultChar=0x0) returned 5
	[0247.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDeviceCaps", cchWideChar=13, lpMultiByteStr=0x19f28c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDeviceCapsòá\x06P»\x95÷ «)khö\x19", lpUsedDefaultChar=0x0) returned 13
	[0247.958] GdipReleaseDC (graphics=0x6fc1f08, hdc=0xb01078b) returned 0x0
	[0248.035] GdipDeleteGraphics (graphics=0x6fc1f08) returned 0x0
	[0248.042] GetSystemMetrics (nIndex=80) returned 1
	[0248.049] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x4920db6, dwData=0x0) returned 1
	[0248.054] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19f0a4 | out: lpmi=0x19f0a4) returned 1
	[0248.057] DeleteDC (hdc=0xab0107b3) returned 1
	[0248.064] GetProcessWindowStation () returned 0x9c
	[0248.065] GetUserObjectInformationA (in: hObj=0x9c, nIndex=1, pvInfo=0x29e6b70, nLength=0xc, lpnLengthNeeded=0x19f280 | out: pvInfo=0x29e6b70, lpnLengthNeeded=0x19f280) returned 1
	[0248.066] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4b4
	[0248.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dynamic\\f7209dae192c8b5254852d8a975aed4e\\System.Dynamic.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19c768, lpFilePart=0x19c764 | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dynamic\\f7209dae192c8b5254852d8a975aed4e\\System.Dynamic.ni.dll.aux", lpFilePart=0x19c764*="System.Dynamic.ni.dll.aux") returned 0x78
	[0248.146] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dynamic\\f7209dae192c8b5254852d8a975aed4e\\System.Dynamic.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.dynamic\\f7209dae192c8b5254852d8a975aed4e\\system.dynamic.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4cc
	[0248.169] GetFileSize (in: hFile=0x4cc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x218
	[0248.169] ReadFile (in: hFile=0x4cc, lpBuffer=0x69bcb18, nNumberOfBytesToRead=0x218, lpNumberOfBytesRead=0x19ca4c, lpOverlapped=0x0 | out: lpBuffer=0x69bcb18*, lpNumberOfBytesRead=0x19ca4c*=0x218, lpOverlapped=0x0) returned 1
	[0248.170] CloseHandle (hObject=0x4cc) returned 1
	[0248.564] CoCreateGuid (in: pguid=0x19e3a0 | out: pguid=0x19e3a0*(Data1=0x2bf982c9, Data2=0x8aac, Data3=0x4085, Data4=([0]=0xaf, [1]=0x6c, [2]=0x8d, [3]=0x67, [4]=0xbe, [5]=0x39, [6]=0x9e, [7]=0x13))) returned 0x0
	[0248.706] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%", lpDst=0x19f174, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0248.706] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%\\Desktop", lpDst=0x19f174, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1e
	[0248.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0248.827] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0248.829] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0248.830] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*.txt"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0248.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0248.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0248.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0248.834] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0248.834] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0248.835] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*.doc*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*.doc*"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e6a620, ftCreationTime.dwHighDateTime=0x1d85222, ftLastAccessTime.dwLowDateTime=0x1cc03570, ftLastAccessTime.dwHighDateTime=0x1d85792, ftLastWriteTime.dwLowDateTime=0x1cc03570, ftLastWriteTime.dwHighDateTime=0x1d85792, nFileSizeHigh=0x0, nFileSizeLow=0xc996, dwReserved0=0x0, dwReserved1=0x0, cFileName="T05isiO8GXB-NjXTwm.docx", cAlternateFileName="T05ISI~1.DOC")) returned 0x6f75d8
	[0248.836] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ef54 | out: lpFindFileData=0x19ef54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0248.836] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0248.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0248.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0248.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0248.836] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0248.837] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0248.837] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*key*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*key*"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0248.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0248.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0248.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0248.837] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0248.837] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0248.838] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*wallet*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*wallet*"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0248.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0248.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0248.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0248.838] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0248.839] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e
	[0248.840] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*seed*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*seed*"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0248.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0248.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0248.873] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", nBufferLength=0x105, lpBuffer=0x19edbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", lpFilePart=0x0) returned 0x35
	[0248.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f268) returned 1
	[0248.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\t05isio8gxb-njxtwm.docx"), fInfoLevelId=0x0, lpFileInformation=0x2a62320 | out: lpFileInformation=0x2a62320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e6a620, ftCreationTime.dwHighDateTime=0x1d85222, ftLastAccessTime.dwLowDateTime=0x1cc03570, ftLastAccessTime.dwHighDateTime=0x1d85792, ftLastWriteTime.dwLowDateTime=0x1cc03570, ftLastWriteTime.dwHighDateTime=0x1d85792, nFileSizeHigh=0x0, nFileSizeLow=0xc996)) returned 1
	[0248.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f264) returned 1
	[0248.874] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", nBufferLength=0x105, lpBuffer=0x19ed8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", lpFilePart=0x0) returned 0x35
	[0248.874] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0248.874] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d
	[0248.874] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", lpFilePart=0x0) returned 0x35
	[0249.085] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", lpFilePart=0x0) returned 0x35
	[0249.094] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", lpFilePart=0x0) returned 0x35
	[0249.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1cc) returned 1
	[0249.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\t05isio8gxb-njxtwm.docx"), fInfoLevelId=0x0, lpFileInformation=0x19f248 | out: lpFileInformation=0x19f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e6a620, ftCreationTime.dwHighDateTime=0x1d85222, ftLastAccessTime.dwLowDateTime=0x1cc03570, ftLastAccessTime.dwHighDateTime=0x1d85792, ftLastWriteTime.dwLowDateTime=0x1cc03570, ftLastWriteTime.dwHighDateTime=0x1d85792, nFileSizeHigh=0x0, nFileSizeLow=0xc996)) returned 1
	[0249.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0249.094] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", lpFilePart=0x0) returned 0x35
	[0249.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f19c) returned 1
	[0249.095] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", nBufferLength=0x104, lpBuffer=0x19ee9c, lpFilePart=0x19ee98 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx", lpFilePart=0x19ee98*="T05isiO8GXB-NjXTwm.docx") returned 0x35
	[0249.095] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\T05isiO8GXB-NjXTwm.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\t05isio8gxb-njxtwm.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc
	[0249.095] GetFileType (hFile=0x4dc) returned 0x1
	[0249.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f198) returned 1
	[0249.096] GetFileType (hFile=0x4dc) returned 0x1
	[0249.114] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.115] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.116] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.116] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.117] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.117] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.119] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.119] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.119] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.120] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.120] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.121] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.121] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x996, lpOverlapped=0x0) returned 1
	[0249.122] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a6346e, nNumberOfBytesToRead=0x26a, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a6346e*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.122] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a63f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a63f44*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.146] CloseHandle (hObject=0x4dc) returned 1
	[0249.154] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%", lpDst=0x19f174, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0249.154] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%\\Documents", lpDst=0x19f174, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\Documents") returned 0x20
	[0249.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0249.154] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.154] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0249.154] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*.txt"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0249.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0249.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0249.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0249.155] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.156] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0249.156] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*.doc*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*.doc*"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa065c0, ftCreationTime.dwHighDateTime=0x1d81621, ftLastAccessTime.dwLowDateTime=0x7aa94ce0, ftLastAccessTime.dwHighDateTime=0x1d81b32, ftLastWriteTime.dwLowDateTime=0x7aa94ce0, ftLastWriteTime.dwHighDateTime=0x1d81b32, nFileSizeHigh=0x0, nFileSizeLow=0xfbd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="a7 --8Po0AoukNl.docx", cAlternateFileName="A7--8P~1.DOC")) returned 0x6f75d8
	[0249.156] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ef54 | out: lpFindFileData=0x19ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83ced510, ftCreationTime.dwHighDateTime=0x1d7f1d4, ftLastAccessTime.dwLowDateTime=0x76013950, ftLastAccessTime.dwHighDateTime=0x1d835a4, ftLastWriteTime.dwLowDateTime=0x76013950, ftLastWriteTime.dwHighDateTime=0x1d835a4, nFileSizeHigh=0x0, nFileSizeLow=0x8e66, dwReserved0=0x0, dwReserved1=0x0, cFileName="bHmBmkJSpy df6.docx", cAlternateFileName="BHMBMK~1.DOC")) returned 1
	[0249.156] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ef54 | out: lpFindFileData=0x19ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa728c170, ftCreationTime.dwHighDateTime=0x1d84e17, ftLastAccessTime.dwLowDateTime=0xadd201b0, ftLastAccessTime.dwHighDateTime=0x1d851ed, ftLastWriteTime.dwLowDateTime=0xadd201b0, ftLastWriteTime.dwHighDateTime=0x1d851ed, nFileSizeHigh=0x0, nFileSizeLow=0x3aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQTv.doc", cAlternateFileName="")) returned 1
	[0249.156] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ef54 | out: lpFindFileData=0x19ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa772b6c0, ftCreationTime.dwHighDateTime=0x1d80a3f, ftLastAccessTime.dwLowDateTime=0xa3a84700, ftLastAccessTime.dwHighDateTime=0x1d81e24, ftLastWriteTime.dwLowDateTime=0xa3a84700, ftLastWriteTime.dwHighDateTime=0x1d81e24, nFileSizeHigh=0x0, nFileSizeLow=0x9fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUydxh.docx", cAlternateFileName="FUYDXH~1.DOC")) returned 1
	[0249.157] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ef54 | out: lpFindFileData=0x19ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c10120, ftCreationTime.dwHighDateTime=0x1d85596, ftLastAccessTime.dwLowDateTime=0x6a8218c0, ftLastAccessTime.dwHighDateTime=0x1d858b7, ftLastWriteTime.dwLowDateTime=0x6a8218c0, ftLastWriteTime.dwHighDateTime=0x1d858b7, nFileSizeHigh=0x0, nFileSizeLow=0xc6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="p0bl-yhDJpSn.docx", cAlternateFileName="P0BL-Y~1.DOC")) returned 1
	[0249.157] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ef54 | out: lpFindFileData=0x19ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3109b20, ftCreationTime.dwHighDateTime=0x1d7d9ec, ftLastAccessTime.dwLowDateTime=0x2ca3e6e0, ftLastAccessTime.dwHighDateTime=0x1d849ef, ftLastWriteTime.dwLowDateTime=0x2ca3e6e0, ftLastWriteTime.dwHighDateTime=0x1d849ef, nFileSizeHigh=0x0, nFileSizeLow=0x1188d, dwReserved0=0x0, dwReserved1=0x0, cFileName="_o4ZsTQ.docx", cAlternateFileName="_O4ZST~1.DOC")) returned 1
	[0249.157] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ef54 | out: lpFindFileData=0x19ef54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0249.157] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0249.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0249.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0249.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0249.158] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.158] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0249.158] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*key*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*key*"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0249.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0249.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0249.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0249.158] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.158] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0249.159] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*wallet*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*wallet*"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0249.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0249.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0249.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f21c) returned 1
	[0249.159] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.159] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\", nBufferLength=0x105, lpBuffer=0x19ecf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\", lpFilePart=0x0) returned 0x20
	[0249.159] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*seed*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*seed*"), lpFindFileData=0x19ef44 | out: lpFindFileData=0x19ef44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0249.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0249.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1e8) returned 1
	[0249.160] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", nBufferLength=0x105, lpBuffer=0x19edbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", lpFilePart=0x0) returned 0x34
	[0249.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f268) returned 1
	[0249.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\a7 --8po0aouknl.docx"), fInfoLevelId=0x0, lpFileInformation=0x2a90834 | out: lpFileInformation=0x2a90834*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa065c0, ftCreationTime.dwHighDateTime=0x1d81621, ftLastAccessTime.dwLowDateTime=0x7aa94ce0, ftLastAccessTime.dwHighDateTime=0x1d81b32, ftLastWriteTime.dwLowDateTime=0x7aa94ce0, ftLastWriteTime.dwHighDateTime=0x1d81b32, nFileSizeHigh=0x0, nFileSizeLow=0xfbd1)) returned 1
	[0249.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f264) returned 1
	[0249.160] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", nBufferLength=0x105, lpBuffer=0x19ed8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", lpFilePart=0x0) returned 0x34
	[0249.160] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.160] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.161] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", lpFilePart=0x0) returned 0x34
	[0249.161] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", lpFilePart=0x0) returned 0x34
	[0249.161] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", lpFilePart=0x0) returned 0x34
	[0249.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1cc) returned 1
	[0249.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\a7 --8po0aouknl.docx"), fInfoLevelId=0x0, lpFileInformation=0x19f248 | out: lpFileInformation=0x19f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa065c0, ftCreationTime.dwHighDateTime=0x1d81621, ftLastAccessTime.dwLowDateTime=0x7aa94ce0, ftLastAccessTime.dwHighDateTime=0x1d81b32, ftLastWriteTime.dwLowDateTime=0x7aa94ce0, ftLastWriteTime.dwHighDateTime=0x1d81b32, nFileSizeHigh=0x0, nFileSizeLow=0xfbd1)) returned 1
	[0249.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0249.161] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", lpFilePart=0x0) returned 0x34
	[0249.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f19c) returned 1
	[0249.161] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", nBufferLength=0x104, lpBuffer=0x19ee9c, lpFilePart=0x19ee98 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx", lpFilePart=0x19ee98*="a7 --8Po0AoukNl.docx") returned 0x34
	[0249.161] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\a7 --8Po0AoukNl.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\a7 --8po0aouknl.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc
	[0249.161] GetFileType (hFile=0x4dc) returned 0x1
	[0249.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f198) returned 1
	[0249.162] GetFileType (hFile=0x4dc) returned 0x1
	[0249.162] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.164] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.164] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.165] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.166] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.166] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.167] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.168] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.168] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.169] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.170] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.170] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.171] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.171] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.172] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.173] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0xbd1, lpOverlapped=0x0) returned 1
	[0249.173] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a918ad, nNumberOfBytesToRead=0x2f, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a918ad*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.188] ReadFile (in: hFile=0x4dc, lpBuffer=0x2a9213c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2a9213c*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.206] CloseHandle (hObject=0x4dc) returned 1
	[0249.206] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", nBufferLength=0x105, lpBuffer=0x19edbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", lpFilePart=0x0) returned 0x33
	[0249.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f268) returned 1
	[0249.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\bhmbmkjspy df6.docx"), fInfoLevelId=0x0, lpFileInformation=0x2ac6304 | out: lpFileInformation=0x2ac6304*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83ced510, ftCreationTime.dwHighDateTime=0x1d7f1d4, ftLastAccessTime.dwLowDateTime=0x76013950, ftLastAccessTime.dwHighDateTime=0x1d835a4, ftLastWriteTime.dwLowDateTime=0x76013950, ftLastWriteTime.dwHighDateTime=0x1d835a4, nFileSizeHigh=0x0, nFileSizeLow=0x8e66)) returned 1
	[0249.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f264) returned 1
	[0249.207] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", nBufferLength=0x105, lpBuffer=0x19ed8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", lpFilePart=0x0) returned 0x33
	[0249.207] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.207] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.207] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", lpFilePart=0x0) returned 0x33
	[0249.207] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", lpFilePart=0x0) returned 0x33
	[0249.207] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", lpFilePart=0x0) returned 0x33
	[0249.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1cc) returned 1
	[0249.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\bhmbmkjspy df6.docx"), fInfoLevelId=0x0, lpFileInformation=0x19f248 | out: lpFileInformation=0x19f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83ced510, ftCreationTime.dwHighDateTime=0x1d7f1d4, ftLastAccessTime.dwLowDateTime=0x76013950, ftLastAccessTime.dwHighDateTime=0x1d835a4, ftLastWriteTime.dwLowDateTime=0x76013950, ftLastWriteTime.dwHighDateTime=0x1d835a4, nFileSizeHigh=0x0, nFileSizeLow=0x8e66)) returned 1
	[0249.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0249.207] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", lpFilePart=0x0) returned 0x33
	[0249.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f19c) returned 1
	[0249.208] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", nBufferLength=0x104, lpBuffer=0x19ee9c, lpFilePart=0x19ee98 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx", lpFilePart=0x19ee98*="bHmBmkJSpy df6.docx") returned 0x33
	[0249.208] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\bHmBmkJSpy df6.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\bhmbmkjspy df6.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc
	[0249.208] GetFileType (hFile=0x4dc) returned 0x1
	[0249.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f198) returned 1
	[0249.208] GetFileType (hFile=0x4dc) returned 0x1
	[0249.208] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.210] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.210] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.212] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.212] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.213] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.213] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.213] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.214] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0xe66, lpOverlapped=0x0) returned 1
	[0249.214] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac71ea, nNumberOfBytesToRead=0x19a, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac71ea*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.215] ReadFile (in: hFile=0x4dc, lpBuffer=0x2ac7be4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2ac7be4*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.217] CloseHandle (hObject=0x4dc) returned 1
	[0249.218] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", nBufferLength=0x105, lpBuffer=0x19edbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", lpFilePart=0x0) returned 0x28
	[0249.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f268) returned 1
	[0249.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\eqtv.doc"), fInfoLevelId=0x0, lpFileInformation=0x2af7270 | out: lpFileInformation=0x2af7270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa728c170, ftCreationTime.dwHighDateTime=0x1d84e17, ftLastAccessTime.dwLowDateTime=0xadd201b0, ftLastAccessTime.dwHighDateTime=0x1d851ed, ftLastWriteTime.dwLowDateTime=0xadd201b0, ftLastWriteTime.dwHighDateTime=0x1d851ed, nFileSizeHigh=0x0, nFileSizeLow=0x3aeb)) returned 1
	[0249.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f264) returned 1
	[0249.218] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", nBufferLength=0x105, lpBuffer=0x19ed8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", lpFilePart=0x0) returned 0x28
	[0249.218] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.218] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.218] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", lpFilePart=0x0) returned 0x28
	[0249.218] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", lpFilePart=0x0) returned 0x28
	[0249.218] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", lpFilePart=0x0) returned 0x28
	[0249.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1cc) returned 1
	[0249.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\eqtv.doc"), fInfoLevelId=0x0, lpFileInformation=0x19f248 | out: lpFileInformation=0x19f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa728c170, ftCreationTime.dwHighDateTime=0x1d84e17, ftLastAccessTime.dwLowDateTime=0xadd201b0, ftLastAccessTime.dwHighDateTime=0x1d851ed, ftLastWriteTime.dwLowDateTime=0xadd201b0, ftLastWriteTime.dwHighDateTime=0x1d851ed, nFileSizeHigh=0x0, nFileSizeLow=0x3aeb)) returned 1
	[0249.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0249.219] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", lpFilePart=0x0) returned 0x28
	[0249.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f19c) returned 1
	[0249.219] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", nBufferLength=0x104, lpBuffer=0x19ee9c, lpFilePart=0x19ee98 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc", lpFilePart=0x19ee98*="EQTv.doc") returned 0x28
	[0249.219] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\EQTv.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\eqtv.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc
	[0249.219] GetFileType (hFile=0x4dc) returned 0x1
	[0249.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f198) returned 1
	[0249.219] GetFileType (hFile=0x4dc) returned 0x1
	[0249.220] ReadFile (in: hFile=0x4dc, lpBuffer=0x2af8a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2af8a88*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.221] ReadFile (in: hFile=0x4dc, lpBuffer=0x2af8a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2af8a88*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.222] ReadFile (in: hFile=0x4dc, lpBuffer=0x2af8a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2af8a88*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.223] ReadFile (in: hFile=0x4dc, lpBuffer=0x2af8a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2af8a88*, lpNumberOfBytesRead=0x19f208*=0xaeb, lpOverlapped=0x0) returned 1
	[0249.223] ReadFile (in: hFile=0x4dc, lpBuffer=0x2af8113, nNumberOfBytesToRead=0x115, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2af8113*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.223] ReadFile (in: hFile=0x4dc, lpBuffer=0x2af8a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2af8a88*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.224] CloseHandle (hObject=0x4dc) returned 1
	[0249.224] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", nBufferLength=0x105, lpBuffer=0x19edbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", lpFilePart=0x0) returned 0x2b
	[0249.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f268) returned 1
	[0249.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\fuydxh.docx"), fInfoLevelId=0x0, lpFileInformation=0x2b0caa8 | out: lpFileInformation=0x2b0caa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa772b6c0, ftCreationTime.dwHighDateTime=0x1d80a3f, ftLastAccessTime.dwLowDateTime=0xa3a84700, ftLastAccessTime.dwHighDateTime=0x1d81e24, ftLastWriteTime.dwLowDateTime=0xa3a84700, ftLastWriteTime.dwHighDateTime=0x1d81e24, nFileSizeHigh=0x0, nFileSizeLow=0x9fa)) returned 1
	[0249.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f264) returned 1
	[0249.225] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", nBufferLength=0x105, lpBuffer=0x19ed8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", lpFilePart=0x0) returned 0x2b
	[0249.225] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.225] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.225] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", lpFilePart=0x0) returned 0x2b
	[0249.225] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", lpFilePart=0x0) returned 0x2b
	[0249.225] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", lpFilePart=0x0) returned 0x2b
	[0249.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1cc) returned 1
	[0249.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\fuydxh.docx"), fInfoLevelId=0x0, lpFileInformation=0x19f248 | out: lpFileInformation=0x19f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa772b6c0, ftCreationTime.dwHighDateTime=0x1d80a3f, ftLastAccessTime.dwLowDateTime=0xa3a84700, ftLastAccessTime.dwHighDateTime=0x1d81e24, ftLastWriteTime.dwLowDateTime=0xa3a84700, ftLastWriteTime.dwHighDateTime=0x1d81e24, nFileSizeHigh=0x0, nFileSizeLow=0x9fa)) returned 1
	[0249.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0249.226] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", lpFilePart=0x0) returned 0x2b
	[0249.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f19c) returned 1
	[0249.226] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", nBufferLength=0x104, lpBuffer=0x19ee9c, lpFilePart=0x19ee98 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx", lpFilePart=0x19ee98*="FUydxh.docx") returned 0x2b
	[0249.226] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\FUydxh.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\fuydxh.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc
	[0249.226] GetFileType (hFile=0x4dc) returned 0x1
	[0249.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f198) returned 1
	[0249.226] GetFileType (hFile=0x4dc) returned 0x1
	[0249.227] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b0e2e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b0e2e8*, lpNumberOfBytesRead=0x19f208*=0x9fa, lpOverlapped=0x0) returned 1
	[0249.232] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b0d882, nNumberOfBytesToRead=0x206, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b0d882*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.232] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b0e2e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b0e2e8*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.233] CloseHandle (hObject=0x4dc) returned 1
	[0249.233] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", nBufferLength=0x105, lpBuffer=0x19edbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", lpFilePart=0x0) returned 0x31
	[0249.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f268) returned 1
	[0249.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\p0bl-yhdjpsn.docx"), fInfoLevelId=0x0, lpFileInformation=0x2b13194 | out: lpFileInformation=0x2b13194*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c10120, ftCreationTime.dwHighDateTime=0x1d85596, ftLastAccessTime.dwLowDateTime=0x6a8218c0, ftLastAccessTime.dwHighDateTime=0x1d858b7, ftLastWriteTime.dwLowDateTime=0x6a8218c0, ftLastWriteTime.dwHighDateTime=0x1d858b7, nFileSizeHigh=0x0, nFileSizeLow=0xc6de)) returned 1
	[0249.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f264) returned 1
	[0249.234] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", nBufferLength=0x105, lpBuffer=0x19ed8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", lpFilePart=0x0) returned 0x31
	[0249.234] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.234] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.234] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", lpFilePart=0x0) returned 0x31
	[0249.234] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", lpFilePart=0x0) returned 0x31
	[0249.234] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", lpFilePart=0x0) returned 0x31
	[0249.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1cc) returned 1
	[0249.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\p0bl-yhdjpsn.docx"), fInfoLevelId=0x0, lpFileInformation=0x19f248 | out: lpFileInformation=0x19f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c10120, ftCreationTime.dwHighDateTime=0x1d85596, ftLastAccessTime.dwLowDateTime=0x6a8218c0, ftLastAccessTime.dwHighDateTime=0x1d858b7, ftLastWriteTime.dwLowDateTime=0x6a8218c0, ftLastWriteTime.dwHighDateTime=0x1d858b7, nFileSizeHigh=0x0, nFileSizeLow=0xc6de)) returned 1
	[0249.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0249.235] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", lpFilePart=0x0) returned 0x31
	[0249.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f19c) returned 1
	[0249.235] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", nBufferLength=0x104, lpBuffer=0x19ee9c, lpFilePart=0x19ee98 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx", lpFilePart=0x19ee98*="p0bl-yhDJpSn.docx") returned 0x31
	[0249.235] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\p0bl-yhDJpSn.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\p0bl-yhdjpsn.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc
	[0249.235] GetFileType (hFile=0x4dc) returned 0x1
	[0249.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f198) returned 1
	[0249.235] GetFileType (hFile=0x4dc) returned 0x1
	[0249.235] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.237] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.238] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.238] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.240] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.240] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.241] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.241] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.242] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.242] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.243] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.243] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.245] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x6de, lpOverlapped=0x0) returned 1
	[0249.245] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b140ca, nNumberOfBytesToRead=0x122, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b140ca*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.245] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b14a4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b14a4c*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.248] CloseHandle (hObject=0x4dc) returned 1
	[0249.248] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", nBufferLength=0x105, lpBuffer=0x19edbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", lpFilePart=0x0) returned 0x2c
	[0249.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f268) returned 1
	[0249.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_o4zstq.docx"), fInfoLevelId=0x0, lpFileInformation=0x2b3d9c4 | out: lpFileInformation=0x2b3d9c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3109b20, ftCreationTime.dwHighDateTime=0x1d7d9ec, ftLastAccessTime.dwLowDateTime=0x2ca3e6e0, ftLastAccessTime.dwHighDateTime=0x1d849ef, ftLastWriteTime.dwLowDateTime=0x2ca3e6e0, ftLastWriteTime.dwHighDateTime=0x1d849ef, nFileSizeHigh=0x0, nFileSizeLow=0x1188d)) returned 1
	[0249.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f264) returned 1
	[0249.248] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", nBufferLength=0x105, lpBuffer=0x19ed8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", lpFilePart=0x0) returned 0x2c
	[0249.248] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.249] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\.", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f
	[0249.249] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", nBufferLength=0x105, lpBuffer=0x19ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", lpFilePart=0x0) returned 0x2c
	[0249.249] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", nBufferLength=0x105, lpBuffer=0x19eda8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", lpFilePart=0x0) returned 0x2c
	[0249.249] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", lpFilePart=0x0) returned 0x2c
	[0249.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1cc) returned 1
	[0249.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_o4zstq.docx"), fInfoLevelId=0x0, lpFileInformation=0x19f248 | out: lpFileInformation=0x19f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3109b20, ftCreationTime.dwHighDateTime=0x1d7d9ec, ftLastAccessTime.dwLowDateTime=0x2ca3e6e0, ftLastAccessTime.dwHighDateTime=0x1d849ef, ftLastWriteTime.dwLowDateTime=0x2ca3e6e0, ftLastWriteTime.dwHighDateTime=0x1d849ef, nFileSizeHigh=0x0, nFileSizeLow=0x1188d)) returned 1
	[0249.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c8) returned 1
	[0249.249] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", nBufferLength=0x105, lpBuffer=0x19eca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", lpFilePart=0x0) returned 0x2c
	[0249.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f19c) returned 1
	[0249.250] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", nBufferLength=0x104, lpBuffer=0x19ee9c, lpFilePart=0x19ee98 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx", lpFilePart=0x19ee98*="_o4ZsTQ.docx") returned 0x2c
	[0249.250] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_o4ZsTQ.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_o4zstq.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc
	[0249.250] GetFileType (hFile=0x4dc) returned 0x1
	[0249.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f198) returned 1
	[0249.250] GetFileType (hFile=0x4dc) returned 0x1
	[0249.250] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.252] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.252] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.253] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.253] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.253] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.254] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.254] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.255] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.256] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.256] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.256] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.257] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.257] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.257] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.258] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.259] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x1000, lpOverlapped=0x0) returned 1
	[0249.259] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x88d, lpOverlapped=0x0) returned 1
	[0249.259] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3e659, nNumberOfBytesToRead=0x373, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3e659*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.259] ReadFile (in: hFile=0x4dc, lpBuffer=0x2b3f22c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f208, lpOverlapped=0x0 | out: lpBuffer=0x2b3f22c*, lpNumberOfBytesRead=0x19f208*=0x0, lpOverlapped=0x0) returned 1
	[0249.264] CloseHandle (hObject=0x4dc) returned 1
	[0249.292] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\WOW6432Node\\Clients\\StartMenuInternet", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c4 | out: phkResult=0x19f2c4*=0x4dc) returned 0x0
	[0249.295] RegQueryInfoKeyW (in: hKey=0x4dc, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x19f2ec, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x19f2e8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x19f2ec*=0x1, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x19f2e8*=0x1, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0249.295] RegEnumKeyExW (in: hKey=0x4dc, dwIndex=0x0, lpName=0x2b752e0, lpcchName=0x19f308, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEXPLORE.EXE", lpcchName=0x19f308, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0249.299] RegOpenKeyExW (in: hKey=0x4dc, lpSubKey="IEXPLORE.EXE", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c4 | out: phkResult=0x19f2c4*=0x398) returned 0x0
	[0249.300] RegQueryValueExW (in: hKey=0x398, lpValueName=0x0, lpReserved=0x0, lpType=0x19f2e4, lpData=0x0, lpcbData=0x19f2e0*=0x0 | out: lpType=0x19f2e4*=0x1, lpData=0x0, lpcbData=0x19f2e0*=0x24) returned 0x0
	[0249.300] RegQueryValueExW (in: hKey=0x398, lpValueName=0x0, lpReserved=0x0, lpType=0x19f2e4, lpData=0x2b7560c, lpcbData=0x19f2e0*=0x24 | out: lpType=0x19f2e4*=0x1, lpData="Internet Explorer", lpcbData=0x19f2e0*=0x24) returned 0x0
	[0249.301] RegOpenKeyExW (in: hKey=0x398, lpSubKey="shell\\open\\command", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c4 | out: phkResult=0x19f2c4*=0x394) returned 0x0
	[0249.302] RegQueryValueExW (in: hKey=0x394, lpValueName=0x0, lpReserved=0x0, lpType=0x19f2e4, lpData=0x0, lpcbData=0x19f2e0*=0x0 | out: lpType=0x19f2e4*=0x1, lpData=0x0, lpcbData=0x19f2e0*=0x60) returned 0x0
	[0249.302] RegQueryValueExW (in: hKey=0x394, lpValueName=0x0, lpReserved=0x0, lpType=0x19f2e4, lpData=0x2b75828, lpcbData=0x19f2e0*=0x60 | out: lpType=0x19f2e4*=0x1, lpData="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpcbData=0x19f2e0*=0x60) returned 0x0
	[0249.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe", nBufferLength=0x105, lpBuffer=0x19edc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpFilePart=0x0) returned 0x2f
	[0249.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f220) returned 1
	[0249.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), fInfoLevelId=0x0, lpFileInformation=0x19f29c | out: lpFileInformation=0x19f29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33517c70, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33517c70, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33517c70, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc74c0)) returned 1
	[0249.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f21c) returned 1
	[0249.314] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpdwHandle=0x19f310 | out: lpdwHandle=0x19f310) returned 0xba4
	[0249.480] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Internet Explorer\\iexplore.exe", dwHandle=0x0, dwLen=0xba4, lpData=0x2b759e0 | out: lpData=0x2b759e0) returned 1
	[0249.486] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f2e4, puLen=0x19f2e0 | out: lplpBuffer=0x19f2e4*=0x2b75fac, puLen=0x19f2e0) returned 1
	[0249.488] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x2b75a98, puLen=0x19f260) returned 1
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x2b75aec, puLen=0x19f260) returned 1
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x2b75b30, puLen=0x19f260) returned 1
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x2b75ba0, puLen=0x19f260) returned 1
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x2b75bd8, puLen=0x19f260) returned 1
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x2b75c5c, puLen=0x19f260) returned 1
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x2b75ca0, puLen=0x19f260) returned 1
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x2b75ce8, puLen=0x19f260) returned 1
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x0, puLen=0x19f260) returned 0
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x0, puLen=0x19f260) returned 0
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x0, puLen=0x19f260) returned 0
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19f264, puLen=0x19f260 | out: lplpBuffer=0x19f264*=0x0, puLen=0x19f260) returned 0
	[0249.489] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f258, puLen=0x19f254 | out: lplpBuffer=0x19f258*=0x2b75fac, puLen=0x19f254) returned 1
	[0249.490] VerLanguageNameW (in: wLang=0x409, szLang=0x19efe8, cchLang=0x100 | out: szLang="English (United States)") returned 0x17
	[0249.558] VerQueryValueW (in: pBlock=0x2b759e0, lpSubBlock="\\", lplpBuffer=0x19f268, puLen=0x19f264 | out: lplpBuffer=0x19f268*=0x2b75a08, puLen=0x19f264) returned 1
	[0249.751] GetCurrentProcessId () returned 0x594
	[0249.757] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x19eb44 | out: lpLuid=0x19eb44*(LowPart=0x14, HighPart=0)) returned 1
	[0249.761] GetCurrentProcess () returned 0xffffffff
	[0249.761] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19eb40 | out: TokenHandle=0x19eb40*=0x3cc) returned 1
	[0249.762] AdjustTokenPrivileges (in: TokenHandle=0x3cc, DisableAllPrivileges=0, NewState=0x2b7783c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0249.762] CloseHandle (hObject=0x3cc) returned 1
	[0249.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x39479f8, Length=0x20000, ResultLength=0x19f220 | out: SystemInformation=0x39479f8, ResultLength=0x19f220*=0x175a0) returned 0x0
	[0249.805] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f208 | out: puCount=0x19f208*=0x2) returned 0x0
	[0249.809] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f204*=0x0, pszText=0x0 | out: puBuffLength=0x19f204*=0xf, pszText=0x0) returned 0x0
	[0249.809] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f204*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f204*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0249.809] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f194 | out: ppv=0x19f194*=0x66b664) returned 0x0
	[0249.810] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f18c | out: pAptType=0x19f18c*=1) returned 0x0
	[0249.810] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f190 | out: ppvObject=0x19f190*=0x0) returned 0x80004002
	[0249.810] IUnknown:Release (This=0x66b664) returned 0x1
	[0249.812] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19edb0 | out: ppv=0x19edb0*=0x69d45a0) returned 0x0
	[0249.813] WbemLocator:IUnknown:QueryInterface (in: This=0x69d45a0, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19efc8 | out: ppvObject=0x19efc8*=0x0) returned 0x80004002
	[0249.813] WbemLocator:IClassFactory:CreateInstance (in: This=0x69d45a0, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efdc | out: ppvObject=0x19efdc*=0x69b9788) returned 0x0
	[0249.813] WbemLocator:IUnknown:Release (This=0x69d45a0) returned 0x0
	[0249.813] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9788, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebfc | out: ppvObject=0x19ebfc*=0x69b9788) returned 0x0
	[0249.813] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9788, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebb8 | out: ppvObject=0x19ebb8*=0x0) returned 0x80004002
	[0249.813] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9788, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7ac | out: ppvObject=0x19e7ac*=0x0) returned 0x80004002
	[0249.813] WbemLocator:IUnknown:AddRef (This=0x69b9788) returned 0x3
	[0249.813] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9788, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e514 | out: ppvObject=0x19e514*=0x0) returned 0x80004002
	[0249.813] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9788, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4c4 | out: ppvObject=0x19e4c4*=0x0) returned 0x80004002
	[0249.813] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9788, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4d0 | out: ppvObject=0x19e4d0*=0x0) returned 0x80004002
	[0249.813] CoGetContextToken (in: pToken=0x19e530 | out: pToken=0x19e530) returned 0x0
	[0249.813] CoGetContextToken (in: pToken=0x19e938 | out: pToken=0x19e938) returned 0x0
	[0249.813] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9788, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9c8 | out: ppvObject=0x19e9c8*=0x0) returned 0x80004002
	[0249.813] WbemLocator:IUnknown:Release (This=0x69b9788) returned 0x2
	[0249.813] WbemLocator:IUnknown:Release (This=0x69b9788) returned 0x1
	[0249.814] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0249.814] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0249.814] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9788, riid=0x19efd8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19efd4 | out: ppvObject=0x19efd4*=0x69b9788) returned 0x0
	[0249.814] WbemLocator:IUnknown:AddRef (This=0x69b9788) returned 0x3
	[0249.814] WbemLocator:IUnknown:Release (This=0x69b9788) returned 0x2
	[0249.814] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f170 | out: puCount=0x19f170*=0x2) returned 0x0
	[0249.814] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=8, puBuffLength=0x19f16c*=0x0, pszText=0x0 | out: puBuffLength=0x19f16c*=0xf, pszText=0x0) returned 0x0
	[0249.814] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=8, puBuffLength=0x19f16c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f16c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0249.814] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f048 | out: ppv=0x19f048*=0x69b98d8) returned 0x0
	[0249.814] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b98d8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f0dc | out: ppNamespace=0x19f0dc*=0x70a0b8) returned 0x0
	[0249.844] WbemLocator:IUnknown:QueryInterface (in: This=0x70a0b8, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ef78 | out: ppvObject=0x19ef78*=0x7060d4) returned 0x0
	[0249.844] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7060d4, pProxy=0x70a0b8, pAuthnSvc=0x19efc8, pAuthzSvc=0x19efc4, pServerPrincName=0x19efbc, pAuthnLevel=0x19efc0, pImpLevel=0x19efb0, pAuthInfo=0x19efb4, pCapabilites=0x19efb8 | out: pAuthnSvc=0x19efc8*=0xa, pAuthzSvc=0x19efc4*=0x0, pServerPrincName=0x19efbc, pAuthnLevel=0x19efc0*=0x6, pImpLevel=0x19efb0*=0x2, pAuthInfo=0x19efb4, pCapabilites=0x19efb8*=0x1) returned 0x0
	[0249.844] WbemLocator:IUnknown:Release (This=0x7060d4) returned 0x1
	[0249.844] WbemLocator:IUnknown:QueryInterface (in: This=0x70a0b8, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ef6c | out: ppvObject=0x19ef6c*=0x7060f8) returned 0x0
	[0249.844] WbemLocator:IUnknown:QueryInterface (in: This=0x70a0b8, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ef68 | out: ppvObject=0x19ef68*=0x7060d4) returned 0x0
	[0249.844] WbemLocator:IClientSecurity:SetBlanket (This=0x7060d4, pProxy=0x70a0b8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0249.845] WbemLocator:IUnknown:Release (This=0x7060d4) returned 0x2
	[0249.845] WbemLocator:IUnknown:Release (This=0x7060f8) returned 0x1
	[0249.845] CoTaskMemFree (pv=0x69ae0a8) 
	[0249.845] WbemLocator:IUnknown:Release (This=0x69b98d8) returned 0x0
	[0249.845] WbemLocator:IUnknown:QueryInterface (in: This=0x70a0b8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb68 | out: ppvObject=0x19eb68*=0x7060f8) returned 0x0
	[0249.845] WbemLocator:IUnknown:QueryInterface (in: This=0x7060f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eb24 | out: ppvObject=0x19eb24*=0x0) returned 0x80004002
	[0249.846] WbemLocator:IUnknown:QueryInterface (in: This=0x7060f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e944 | out: ppvObject=0x19e944*=0x0) returned 0x80004002
	[0249.849] WbemLocator:IUnknown:QueryInterface (in: This=0x70a0b8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e71c | out: ppvObject=0x19e71c*=0x0) returned 0x80004002
	[0249.850] WbemLocator:IUnknown:AddRef (This=0x7060f8) returned 0x3
	[0249.850] WbemLocator:IUnknown:QueryInterface (in: This=0x7060f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e484 | out: ppvObject=0x19e484*=0x0) returned 0x80004002
	[0249.850] WbemLocator:IUnknown:QueryInterface (in: This=0x7060f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e434 | out: ppvObject=0x19e434*=0x0) returned 0x80004002
	[0249.851] WbemLocator:IUnknown:QueryInterface (in: This=0x7060f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e440 | out: ppvObject=0x19e440*=0x706054) returned 0x0
	[0249.851] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706054, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e448 | out: pCid=0x19e448*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0249.851] WbemLocator:IUnknown:Release (This=0x706054) returned 0x3
	[0249.851] CoGetContextToken (in: pToken=0x19e4a0 | out: pToken=0x19e4a0) returned 0x0
	[0249.851] CoGetContextToken (in: pToken=0x19e8a8 | out: pToken=0x19e8a8) returned 0x0
	[0249.851] WbemLocator:IUnknown:QueryInterface (in: This=0x7060f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e938 | out: ppvObject=0x19e938*=0x7060dc) returned 0x0
	[0249.851] WbemLocator:IRpcOptions:Query (in: This=0x7060dc, pPrx=0x7060f8, dwProperty=2, pdwValue=0x19e960 | out: pdwValue=0x19e960) returned 0x80004002
	[0249.851] WbemLocator:IUnknown:Release (This=0x7060dc) returned 0x3
	[0249.851] WbemLocator:IUnknown:Release (This=0x7060f8) returned 0x2
	[0249.851] CoGetContextToken (in: pToken=0x19ee78 | out: pToken=0x19ee78) returned 0x0
	[0249.851] CoGetContextToken (in: pToken=0x19edd8 | out: pToken=0x19edd8) returned 0x0
	[0249.851] WbemLocator:IUnknown:QueryInterface (in: This=0x7060f8, riid=0x19eea8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19eea4 | out: ppvObject=0x19eea4*=0x70a0b8) returned 0x0
	[0249.851] WbemLocator:IUnknown:AddRef (This=0x70a0b8) returned 0x4
	[0249.851] WbemLocator:IUnknown:Release (This=0x70a0b8) returned 0x3
	[0249.851] WbemLocator:IUnknown:Release (This=0x70a0b8) returned 0x2
	[0249.853] SysStringLen (param_1=0x0) returned 0x0
	[0249.853] CoGetContextToken (in: pToken=0x19ee70 | out: pToken=0x19ee70) returned 0x0
	[0249.853] WbemLocator:IUnknown:AddRef (This=0x7060f8) returned 0x3
	[0249.853] WbemLocator:IUnknown:QueryInterface (in: This=0x7060f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed04 | out: ppvObject=0x19ed04*=0x7060f8) returned 0x0
	[0249.853] WbemLocator:IUnknown:Release (This=0x7060f8) returned 0x3
	[0249.853] WbemLocator:IUnknown:Release (This=0x7060f8) returned 0x2
	[0249.853] CoGetContextToken (in: pToken=0x19ef48 | out: pToken=0x19ef48) returned 0x0
	[0249.853] WbemLocator:IUnknown:AddRef (This=0x70a0b8) returned 0x3
	[0249.853] IWbemServices:ExecQuery (in: This=0x70a0b8, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Process Where SessionId='1'", lFlags=16, pCtx=0x0, ppEnum=0x19f178 | out: ppEnum=0x19f178*=0x6f3b98) returned 0x0
	[0249.894] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efb8 | out: ppvObject=0x19efb8*=0x6f3b9c) returned 0x0
	[0249.894] IClientSecurity:QueryBlanket (in: This=0x6f3b9c, pProxy=0x6f3b98, pAuthnSvc=0x19f008, pAuthzSvc=0x19f004, pServerPrincName=0x19effc, pAuthnLevel=0x19f000, pImpLevel=0x19eff0, pAuthInfo=0x19eff4, pCapabilites=0x19eff8 | out: pAuthnSvc=0x19f008*=0xa, pAuthzSvc=0x19f004*=0x0, pServerPrincName=0x19effc, pAuthnLevel=0x19f000*=0x6, pImpLevel=0x19eff0*=0x2, pAuthInfo=0x19eff4, pCapabilites=0x19eff8*=0x1) returned 0x0
	[0249.894] IUnknown:Release (This=0x6f3b9c) returned 0x1
	[0249.894] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efac | out: ppvObject=0x19efac*=0x704bf8) returned 0x0
	[0249.895] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efa8 | out: ppvObject=0x19efa8*=0x6f3b9c) returned 0x0
	[0249.895] IClientSecurity:SetBlanket (This=0x6f3b9c, pProxy=0x6f3b98, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0249.930] IUnknown:Release (This=0x6f3b9c) returned 0x2
	[0249.930] WbemLocator:IUnknown:Release (This=0x704bf8) returned 0x1
	[0249.930] CoTaskMemFree (pv=0x69ae1c8) 
	[0249.930] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eba4 | out: ppvObject=0x19eba4*=0x704bf8) returned 0x0
	[0249.931] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eb60 | out: ppvObject=0x19eb60*=0x0) returned 0x80004002
	[0249.931] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e97c | out: ppvObject=0x19e97c*=0x0) returned 0x80004002
	[0249.931] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e754 | out: ppvObject=0x19e754*=0x0) returned 0x80004002
	[0249.932] WbemLocator:IUnknown:AddRef (This=0x704bf8) returned 0x3
	[0249.932] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e4bc | out: ppvObject=0x19e4bc*=0x0) returned 0x80004002
	[0249.932] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e46c | out: ppvObject=0x19e46c*=0x0) returned 0x80004002
	[0249.932] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e478 | out: ppvObject=0x19e478*=0x704b54) returned 0x0
	[0249.932] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x704b54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e480 | out: pCid=0x19e480*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0249.932] WbemLocator:IUnknown:Release (This=0x704b54) returned 0x3
	[0249.932] CoGetContextToken (in: pToken=0x19e4d8 | out: pToken=0x19e4d8) returned 0x0
	[0249.932] CoGetContextToken (in: pToken=0x19e8e0 | out: pToken=0x19e8e0) returned 0x0
	[0249.932] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e970 | out: ppvObject=0x19e970*=0x704bdc) returned 0x0
	[0249.932] WbemLocator:IRpcOptions:Query (in: This=0x704bdc, pPrx=0x704bf8, dwProperty=2, pdwValue=0x19e998 | out: pdwValue=0x19e998) returned 0x80004002
	[0249.933] WbemLocator:IUnknown:Release (This=0x704bdc) returned 0x3
	[0249.933] WbemLocator:IUnknown:Release (This=0x704bf8) returned 0x2
	[0249.933] CoGetContextToken (in: pToken=0x19eeb8 | out: pToken=0x19eeb8) returned 0x0
	[0249.933] CoGetContextToken (in: pToken=0x19ee18 | out: pToken=0x19ee18) returned 0x0
	[0249.933] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x19eee8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19eee4 | out: ppvObject=0x19eee4*=0x6f3b98) returned 0x0
	[0249.933] IUnknown:AddRef (This=0x6f3b98) returned 0x4
	[0249.933] IUnknown:Release (This=0x6f3b98) returned 0x3
	[0249.933] IUnknown:Release (This=0x6f3b98) returned 0x2
	[0249.933] WbemLocator:IUnknown:Release (This=0x70a0b8) returned 0x2
	[0249.933] SysStringLen (param_1=0x0) returned 0x0
	[0249.933] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c4 | out: puCount=0x19f1c4*=0x2) returned 0x0
	[0249.933] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c0*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c0*=0xf, pszText=0x0) returned 0x0
	[0249.933] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0249.933] CoGetContextToken (in: pToken=0x19f010 | out: pToken=0x19f010) returned 0x0
	[0249.933] IUnknown:AddRef (This=0x6f3b98) returned 0x3
	[0249.933] IEnumWbemClassObject:Clone (in: This=0x6f3b98, ppEnum=0x19f1d0 | out: ppEnum=0x19f1d0*=0x6f3d28) returned 0x0
	[0249.935] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f094 | out: ppvObject=0x19f094*=0x6f3d2c) returned 0x0
	[0249.935] IClientSecurity:QueryBlanket (in: This=0x6f3d2c, pProxy=0x6f3d28, pAuthnSvc=0x19f0e4, pAuthzSvc=0x19f0e0, pServerPrincName=0x19f0d8, pAuthnLevel=0x19f0dc, pImpLevel=0x19f0cc, pAuthInfo=0x19f0d0, pCapabilites=0x19f0d4 | out: pAuthnSvc=0x19f0e4*=0xa, pAuthzSvc=0x19f0e0*=0x0, pServerPrincName=0x19f0d8, pAuthnLevel=0x19f0dc*=0x6, pImpLevel=0x19f0cc*=0x2, pAuthInfo=0x19f0d0, pCapabilites=0x19f0d4*=0x1) returned 0x0
	[0249.935] IUnknown:Release (This=0x6f3d2c) returned 0x1
	[0249.935] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f088 | out: ppvObject=0x19f088*=0x705cf8) returned 0x0
	[0249.935] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f084 | out: ppvObject=0x19f084*=0x6f3d2c) returned 0x0
	[0249.935] IClientSecurity:SetBlanket (This=0x6f3d2c, pProxy=0x6f3d28, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0249.936] IUnknown:Release (This=0x6f3d2c) returned 0x2
	[0249.936] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x1
	[0249.937] CoTaskMemFree (pv=0x69ae1f8) 
	[0249.937] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec70 | out: ppvObject=0x19ec70*=0x705cf8) returned 0x0
	[0249.937] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec2c | out: ppvObject=0x19ec2c*=0x0) returned 0x80004002
	[0249.937] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea4c | out: ppvObject=0x19ea4c*=0x0) returned 0x80004002
	[0250.041] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e824 | out: ppvObject=0x19e824*=0x0) returned 0x80004002
	[0250.042] WbemLocator:IUnknown:AddRef (This=0x705cf8) returned 0x3
	[0250.042] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e58c | out: ppvObject=0x19e58c*=0x0) returned 0x80004002
	[0250.042] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e53c | out: ppvObject=0x19e53c*=0x0) returned 0x80004002
	[0250.042] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e548 | out: ppvObject=0x19e548*=0x705c54) returned 0x0
	[0250.043] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705c54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e550 | out: pCid=0x19e550*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0250.043] WbemLocator:IUnknown:Release (This=0x705c54) returned 0x3
	[0250.043] CoGetContextToken (in: pToken=0x19e5a8 | out: pToken=0x19e5a8) returned 0x0
	[0250.043] CoGetContextToken (in: pToken=0x19e9b0 | out: pToken=0x19e9b0) returned 0x0
	[0250.043] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea40 | out: ppvObject=0x19ea40*=0x705cdc) returned 0x0
	[0250.043] WbemLocator:IRpcOptions:Query (in: This=0x705cdc, pPrx=0x705cf8, dwProperty=2, pdwValue=0x19ea68 | out: pdwValue=0x19ea68) returned 0x80004002
	[0250.043] WbemLocator:IUnknown:Release (This=0x705cdc) returned 0x3
	[0250.043] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x2
	[0250.043] CoGetContextToken (in: pToken=0x19ef80 | out: pToken=0x19ef80) returned 0x0
	[0250.043] CoGetContextToken (in: pToken=0x19eee0 | out: pToken=0x19eee0) returned 0x0
	[0250.043] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x19efb0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efac | out: ppvObject=0x19efac*=0x6f3d28) returned 0x0
	[0250.043] IUnknown:AddRef (This=0x6f3d28) returned 0x4
	[0250.043] IUnknown:Release (This=0x6f3d28) returned 0x3
	[0250.044] IUnknown:Release (This=0x6f3d28) returned 0x2
	[0250.044] IUnknown:Release (This=0x6f3b98) returned 0x2
	[0250.044] SysStringLen (param_1=0x0) returned 0x0
	[0250.044] IEnumWbemClassObject:Reset (This=0x6f3d28) returned 0x0
	[0250.045] CoTaskMemAlloc (cb=0x4) returned 0x69b98f8
	[0250.045] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98f8, puReturned=0x2b9e144 | out: apObjects=0x69b98f8*=0x658cb8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.148] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x658cb8) returned 0x0
	[0251.149] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.149] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.149] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.149] IUnknown:AddRef (This=0x658cb8) returned 0x3
	[0251.149] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.149] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.149] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x658cbc) returned 0x0
	[0251.150] IMarshal:GetUnmarshalClass (in: This=0x658cbc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.150] IUnknown:Release (This=0x658cbc) returned 0x3
	[0251.150] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.150] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.150] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.150] IUnknown:Release (This=0x658cb8) returned 0x2
	[0251.150] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.151] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.151] IUnknown:QueryInterface (in: This=0x658cb8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x658cb8) returned 0x0
	[0251.151] IUnknown:AddRef (This=0x658cb8) returned 0x4
	[0251.151] IUnknown:Release (This=0x658cb8) returned 0x3
	[0251.152] IUnknown:Release (This=0x658cb8) returned 0x2
	[0251.152] CoTaskMemFree (pv=0x69b98f8) 
	[0251.154] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.154] IUnknown:AddRef (This=0x658cb8) returned 0x3
	[0251.155] IWbemClassObject:Get (in: This=0x658cb8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.155] IWbemClassObject:Get (in: This=0x658cb8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.156] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x5c
	[0251.156] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x5c
	[0251.156] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.156] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.156] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.156] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.161] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9808) returned 0x0
	[0251.161] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9808, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.161] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9808, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x63e760) returned 0x0
	[0251.162] WbemDefPath:IUnknown:Release (This=0x69b9808) returned 0x0
	[0251.162] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e760, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x63e760) returned 0x0
	[0251.162] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e760, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.162] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e760, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.162] WbemDefPath:IUnknown:AddRef (This=0x63e760) returned 0x3
	[0251.162] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e760, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.162] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e760, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.162] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e760, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d4558) returned 0x0
	[0251.162] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d4558, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.162] WbemDefPath:IUnknown:Release (This=0x69d4558) returned 0x3
	[0251.162] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.162] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.162] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e760, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.162] WbemDefPath:IUnknown:Release (This=0x63e760) returned 0x2
	[0251.162] WbemDefPath:IUnknown:Release (This=0x63e760) returned 0x1
	[0251.163] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.163] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.163] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e760, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x63e760) returned 0x0
	[0251.163] WbemDefPath:IUnknown:AddRef (This=0x63e760) returned 0x3
	[0251.163] WbemDefPath:IUnknown:Release (This=0x63e760) returned 0x2
	[0251.165] WbemDefPath:IWbemPath:SetText (This=0x63e760, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"456\"") returned 0x0
	[0251.165] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.165] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.165] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.166] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.166] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.166] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.166] IWbemClassObject:Get (in: This=0x658cb8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2b9ea34*=0, plFlavor=0x2b9ea38*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="csrss.exe", varVal2=0x0), pType=0x2b9ea34*=8, plFlavor=0x2b9ea38*=0) returned 0x0
	[0251.166] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0251.166] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0251.166] IWbemClassObject:Get (in: This=0x658cb8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2b9ea34*=8, plFlavor=0x2b9ea38*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="csrss.exe", varVal2=0x0), pType=0x2b9ea34*=8, plFlavor=0x2b9ea38*=0) returned 0x0
	[0251.166] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0251.166] SysStringByteLen (bstr="csrss.exe") returned 0x12
	[0251.167] CoTaskMemAlloc (cb=0x4) returned 0x69b9888
	[0251.167] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9888, puReturned=0x2b9e144 | out: apObjects=0x69b9888*=0x6aacc8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.168] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x6aacc8) returned 0x0
	[0251.168] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.168] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.169] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.169] IUnknown:AddRef (This=0x6aacc8) returned 0x3
	[0251.169] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.169] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.169] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x6aaccc) returned 0x0
	[0251.169] IMarshal:GetUnmarshalClass (in: This=0x6aaccc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.169] IUnknown:Release (This=0x6aaccc) returned 0x3
	[0251.169] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.169] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.169] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.169] IUnknown:Release (This=0x6aacc8) returned 0x2
	[0251.169] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.169] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.169] IUnknown:QueryInterface (in: This=0x6aacc8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x6aacc8) returned 0x0
	[0251.169] IUnknown:AddRef (This=0x6aacc8) returned 0x4
	[0251.169] IUnknown:Release (This=0x6aacc8) returned 0x3
	[0251.169] IUnknown:Release (This=0x6aacc8) returned 0x2
	[0251.170] CoTaskMemFree (pv=0x69b9888) 
	[0251.170] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.170] IUnknown:AddRef (This=0x6aacc8) returned 0x3
	[0251.170] IWbemClassObject:Get (in: This=0x6aacc8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.170] IWbemClassObject:Get (in: This=0x6aacc8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.170] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x5c
	[0251.170] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x5c
	[0251.170] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.170] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.170] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.170] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.171] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0251.171] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.171] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x63e4c0) returned 0x0
	[0251.171] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0251.171] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e4c0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x63e4c0) returned 0x0
	[0251.172] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e4c0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.172] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e4c0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.172] WbemDefPath:IUnknown:AddRef (This=0x63e4c0) returned 0x3
	[0251.172] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e4c0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.172] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e4c0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.172] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e4c0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d4690) returned 0x0
	[0251.172] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d4690, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.172] WbemDefPath:IUnknown:Release (This=0x69d4690) returned 0x3
	[0251.172] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.172] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.172] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e4c0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.172] WbemDefPath:IUnknown:Release (This=0x63e4c0) returned 0x2
	[0251.172] WbemDefPath:IUnknown:Release (This=0x63e4c0) returned 0x1
	[0251.172] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.172] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.172] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e4c0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x63e4c0) returned 0x0
	[0251.172] WbemDefPath:IUnknown:AddRef (This=0x63e4c0) returned 0x3
	[0251.172] WbemDefPath:IUnknown:Release (This=0x63e4c0) returned 0x2
	[0251.173] WbemDefPath:IWbemPath:SetText (This=0x63e4c0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"508\"") returned 0x0
	[0251.173] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.173] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.173] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.173] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.173] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.173] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.173] IWbemClassObject:Get (in: This=0x6aacc8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2b9f2b8*=0, plFlavor=0x2b9f2bc*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winlogon.exe", varVal2=0x0), pType=0x2b9f2b8*=8, plFlavor=0x2b9f2bc*=0) returned 0x0
	[0251.173] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0251.173] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0251.173] IWbemClassObject:Get (in: This=0x6aacc8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2b9f2b8*=8, plFlavor=0x2b9f2bc*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winlogon.exe", varVal2=0x0), pType=0x2b9f2b8*=8, plFlavor=0x2b9f2bc*=0) returned 0x0
	[0251.173] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0251.173] SysStringByteLen (bstr="winlogon.exe") returned 0x18
	[0251.173] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0251.173] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x71d0f8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.222] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x71d0f8) returned 0x0
	[0251.223] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.223] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.223] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.223] IUnknown:AddRef (This=0x71d0f8) returned 0x3
	[0251.223] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.223] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.223] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x71d0fc) returned 0x0
	[0251.223] IMarshal:GetUnmarshalClass (in: This=0x71d0fc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.223] IUnknown:Release (This=0x71d0fc) returned 0x3
	[0251.223] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.223] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.223] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.223] IUnknown:Release (This=0x71d0f8) returned 0x2
	[0251.224] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.224] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.224] IUnknown:QueryInterface (in: This=0x71d0f8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x71d0f8) returned 0x0
	[0251.224] IUnknown:AddRef (This=0x71d0f8) returned 0x4
	[0251.224] IUnknown:Release (This=0x71d0f8) returned 0x3
	[0251.224] IUnknown:Release (This=0x71d0f8) returned 0x2
	[0251.224] CoTaskMemFree (pv=0x69b97a8) 
	[0251.224] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.224] IUnknown:AddRef (This=0x71d0f8) returned 0x3
	[0251.224] IWbemClassObject:Get (in: This=0x71d0f8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.224] IWbemClassObject:Get (in: This=0x71d0f8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"812\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.224] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"812\"") returned 0x5c
	[0251.224] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"812\"") returned 0x5c
	[0251.224] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.224] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.224] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.224] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.225] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9818) returned 0x0
	[0251.225] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9818, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.225] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9818, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x63e840) returned 0x0
	[0251.226] WbemDefPath:IUnknown:Release (This=0x69b9818) returned 0x0
	[0251.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e840, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x63e840) returned 0x0
	[0251.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e840, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e840, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.226] WbemDefPath:IUnknown:AddRef (This=0x63e840) returned 0x3
	[0251.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e840, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e840, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e840, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d39a0) returned 0x0
	[0251.226] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d39a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.226] WbemDefPath:IUnknown:Release (This=0x69d39a0) returned 0x3
	[0251.226] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.226] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e840, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.226] WbemDefPath:IUnknown:Release (This=0x63e840) returned 0x2
	[0251.226] WbemDefPath:IUnknown:Release (This=0x63e840) returned 0x1
	[0251.226] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.226] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e840, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x63e840) returned 0x0
	[0251.227] WbemDefPath:IUnknown:AddRef (This=0x63e840) returned 0x3
	[0251.227] WbemDefPath:IUnknown:Release (This=0x63e840) returned 0x2
	[0251.227] WbemDefPath:IWbemPath:SetText (This=0x63e840, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"812\"") returned 0x0
	[0251.227] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.227] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.227] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.227] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.227] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.227] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.227] IWbemClassObject:Get (in: This=0x71d0f8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2b9fb4c*=0, plFlavor=0x2b9fb50*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dwm.exe", varVal2=0x0), pType=0x2b9fb4c*=8, plFlavor=0x2b9fb50*=0) returned 0x0
	[0251.227] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0251.227] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0251.227] IWbemClassObject:Get (in: This=0x71d0f8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2b9fb4c*=8, plFlavor=0x2b9fb50*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dwm.exe", varVal2=0x0), pType=0x2b9fb4c*=8, plFlavor=0x2b9fb50*=0) returned 0x0
	[0251.227] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0251.227] SysStringByteLen (bstr="dwm.exe") returned 0xe
	[0251.227] CoTaskMemAlloc (cb=0x4) returned 0x69b97c8
	[0251.228] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97c8, puReturned=0x2b9e144 | out: apObjects=0x69b97c8*=0x71d548, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.228] IUnknown:QueryInterface (in: This=0x71d548, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x71d548) returned 0x0
	[0251.229] IUnknown:QueryInterface (in: This=0x71d548, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.229] IUnknown:QueryInterface (in: This=0x71d548, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.229] IUnknown:QueryInterface (in: This=0x71d548, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.232] IUnknown:AddRef (This=0x71d548) returned 0x3
	[0251.232] IUnknown:QueryInterface (in: This=0x71d548, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.232] IUnknown:QueryInterface (in: This=0x71d548, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.232] IUnknown:QueryInterface (in: This=0x71d548, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x71d54c) returned 0x0
	[0251.232] IMarshal:GetUnmarshalClass (in: This=0x71d54c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.232] IUnknown:Release (This=0x71d54c) returned 0x3
	[0251.232] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.233] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.233] IUnknown:QueryInterface (in: This=0x71d548, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.233] IUnknown:Release (This=0x71d548) returned 0x2
	[0251.233] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.234] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.234] IUnknown:QueryInterface (in: This=0x71d548, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x71d548) returned 0x0
	[0251.234] IUnknown:AddRef (This=0x71d548) returned 0x4
	[0251.234] IUnknown:Release (This=0x71d548) returned 0x3
	[0251.234] IUnknown:Release (This=0x71d548) returned 0x2
	[0251.234] CoTaskMemFree (pv=0x69b97c8) 
	[0251.234] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.234] IUnknown:AddRef (This=0x71d548) returned 0x3
	[0251.234] IWbemClassObject:Get (in: This=0x71d548, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.235] IWbemClassObject:Get (in: This=0x71d548, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1448\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.235] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1448\"") returned 0x5e
	[0251.235] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1448\"") returned 0x5e
	[0251.235] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.235] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.236] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.236] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.238] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9818) returned 0x0
	[0251.238] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9818, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.239] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9818, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x63e8b0) returned 0x0
	[0251.239] WbemDefPath:IUnknown:Release (This=0x69b9818) returned 0x0
	[0251.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e8b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x63e8b0) returned 0x0
	[0251.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e8b0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e8b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.239] WbemDefPath:IUnknown:AddRef (This=0x63e8b0) returned 0x3
	[0251.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e8b0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e8b0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e8b0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d3970) returned 0x0
	[0251.239] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d3970, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.239] WbemDefPath:IUnknown:Release (This=0x69d3970) returned 0x3
	[0251.240] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.243] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.243] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e8b0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.243] WbemDefPath:IUnknown:Release (This=0x63e8b0) returned 0x2
	[0251.243] WbemDefPath:IUnknown:Release (This=0x63e8b0) returned 0x1
	[0251.243] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.243] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.244] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e8b0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x63e8b0) returned 0x0
	[0251.244] WbemDefPath:IUnknown:AddRef (This=0x63e8b0) returned 0x3
	[0251.244] WbemDefPath:IUnknown:Release (This=0x63e8b0) returned 0x2
	[0251.244] WbemDefPath:IWbemPath:SetText (This=0x63e8b0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1448\"") returned 0x0
	[0251.244] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.244] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.244] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.244] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.244] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.244] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.244] IWbemClassObject:Get (in: This=0x71d548, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba03c8*=0, plFlavor=0x2ba03cc*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sihost.exe", varVal2=0x0), pType=0x2ba03c8*=8, plFlavor=0x2ba03cc*=0) returned 0x0
	[0251.244] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0251.244] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0251.244] IWbemClassObject:Get (in: This=0x71d548, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba03c8*=8, plFlavor=0x2ba03cc*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sihost.exe", varVal2=0x0), pType=0x2ba03c8*=8, plFlavor=0x2ba03cc*=0) returned 0x0
	[0251.244] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0251.244] SysStringByteLen (bstr="sihost.exe") returned 0x14
	[0251.244] CoTaskMemAlloc (cb=0x4) returned 0x69b9888
	[0251.245] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9888, puReturned=0x2b9e144 | out: apObjects=0x69b9888*=0x71d6e0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.246] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x71d6e0) returned 0x0
	[0251.246] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.246] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.246] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.246] IUnknown:AddRef (This=0x71d6e0) returned 0x3
	[0251.246] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.246] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.246] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x71d6e4) returned 0x0
	[0251.246] IMarshal:GetUnmarshalClass (in: This=0x71d6e4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.246] IUnknown:Release (This=0x71d6e4) returned 0x3
	[0251.246] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.246] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.246] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.246] IUnknown:Release (This=0x71d6e0) returned 0x2
	[0251.247] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.247] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.247] IUnknown:QueryInterface (in: This=0x71d6e0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x71d6e0) returned 0x0
	[0251.247] IUnknown:AddRef (This=0x71d6e0) returned 0x4
	[0251.247] IUnknown:Release (This=0x71d6e0) returned 0x3
	[0251.247] IUnknown:Release (This=0x71d6e0) returned 0x2
	[0251.247] CoTaskMemFree (pv=0x69b9888) 
	[0251.247] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.247] IUnknown:AddRef (This=0x71d6e0) returned 0x3
	[0251.247] IWbemClassObject:Get (in: This=0x71d6e0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.247] IWbemClassObject:Get (in: This=0x71d6e0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1708\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.247] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1708\"") returned 0x5e
	[0251.247] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1708\"") returned 0x5e
	[0251.247] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.247] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.247] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.247] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.248] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0251.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.248] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x63e300) returned 0x0
	[0251.248] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0251.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e300, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x63e300) returned 0x0
	[0251.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e300, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e300, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.249] WbemDefPath:IUnknown:AddRef (This=0x63e300) returned 0x3
	[0251.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e300, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e300, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e300, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d3b80) returned 0x0
	[0251.249] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d3b80, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.249] WbemDefPath:IUnknown:Release (This=0x69d3b80) returned 0x3
	[0251.250] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.250] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.250] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e300, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.250] WbemDefPath:IUnknown:Release (This=0x63e300) returned 0x2
	[0251.250] WbemDefPath:IUnknown:Release (This=0x63e300) returned 0x1
	[0251.250] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.250] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.251] WbemDefPath:IUnknown:QueryInterface (in: This=0x63e300, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x63e300) returned 0x0
	[0251.251] WbemDefPath:IUnknown:AddRef (This=0x63e300) returned 0x3
	[0251.251] WbemDefPath:IUnknown:Release (This=0x63e300) returned 0x2
	[0251.251] WbemDefPath:IWbemPath:SetText (This=0x63e300, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1708\"") returned 0x0
	[0251.251] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.251] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.251] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.251] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.251] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.251] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.251] IWbemClassObject:Get (in: This=0x71d6e0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba0c54*=0, plFlavor=0x2ba0c58*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SkypeHost.exe", varVal2=0x0), pType=0x2ba0c54*=8, plFlavor=0x2ba0c58*=0) returned 0x0
	[0251.251] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0251.252] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0251.252] IWbemClassObject:Get (in: This=0x71d6e0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba0c54*=8, plFlavor=0x2ba0c58*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SkypeHost.exe", varVal2=0x0), pType=0x2ba0c54*=8, plFlavor=0x2ba0c58*=0) returned 0x0
	[0251.252] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0251.252] SysStringByteLen (bstr="SkypeHost.exe") returned 0x1a
	[0251.252] CoTaskMemAlloc (cb=0x4) returned 0x69b9818
	[0251.252] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9818, puReturned=0x2b9e144 | out: apObjects=0x69b9818*=0x69b6c20, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.254] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69b6c20) returned 0x0
	[0251.254] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.258] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.258] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.258] IUnknown:AddRef (This=0x69b6c20) returned 0x3
	[0251.259] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.259] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.259] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69b6c24) returned 0x0
	[0251.259] IMarshal:GetUnmarshalClass (in: This=0x69b6c24, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.259] IUnknown:Release (This=0x69b6c24) returned 0x3
	[0251.259] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.468] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.468] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.468] IUnknown:Release (This=0x69b6c20) returned 0x2
	[0251.468] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.468] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.469] IUnknown:QueryInterface (in: This=0x69b6c20, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69b6c20) returned 0x0
	[0251.469] IUnknown:AddRef (This=0x69b6c20) returned 0x4
	[0251.469] IUnknown:Release (This=0x69b6c20) returned 0x3
	[0251.469] IUnknown:Release (This=0x69b6c20) returned 0x2
	[0251.469] CoTaskMemFree (pv=0x69b9818) 
	[0251.470] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.470] IUnknown:AddRef (This=0x69b6c20) returned 0x3
	[0251.470] IWbemClassObject:Get (in: This=0x69b6c20, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.470] IWbemClassObject:Get (in: This=0x69b6c20, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1932\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.470] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1932\"") returned 0x5e
	[0251.470] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1932\"") returned 0x5e
	[0251.470] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.471] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.471] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.471] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.477] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97a8) returned 0x0
	[0251.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.478] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbf50) returned 0x0
	[0251.478] WbemDefPath:IUnknown:Release (This=0x69b97a8) returned 0x0
	[0251.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbf50, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbf50) returned 0x0
	[0251.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbf50, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbf50, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.479] WbemDefPath:IUnknown:AddRef (This=0x69dbf50) returned 0x3
	[0251.479] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbf50, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.479] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbf50, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.479] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbf50, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d3d30) returned 0x0
	[0251.479] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d3d30, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.479] WbemDefPath:IUnknown:Release (This=0x69d3d30) returned 0x3
	[0251.479] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.479] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.479] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbf50, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.479] WbemDefPath:IUnknown:Release (This=0x69dbf50) returned 0x2
	[0251.480] WbemDefPath:IUnknown:Release (This=0x69dbf50) returned 0x1
	[0251.480] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.480] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.480] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbf50, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbf50) returned 0x0
	[0251.480] WbemDefPath:IUnknown:AddRef (This=0x69dbf50) returned 0x3
	[0251.480] WbemDefPath:IUnknown:Release (This=0x69dbf50) returned 0x2
	[0251.480] WbemDefPath:IWbemPath:SetText (This=0x69dbf50, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1932\"") returned 0x0
	[0251.480] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.480] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.480] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.480] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.481] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.481] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.481] IWbemClassObject:Get (in: This=0x69b6c20, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba14e8*=0, plFlavor=0x2ba14ec*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="explorer.exe", varVal2=0x0), pType=0x2ba14e8*=8, plFlavor=0x2ba14ec*=0) returned 0x0
	[0251.481] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0251.481] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0251.481] IWbemClassObject:Get (in: This=0x69b6c20, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba14e8*=8, plFlavor=0x2ba14ec*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="explorer.exe", varVal2=0x0), pType=0x2ba14e8*=8, plFlavor=0x2ba14ec*=0) returned 0x0
	[0251.481] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0251.481] SysStringByteLen (bstr="explorer.exe") returned 0x18
	[0251.481] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0251.482] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69b7298, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.483] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69b7298) returned 0x0
	[0251.483] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.483] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.484] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.484] IUnknown:AddRef (This=0x69b7298) returned 0x3
	[0251.484] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.484] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.484] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69b729c) returned 0x0
	[0251.485] IMarshal:GetUnmarshalClass (in: This=0x69b729c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.485] IUnknown:Release (This=0x69b729c) returned 0x3
	[0251.485] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.485] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.485] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.485] IUnknown:Release (This=0x69b7298) returned 0x2
	[0251.485] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.485] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.485] IUnknown:QueryInterface (in: This=0x69b7298, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69b7298) returned 0x0
	[0251.485] IUnknown:AddRef (This=0x69b7298) returned 0x4
	[0251.486] IUnknown:Release (This=0x69b7298) returned 0x3
	[0251.486] IUnknown:Release (This=0x69b7298) returned 0x2
	[0251.486] CoTaskMemFree (pv=0x69b97a8) 
	[0251.486] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.486] IUnknown:AddRef (This=0x69b7298) returned 0x3
	[0251.486] IWbemClassObject:Get (in: This=0x69b7298, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.486] IWbemClassObject:Get (in: This=0x69b7298, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2040\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.486] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2040\"") returned 0x5e
	[0251.486] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2040\"") returned 0x5e
	[0251.487] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.487] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.487] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.487] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.488] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97a8) returned 0x0
	[0251.488] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.488] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbe70) returned 0x0
	[0251.488] WbemDefPath:IUnknown:Release (This=0x69b97a8) returned 0x0
	[0251.488] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe70, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbe70) returned 0x0
	[0251.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe70, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe70, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.489] WbemDefPath:IUnknown:AddRef (This=0x69dbe70) returned 0x3
	[0251.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe70, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe70, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe70, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d3fe8) returned 0x0
	[0251.489] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d3fe8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.489] WbemDefPath:IUnknown:Release (This=0x69d3fe8) returned 0x3
	[0251.489] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.489] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe70, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.490] WbemDefPath:IUnknown:Release (This=0x69dbe70) returned 0x2
	[0251.490] WbemDefPath:IUnknown:Release (This=0x69dbe70) returned 0x1
	[0251.490] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.490] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.490] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe70, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbe70) returned 0x0
	[0251.490] WbemDefPath:IUnknown:AddRef (This=0x69dbe70) returned 0x3
	[0251.490] WbemDefPath:IUnknown:Release (This=0x69dbe70) returned 0x2
	[0251.490] WbemDefPath:IWbemPath:SetText (This=0x69dbe70, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2040\"") returned 0x0
	[0251.490] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.490] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.490] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.490] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.490] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.490] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.491] IWbemClassObject:Get (in: This=0x69b7298, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba1d7c*=0, plFlavor=0x2ba1d80*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="RuntimeBroker.exe", varVal2=0x0), pType=0x2ba1d7c*=8, plFlavor=0x2ba1d80*=0) returned 0x0
	[0251.491] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0251.491] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0251.491] IWbemClassObject:Get (in: This=0x69b7298, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba1d7c*=8, plFlavor=0x2ba1d80*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="RuntimeBroker.exe", varVal2=0x0), pType=0x2ba1d7c*=8, plFlavor=0x2ba1d80*=0) returned 0x0
	[0251.491] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0251.491] SysStringByteLen (bstr="RuntimeBroker.exe") returned 0x22
	[0251.491] CoTaskMemAlloc (cb=0x4) returned 0x69b97c8
	[0251.492] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97c8, puReturned=0x2b9e144 | out: apObjects=0x69b97c8*=0x69b6900, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.493] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69b6900) returned 0x0
	[0251.493] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.493] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.493] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.493] IUnknown:AddRef (This=0x69b6900) returned 0x3
	[0251.493] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.493] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.493] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69b6904) returned 0x0
	[0251.493] IMarshal:GetUnmarshalClass (in: This=0x69b6904, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.494] IUnknown:Release (This=0x69b6904) returned 0x3
	[0251.494] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.494] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.494] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.494] IUnknown:Release (This=0x69b6900) returned 0x2
	[0251.494] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.494] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.494] IUnknown:QueryInterface (in: This=0x69b6900, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69b6900) returned 0x0
	[0251.494] IUnknown:AddRef (This=0x69b6900) returned 0x4
	[0251.494] IUnknown:Release (This=0x69b6900) returned 0x3
	[0251.494] IUnknown:Release (This=0x69b6900) returned 0x2
	[0251.494] CoTaskMemFree (pv=0x69b97c8) 
	[0251.494] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.494] IUnknown:AddRef (This=0x69b6900) returned 0x3
	[0251.495] IWbemClassObject:Get (in: This=0x69b6900, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.495] IWbemClassObject:Get (in: This=0x69b6900, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2080\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.495] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2080\"") returned 0x5e
	[0251.495] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2080\"") returned 0x5e
	[0251.495] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.495] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.495] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.495] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.497] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97a8) returned 0x0
	[0251.498] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.498] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbee0) returned 0x0
	[0251.498] WbemDefPath:IUnknown:Release (This=0x69b97a8) returned 0x0
	[0251.498] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbee0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbee0) returned 0x0
	[0251.498] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbee0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.498] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbee0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.498] WbemDefPath:IUnknown:AddRef (This=0x69dbee0) returned 0x3
	[0251.582] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbee0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.582] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbee0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.582] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbee0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d42b8) returned 0x0
	[0251.609] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d42b8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.609] WbemDefPath:IUnknown:Release (This=0x69d42b8) returned 0x3
	[0251.609] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.609] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.609] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbee0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.609] WbemDefPath:IUnknown:Release (This=0x69dbee0) returned 0x2
	[0251.609] WbemDefPath:IUnknown:Release (This=0x69dbee0) returned 0x1
	[0251.609] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.609] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.609] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbee0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbee0) returned 0x0
	[0251.610] WbemDefPath:IUnknown:AddRef (This=0x69dbee0) returned 0x3
	[0251.610] WbemDefPath:IUnknown:Release (This=0x69dbee0) returned 0x2
	[0251.610] WbemDefPath:IWbemPath:SetText (This=0x69dbee0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2080\"") returned 0x0
	[0251.610] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.610] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.610] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.610] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.610] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.610] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.610] IWbemClassObject:Get (in: This=0x69b6900, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba2620*=0, plFlavor=0x2ba2624*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="taskhostw.exe", varVal2=0x0), pType=0x2ba2620*=8, plFlavor=0x2ba2624*=0) returned 0x0
	[0251.611] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0251.611] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0251.611] IWbemClassObject:Get (in: This=0x69b6900, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba2620*=8, plFlavor=0x2ba2624*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="taskhostw.exe", varVal2=0x0), pType=0x2ba2620*=8, plFlavor=0x2ba2624*=0) returned 0x0
	[0251.611] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0251.611] SysStringByteLen (bstr="taskhostw.exe") returned 0x1a
	[0251.611] CoTaskMemAlloc (cb=0x4) returned 0x69b9888
	[0251.611] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9888, puReturned=0x2b9e144 | out: apObjects=0x69b9888*=0x69b76f8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.613] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69b76f8) returned 0x0
	[0251.613] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.613] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.613] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.614] IUnknown:AddRef (This=0x69b76f8) returned 0x3
	[0251.614] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.614] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.614] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69b76fc) returned 0x0
	[0251.614] IMarshal:GetUnmarshalClass (in: This=0x69b76fc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.614] IUnknown:Release (This=0x69b76fc) returned 0x3
	[0251.614] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.614] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.614] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.614] IUnknown:Release (This=0x69b76f8) returned 0x2
	[0251.614] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.614] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.614] IUnknown:QueryInterface (in: This=0x69b76f8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69b76f8) returned 0x0
	[0251.614] IUnknown:AddRef (This=0x69b76f8) returned 0x4
	[0251.614] IUnknown:Release (This=0x69b76f8) returned 0x3
	[0251.615] IUnknown:Release (This=0x69b76f8) returned 0x2
	[0251.615] CoTaskMemFree (pv=0x69b9888) 
	[0251.615] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.615] IUnknown:AddRef (This=0x69b76f8) returned 0x3
	[0251.615] IWbemClassObject:Get (in: This=0x69b76f8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.615] IWbemClassObject:Get (in: This=0x69b76f8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2420\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.615] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2420\"") returned 0x5e
	[0251.615] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2420\"") returned 0x5e
	[0251.615] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.615] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.615] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.615] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.616] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97a8) returned 0x0
	[0251.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.617] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db8c0) returned 0x0
	[0251.617] WbemDefPath:IUnknown:Release (This=0x69b97a8) returned 0x0
	[0251.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db8c0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db8c0) returned 0x0
	[0251.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db8c0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db8c0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.617] WbemDefPath:IUnknown:AddRef (This=0x69db8c0) returned 0x3
	[0251.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db8c0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db8c0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db8c0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69d42a0) returned 0x0
	[0251.617] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69d42a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.618] WbemDefPath:IUnknown:Release (This=0x69d42a0) returned 0x3
	[0251.618] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.618] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.618] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db8c0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.618] WbemDefPath:IUnknown:Release (This=0x69db8c0) returned 0x2
	[0251.618] WbemDefPath:IUnknown:Release (This=0x69db8c0) returned 0x1
	[0251.618] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.618] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.618] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db8c0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db8c0) returned 0x0
	[0251.618] WbemDefPath:IUnknown:AddRef (This=0x69db8c0) returned 0x3
	[0251.618] WbemDefPath:IUnknown:Release (This=0x69db8c0) returned 0x2
	[0251.618] WbemDefPath:IWbemPath:SetText (This=0x69db8c0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2420\"") returned 0x0
	[0251.619] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.619] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.619] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.619] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.619] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.619] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.619] IWbemClassObject:Get (in: This=0x69b76f8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba2eb4*=0, plFlavor=0x2ba2eb8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ShellExperienceHost.exe", varVal2=0x0), pType=0x2ba2eb4*=8, plFlavor=0x2ba2eb8*=0) returned 0x0
	[0251.619] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0251.619] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0251.619] IWbemClassObject:Get (in: This=0x69b76f8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba2eb4*=8, plFlavor=0x2ba2eb8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ShellExperienceHost.exe", varVal2=0x0), pType=0x2ba2eb4*=8, plFlavor=0x2ba2eb8*=0) returned 0x0
	[0251.619] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0251.619] SysStringByteLen (bstr="ShellExperienceHost.exe") returned 0x2e
	[0251.619] CoTaskMemAlloc (cb=0x4) returned 0x69b9898
	[0251.620] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9898, puReturned=0x2b9e144 | out: apObjects=0x69b9898*=0x69b7890, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.621] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69b7890) returned 0x0
	[0251.621] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.621] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.621] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.621] IUnknown:AddRef (This=0x69b7890) returned 0x3
	[0251.621] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.621] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.621] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69b7894) returned 0x0
	[0251.621] IMarshal:GetUnmarshalClass (in: This=0x69b7894, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.621] IUnknown:Release (This=0x69b7894) returned 0x3
	[0251.621] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.621] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.621] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.622] IUnknown:Release (This=0x69b7890) returned 0x2
	[0251.622] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.622] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.622] IUnknown:QueryInterface (in: This=0x69b7890, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69b7890) returned 0x0
	[0251.622] IUnknown:AddRef (This=0x69b7890) returned 0x4
	[0251.622] IUnknown:Release (This=0x69b7890) returned 0x3
	[0251.622] IUnknown:Release (This=0x69b7890) returned 0x2
	[0251.622] CoTaskMemFree (pv=0x69b9898) 
	[0251.622] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.622] IUnknown:AddRef (This=0x69b7890) returned 0x3
	[0251.622] IWbemClassObject:Get (in: This=0x69b7890, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.622] IWbemClassObject:Get (in: This=0x69b7890, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2568\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.622] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2568\"") returned 0x5e
	[0251.622] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2568\"") returned 0x5e
	[0251.623] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.623] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.623] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.623] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.624] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0251.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.624] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbb60) returned 0x0
	[0251.624] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0251.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbb60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbb60) returned 0x0
	[0251.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbb60, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbb60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.624] WbemDefPath:IUnknown:AddRef (This=0x69dbb60) returned 0x3
	[0251.624] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbb60, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.625] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbb60, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.625] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbb60, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71e1b8) returned 0x0
	[0251.625] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71e1b8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.625] WbemDefPath:IUnknown:Release (This=0x71e1b8) returned 0x3
	[0251.625] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.625] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.625] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbb60, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.625] WbemDefPath:IUnknown:Release (This=0x69dbb60) returned 0x2
	[0251.625] WbemDefPath:IUnknown:Release (This=0x69dbb60) returned 0x1
	[0251.625] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.625] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.625] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbb60, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbb60) returned 0x0
	[0251.625] WbemDefPath:IUnknown:AddRef (This=0x69dbb60) returned 0x3
	[0251.625] WbemDefPath:IUnknown:Release (This=0x69dbb60) returned 0x2
	[0251.625] WbemDefPath:IWbemPath:SetText (This=0x69dbb60, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2568\"") returned 0x0
	[0251.625] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.625] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.626] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.626] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.626] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.626] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.626] IWbemClassObject:Get (in: This=0x69b7890, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba3770*=0, plFlavor=0x2ba3774*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SearchUI.exe", varVal2=0x0), pType=0x2ba3770*=8, plFlavor=0x2ba3774*=0) returned 0x0
	[0251.626] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0251.626] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0251.667] IWbemClassObject:Get (in: This=0x69b7890, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba3770*=8, plFlavor=0x2ba3774*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SearchUI.exe", varVal2=0x0), pType=0x2ba3770*=8, plFlavor=0x2ba3774*=0) returned 0x0
	[0251.667] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0251.667] SysStringByteLen (bstr="SearchUI.exe") returned 0x18
	[0251.667] CoTaskMemAlloc (cb=0x4) returned 0x69b9888
	[0251.667] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9888, puReturned=0x2b9e144 | out: apObjects=0x69b9888*=0x69dd860, puReturned=0x2b9e144*=0x1) returned 0x0
	[0251.668] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69dd860) returned 0x0
	[0251.669] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0251.669] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0251.669] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0251.669] IUnknown:AddRef (This=0x69dd860) returned 0x3
	[0251.669] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0251.669] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0251.669] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69dd864) returned 0x0
	[0251.669] IMarshal:GetUnmarshalClass (in: This=0x69dd864, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0251.669] IUnknown:Release (This=0x69dd864) returned 0x3
	[0251.669] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0251.669] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0251.669] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0251.669] IUnknown:Release (This=0x69dd860) returned 0x2
	[0251.670] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0251.670] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0251.670] IUnknown:QueryInterface (in: This=0x69dd860, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69dd860) returned 0x0
	[0251.670] IUnknown:AddRef (This=0x69dd860) returned 0x4
	[0251.670] IUnknown:Release (This=0x69dd860) returned 0x3
	[0251.670] IUnknown:Release (This=0x69dd860) returned 0x2
	[0251.670] CoTaskMemFree (pv=0x69b9888) 
	[0251.670] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0251.670] IUnknown:AddRef (This=0x69dd860) returned 0x3
	[0251.670] IWbemClassObject:Get (in: This=0x69dd860, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0251.670] IWbemClassObject:Get (in: This=0x69dd860, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3416\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0251.670] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3416\"") returned 0x5e
	[0251.671] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3416\"") returned 0x5e
	[0251.671] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0251.671] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0251.671] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0251.671] IUnknown:Release (This=0x66b664) returned 0x1
	[0251.672] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0251.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0251.672] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db310) returned 0x0
	[0251.672] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0251.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db310, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db310) returned 0x0
	[0251.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db310, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0251.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db310, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0251.673] WbemDefPath:IUnknown:AddRef (This=0x69db310) returned 0x3
	[0251.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db310, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0251.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db310, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0251.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db310, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71e200) returned 0x0
	[0251.673] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71e200, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0251.673] WbemDefPath:IUnknown:Release (This=0x71e200) returned 0x3
	[0251.673] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0251.673] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0251.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db310, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0251.673] WbemDefPath:IUnknown:Release (This=0x69db310) returned 0x2
	[0251.673] WbemDefPath:IUnknown:Release (This=0x69db310) returned 0x1
	[0251.673] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0251.673] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0251.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db310, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db310) returned 0x0
	[0251.673] WbemDefPath:IUnknown:AddRef (This=0x69db310) returned 0x3
	[0251.673] WbemDefPath:IUnknown:Release (This=0x69db310) returned 0x2
	[0251.674] WbemDefPath:IWbemPath:SetText (This=0x69db310, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3416\"") returned 0x0
	[0251.674] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0251.674] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0251.674] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.674] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0251.674] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0251.674] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0251.674] IWbemClassObject:Get (in: This=0x69dd860, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba4004*=0, plFlavor=0x2ba4008*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="svchost.exe", varVal2=0x0), pType=0x2ba4004*=8, plFlavor=0x2ba4008*=0) returned 0x0
	[0251.674] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0251.674] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0251.674] IWbemClassObject:Get (in: This=0x69dd860, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba4004*=8, plFlavor=0x2ba4008*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="svchost.exe", varVal2=0x0), pType=0x2ba4004*=8, plFlavor=0x2ba4008*=0) returned 0x0
	[0251.675] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0251.675] SysStringByteLen (bstr="svchost.exe") returned 0x16
	[0251.675] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0251.675] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x69dd548, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.648] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69dd548) returned 0x0
	[0252.648] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.649] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.649] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.649] IUnknown:AddRef (This=0x69dd548) returned 0x3
	[0252.649] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.649] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.649] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69dd54c) returned 0x0
	[0252.649] IMarshal:GetUnmarshalClass (in: This=0x69dd54c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.649] IUnknown:Release (This=0x69dd54c) returned 0x3
	[0252.649] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.649] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.649] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.649] IUnknown:Release (This=0x69dd548) returned 0x2
	[0252.650] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.650] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.650] IUnknown:QueryInterface (in: This=0x69dd548, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69dd548) returned 0x0
	[0252.650] IUnknown:AddRef (This=0x69dd548) returned 0x4
	[0252.650] IUnknown:Release (This=0x69dd548) returned 0x3
	[0252.650] IUnknown:Release (This=0x69dd548) returned 0x2
	[0252.650] CoTaskMemFree (pv=0x69b98c8) 
	[0252.650] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.650] IUnknown:AddRef (This=0x69dd548) returned 0x3
	[0252.650] IWbemClassObject:Get (in: This=0x69dd548, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.650] IWbemClassObject:Get (in: This=0x69dd548, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3812\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.651] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3812\"") returned 0x5e
	[0252.651] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3812\"") returned 0x5e
	[0252.651] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.651] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.651] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.651] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.652] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0252.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.652] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbd20) returned 0x0
	[0252.652] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0252.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd20, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbd20) returned 0x0
	[0252.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd20, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd20, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.653] WbemDefPath:IUnknown:AddRef (This=0x69dbd20) returned 0x3
	[0252.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd20, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd20, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd20, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71e7a0) returned 0x0
	[0252.653] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71e7a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.653] WbemDefPath:IUnknown:Release (This=0x71e7a0) returned 0x3
	[0252.653] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.653] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd20, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.653] WbemDefPath:IUnknown:Release (This=0x69dbd20) returned 0x2
	[0252.653] WbemDefPath:IUnknown:Release (This=0x69dbd20) returned 0x1
	[0252.653] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.653] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd20, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbd20) returned 0x0
	[0252.654] WbemDefPath:IUnknown:AddRef (This=0x69dbd20) returned 0x3
	[0252.654] WbemDefPath:IUnknown:Release (This=0x69dbd20) returned 0x2
	[0252.654] WbemDefPath:IWbemPath:SetText (This=0x69dbd20, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3812\"") returned 0x0
	[0252.654] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.654] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.654] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.654] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.654] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.654] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.654] IWbemClassObject:Get (in: This=0x69dd548, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba4890*=0, plFlavor=0x2ba4894*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SystemSettingsBroker.exe", varVal2=0x0), pType=0x2ba4890*=8, plFlavor=0x2ba4894*=0) returned 0x0
	[0252.654] SysStringByteLen (bstr="SystemSettingsBroker.exe") returned 0x30
	[0252.654] SysStringByteLen (bstr="SystemSettingsBroker.exe") returned 0x30
	[0252.654] IWbemClassObject:Get (in: This=0x69dd548, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba4890*=8, plFlavor=0x2ba4894*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SystemSettingsBroker.exe", varVal2=0x0), pType=0x2ba4890*=8, plFlavor=0x2ba4894*=0) returned 0x0
	[0252.654] SysStringByteLen (bstr="SystemSettingsBroker.exe") returned 0x30
	[0252.654] SysStringByteLen (bstr="SystemSettingsBroker.exe") returned 0x30
	[0252.655] CoTaskMemAlloc (cb=0x4) returned 0x69b9758
	[0252.655] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9758, puReturned=0x2b9e144 | out: apObjects=0x69b9758*=0x69d58a0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.656] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69d58a0) returned 0x0
	[0252.656] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.656] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.656] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.656] IUnknown:AddRef (This=0x69d58a0) returned 0x3
	[0252.656] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.656] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.657] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69d58a4) returned 0x0
	[0252.657] IMarshal:GetUnmarshalClass (in: This=0x69d58a4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.657] IUnknown:Release (This=0x69d58a4) returned 0x3
	[0252.657] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.657] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.657] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.657] IUnknown:Release (This=0x69d58a0) returned 0x2
	[0252.657] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.657] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.657] IUnknown:QueryInterface (in: This=0x69d58a0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69d58a0) returned 0x0
	[0252.657] IUnknown:AddRef (This=0x69d58a0) returned 0x4
	[0252.657] IUnknown:Release (This=0x69d58a0) returned 0x3
	[0252.657] IUnknown:Release (This=0x69d58a0) returned 0x2
	[0252.657] CoTaskMemFree (pv=0x69b9758) 
	[0252.657] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.657] IUnknown:AddRef (This=0x69d58a0) returned 0x3
	[0252.657] IWbemClassObject:Get (in: This=0x69d58a0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.658] IWbemClassObject:Get (in: This=0x69d58a0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3824\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.658] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3824\"") returned 0x5e
	[0252.658] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3824\"") returned 0x5e
	[0252.658] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.658] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.658] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.658] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.659] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98f8) returned 0x0
	[0252.660] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98f8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.660] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98f8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db930) returned 0x0
	[0252.660] WbemDefPath:IUnknown:Release (This=0x69b98f8) returned 0x0
	[0252.660] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db930, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db930) returned 0x0
	[0252.660] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db930, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.660] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db930, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.660] WbemDefPath:IUnknown:AddRef (This=0x69db930) returned 0x3
	[0252.660] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db930, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.661] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db930, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.661] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db930, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71e530) returned 0x0
	[0252.661] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71e530, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.661] WbemDefPath:IUnknown:Release (This=0x71e530) returned 0x3
	[0252.661] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.661] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.661] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db930, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.661] WbemDefPath:IUnknown:Release (This=0x69db930) returned 0x2
	[0252.661] WbemDefPath:IUnknown:Release (This=0x69db930) returned 0x1
	[0252.661] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.661] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.661] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db930, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db930) returned 0x0
	[0252.661] WbemDefPath:IUnknown:AddRef (This=0x69db930) returned 0x3
	[0252.661] WbemDefPath:IUnknown:Release (This=0x69db930) returned 0x2
	[0252.661] WbemDefPath:IWbemPath:SetText (This=0x69db930, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3824\"") returned 0x0
	[0252.661] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.662] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.662] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.662] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.662] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.662] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.662] IWbemClassObject:Get (in: This=0x69d58a0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba5154*=0, plFlavor=0x2ba5158*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="iexplore.exe", varVal2=0x0), pType=0x2ba5154*=8, plFlavor=0x2ba5158*=0) returned 0x0
	[0252.709] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0252.709] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0252.709] IWbemClassObject:Get (in: This=0x69d58a0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba5154*=8, plFlavor=0x2ba5158*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="iexplore.exe", varVal2=0x0), pType=0x2ba5154*=8, plFlavor=0x2ba5158*=0) returned 0x0
	[0252.709] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0252.709] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0252.709] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0252.709] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69d5cf8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.710] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69d5cf8) returned 0x0
	[0252.710] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.710] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.710] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.711] IUnknown:AddRef (This=0x69d5cf8) returned 0x3
	[0252.711] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.711] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.711] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69d5cfc) returned 0x0
	[0252.711] IMarshal:GetUnmarshalClass (in: This=0x69d5cfc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.711] IUnknown:Release (This=0x69d5cfc) returned 0x3
	[0252.711] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.711] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.711] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.711] IUnknown:Release (This=0x69d5cf8) returned 0x2
	[0252.711] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.711] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.711] IUnknown:QueryInterface (in: This=0x69d5cf8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69d5cf8) returned 0x0
	[0252.711] IUnknown:AddRef (This=0x69d5cf8) returned 0x4
	[0252.711] IUnknown:Release (This=0x69d5cf8) returned 0x3
	[0252.711] IUnknown:Release (This=0x69d5cf8) returned 0x2
	[0252.712] CoTaskMemFree (pv=0x69b97a8) 
	[0252.712] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.712] IUnknown:AddRef (This=0x69d5cf8) returned 0x3
	[0252.712] IWbemClassObject:Get (in: This=0x69d5cf8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.712] IWbemClassObject:Get (in: This=0x69d5cf8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3556\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.712] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3556\"") returned 0x5e
	[0252.712] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3556\"") returned 0x5e
	[0252.712] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.712] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.712] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.712] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.713] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97c8) returned 0x0
	[0252.713] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97c8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.713] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97c8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db620) returned 0x0
	[0252.714] WbemDefPath:IUnknown:Release (This=0x69b97c8) returned 0x0
	[0252.714] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db620, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db620) returned 0x0
	[0252.714] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db620, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.714] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db620, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.714] WbemDefPath:IUnknown:AddRef (This=0x69db620) returned 0x3
	[0252.714] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db620, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.714] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db620, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.714] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db620, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71dab0) returned 0x0
	[0252.714] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71dab0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.715] WbemDefPath:IUnknown:Release (This=0x71dab0) returned 0x3
	[0252.715] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.715] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.715] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db620, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.715] WbemDefPath:IUnknown:Release (This=0x69db620) returned 0x2
	[0252.715] WbemDefPath:IUnknown:Release (This=0x69db620) returned 0x1
	[0252.715] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.715] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.715] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db620, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db620) returned 0x0
	[0252.715] WbemDefPath:IUnknown:AddRef (This=0x69db620) returned 0x3
	[0252.715] WbemDefPath:IUnknown:Release (This=0x69db620) returned 0x2
	[0252.715] WbemDefPath:IWbemPath:SetText (This=0x69db620, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3556\"") returned 0x0
	[0252.716] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.716] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.716] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.716] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.716] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.716] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.716] IWbemClassObject:Get (in: This=0x69d5cf8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba59e8*=0, plFlavor=0x2ba59ec*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="later.exe", varVal2=0x0), pType=0x2ba59e8*=8, plFlavor=0x2ba59ec*=0) returned 0x0
	[0252.716] SysStringByteLen (bstr="later.exe") returned 0x12
	[0252.716] SysStringByteLen (bstr="later.exe") returned 0x12
	[0252.716] IWbemClassObject:Get (in: This=0x69d5cf8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba59e8*=8, plFlavor=0x2ba59ec*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="later.exe", varVal2=0x0), pType=0x2ba59e8*=8, plFlavor=0x2ba59ec*=0) returned 0x0
	[0252.716] SysStringByteLen (bstr="later.exe") returned 0x12
	[0252.716] SysStringByteLen (bstr="later.exe") returned 0x12
	[0252.716] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0252.716] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69d6138, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.717] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69d6138) returned 0x0
	[0252.718] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.718] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.718] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.718] IUnknown:AddRef (This=0x69d6138) returned 0x3
	[0252.718] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.718] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.718] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69d613c) returned 0x0
	[0252.718] IMarshal:GetUnmarshalClass (in: This=0x69d613c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.718] IUnknown:Release (This=0x69d613c) returned 0x3
	[0252.718] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.718] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.718] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.718] IUnknown:Release (This=0x69d6138) returned 0x2
	[0252.718] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.718] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.718] IUnknown:QueryInterface (in: This=0x69d6138, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69d6138) returned 0x0
	[0252.718] IUnknown:AddRef (This=0x69d6138) returned 0x4
	[0252.719] IUnknown:Release (This=0x69d6138) returned 0x3
	[0252.719] IUnknown:Release (This=0x69d6138) returned 0x2
	[0252.719] CoTaskMemFree (pv=0x69b97a8) 
	[0252.719] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.719] IUnknown:AddRef (This=0x69d6138) returned 0x3
	[0252.719] IWbemClassObject:Get (in: This=0x69d6138, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.719] IWbemClassObject:Get (in: This=0x69d6138, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.719] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x5e
	[0252.719] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x5e
	[0252.719] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.719] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.719] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.719] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.720] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98e8) returned 0x0
	[0252.720] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98e8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.720] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98e8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db3f0) returned 0x0
	[0252.720] WbemDefPath:IUnknown:Release (This=0x69b98e8) returned 0x0
	[0252.720] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db3f0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db3f0) returned 0x0
	[0252.720] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db3f0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.720] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db3f0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.721] WbemDefPath:IUnknown:AddRef (This=0x69db3f0) returned 0x3
	[0252.721] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db3f0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.721] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db3f0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.721] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db3f0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71d978) returned 0x0
	[0252.721] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71d978, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.721] WbemDefPath:IUnknown:Release (This=0x71d978) returned 0x3
	[0252.721] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.721] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.721] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db3f0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.721] WbemDefPath:IUnknown:Release (This=0x69db3f0) returned 0x2
	[0252.721] WbemDefPath:IUnknown:Release (This=0x69db3f0) returned 0x1
	[0252.721] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.721] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.721] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db3f0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db3f0) returned 0x0
	[0252.721] WbemDefPath:IUnknown:AddRef (This=0x69db3f0) returned 0x3
	[0252.721] WbemDefPath:IUnknown:Release (This=0x69db3f0) returned 0x2
	[0252.721] WbemDefPath:IWbemPath:SetText (This=0x69db3f0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2472\"") returned 0x0
	[0252.722] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.722] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.722] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.722] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.722] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.722] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.722] IWbemClassObject:Get (in: This=0x69d6138, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba626c*=0, plFlavor=0x2ba6270*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="investment-legal.exe", varVal2=0x0), pType=0x2ba626c*=8, plFlavor=0x2ba6270*=0) returned 0x0
	[0252.722] SysStringByteLen (bstr="investment-legal.exe") returned 0x28
	[0252.722] SysStringByteLen (bstr="investment-legal.exe") returned 0x28
	[0252.722] IWbemClassObject:Get (in: This=0x69d6138, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba626c*=8, plFlavor=0x2ba6270*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="investment-legal.exe", varVal2=0x0), pType=0x2ba626c*=8, plFlavor=0x2ba6270*=0) returned 0x0
	[0252.722] SysStringByteLen (bstr="investment-legal.exe") returned 0x28
	[0252.722] SysStringByteLen (bstr="investment-legal.exe") returned 0x28
	[0252.722] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0252.722] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x69d85b0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.723] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69d85b0) returned 0x0
	[0252.723] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.723] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.723] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.724] IUnknown:AddRef (This=0x69d85b0) returned 0x3
	[0252.724] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.724] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.724] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69d85b4) returned 0x0
	[0252.724] IMarshal:GetUnmarshalClass (in: This=0x69d85b4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.724] IUnknown:Release (This=0x69d85b4) returned 0x3
	[0252.724] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.724] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.724] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.724] IUnknown:Release (This=0x69d85b0) returned 0x2
	[0252.724] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.724] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.724] IUnknown:QueryInterface (in: This=0x69d85b0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69d85b0) returned 0x0
	[0252.724] IUnknown:AddRef (This=0x69d85b0) returned 0x4
	[0252.724] IUnknown:Release (This=0x69d85b0) returned 0x3
	[0252.724] IUnknown:Release (This=0x69d85b0) returned 0x2
	[0252.725] CoTaskMemFree (pv=0x69b98c8) 
	[0252.725] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.725] IUnknown:AddRef (This=0x69d85b0) returned 0x3
	[0252.725] IWbemClassObject:Get (in: This=0x69d85b0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.725] IWbemClassObject:Get (in: This=0x69d85b0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2592\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.725] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2592\"") returned 0x5e
	[0252.725] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2592\"") returned 0x5e
	[0252.725] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.725] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.725] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.725] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.726] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9848) returned 0x0
	[0252.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9848, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.727] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9848, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dc030) returned 0x0
	[0252.727] WbemDefPath:IUnknown:Release (This=0x69b9848) returned 0x0
	[0252.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc030, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dc030) returned 0x0
	[0252.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc030, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc030, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.727] WbemDefPath:IUnknown:AddRef (This=0x69dc030) returned 0x3
	[0252.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc030, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc030, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.727] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc030, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71dd68) returned 0x0
	[0252.728] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71dd68, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.728] WbemDefPath:IUnknown:Release (This=0x71dd68) returned 0x3
	[0252.728] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.728] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc030, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.728] WbemDefPath:IUnknown:Release (This=0x69dc030) returned 0x2
	[0252.728] WbemDefPath:IUnknown:Release (This=0x69dc030) returned 0x1
	[0252.728] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.728] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc030, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dc030) returned 0x0
	[0252.728] WbemDefPath:IUnknown:AddRef (This=0x69dc030) returned 0x3
	[0252.728] WbemDefPath:IUnknown:Release (This=0x69dc030) returned 0x2
	[0252.728] WbemDefPath:IWbemPath:SetText (This=0x69dc030, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2592\"") returned 0x0
	[0252.728] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.728] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.728] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.729] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.729] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.729] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.729] IWbemClassObject:Get (in: This=0x69d85b0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba6b20*=0, plFlavor=0x2ba6b24*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="seasonespeciallyfire.exe", varVal2=0x0), pType=0x2ba6b20*=8, plFlavor=0x2ba6b24*=0) returned 0x0
	[0252.729] SysStringByteLen (bstr="seasonespeciallyfire.exe") returned 0x30
	[0252.729] SysStringByteLen (bstr="seasonespeciallyfire.exe") returned 0x30
	[0252.729] IWbemClassObject:Get (in: This=0x69d85b0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba6b20*=8, plFlavor=0x2ba6b24*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="seasonespeciallyfire.exe", varVal2=0x0), pType=0x2ba6b20*=8, plFlavor=0x2ba6b24*=0) returned 0x0
	[0252.772] SysStringByteLen (bstr="seasonespeciallyfire.exe") returned 0x30
	[0252.772] SysStringByteLen (bstr="seasonespeciallyfire.exe") returned 0x30
	[0252.772] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0252.772] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69d8a38, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.773] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69d8a38) returned 0x0
	[0252.773] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.773] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.773] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.773] IUnknown:AddRef (This=0x69d8a38) returned 0x3
	[0252.773] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.773] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.773] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69d8a3c) returned 0x0
	[0252.774] IMarshal:GetUnmarshalClass (in: This=0x69d8a3c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.774] IUnknown:Release (This=0x69d8a3c) returned 0x3
	[0252.774] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.774] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.774] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.774] IUnknown:Release (This=0x69d8a38) returned 0x2
	[0252.774] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.774] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.774] IUnknown:QueryInterface (in: This=0x69d8a38, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69d8a38) returned 0x0
	[0252.774] IUnknown:AddRef (This=0x69d8a38) returned 0x4
	[0252.774] IUnknown:Release (This=0x69d8a38) returned 0x3
	[0252.774] IUnknown:Release (This=0x69d8a38) returned 0x2
	[0252.774] CoTaskMemFree (pv=0x69b97a8) 
	[0252.775] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.775] IUnknown:AddRef (This=0x69d8a38) returned 0x3
	[0252.775] IWbemClassObject:Get (in: This=0x69d8a38, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.775] IWbemClassObject:Get (in: This=0x69d8a38, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1332\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.775] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1332\"") returned 0x5e
	[0252.775] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1332\"") returned 0x5e
	[0252.775] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.775] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.775] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.775] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.776] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97e8) returned 0x0
	[0252.777] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97e8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.777] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97e8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbfc0) returned 0x0
	[0252.777] WbemDefPath:IUnknown:Release (This=0x69b97e8) returned 0x0
	[0252.777] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbfc0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbfc0) returned 0x0
	[0252.777] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbfc0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.777] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbfc0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.777] WbemDefPath:IUnknown:AddRef (This=0x69dbfc0) returned 0x3
	[0252.777] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbfc0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.777] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbfc0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbfc0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71dc30) returned 0x0
	[0252.778] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71dc30, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.778] WbemDefPath:IUnknown:Release (This=0x71dc30) returned 0x3
	[0252.778] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.778] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbfc0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.778] WbemDefPath:IUnknown:Release (This=0x69dbfc0) returned 0x2
	[0252.778] WbemDefPath:IUnknown:Release (This=0x69dbfc0) returned 0x1
	[0252.778] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.778] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbfc0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbfc0) returned 0x0
	[0252.778] WbemDefPath:IUnknown:AddRef (This=0x69dbfc0) returned 0x3
	[0252.778] WbemDefPath:IUnknown:Release (This=0x69dbfc0) returned 0x2
	[0252.778] WbemDefPath:IWbemPath:SetText (This=0x69dbfc0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1332\"") returned 0x0
	[0252.778] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.778] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.778] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.779] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.779] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.779] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.779] IWbemClassObject:Get (in: This=0x69d8a38, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba73e4*=0, plFlavor=0x2ba73e8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="know.exe", varVal2=0x0), pType=0x2ba73e4*=8, plFlavor=0x2ba73e8*=0) returned 0x0
	[0252.779] SysStringByteLen (bstr="know.exe") returned 0x10
	[0252.779] SysStringByteLen (bstr="know.exe") returned 0x10
	[0252.779] IWbemClassObject:Get (in: This=0x69d8a38, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba73e4*=8, plFlavor=0x2ba73e8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="know.exe", varVal2=0x0), pType=0x2ba73e4*=8, plFlavor=0x2ba73e8*=0) returned 0x0
	[0252.779] SysStringByteLen (bstr="know.exe") returned 0x10
	[0252.779] SysStringByteLen (bstr="know.exe") returned 0x10
	[0252.779] CoTaskMemAlloc (cb=0x4) returned 0x69b9818
	[0252.779] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9818, puReturned=0x2b9e144 | out: apObjects=0x69b9818*=0x717598, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.781] IUnknown:QueryInterface (in: This=0x717598, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x717598) returned 0x0
	[0252.781] IUnknown:QueryInterface (in: This=0x717598, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.781] IUnknown:QueryInterface (in: This=0x717598, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.781] IUnknown:QueryInterface (in: This=0x717598, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.781] IUnknown:AddRef (This=0x717598) returned 0x3
	[0252.781] IUnknown:QueryInterface (in: This=0x717598, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.781] IUnknown:QueryInterface (in: This=0x717598, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.781] IUnknown:QueryInterface (in: This=0x717598, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x71759c) returned 0x0
	[0252.782] IMarshal:GetUnmarshalClass (in: This=0x71759c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.782] IUnknown:Release (This=0x71759c) returned 0x3
	[0252.782] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.782] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.782] IUnknown:QueryInterface (in: This=0x717598, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.782] IUnknown:Release (This=0x717598) returned 0x2
	[0252.782] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.782] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.782] IUnknown:QueryInterface (in: This=0x717598, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x717598) returned 0x0
	[0252.782] IUnknown:AddRef (This=0x717598) returned 0x4
	[0252.782] IUnknown:Release (This=0x717598) returned 0x3
	[0252.782] IUnknown:Release (This=0x717598) returned 0x2
	[0252.782] CoTaskMemFree (pv=0x69b9818) 
	[0252.782] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.782] IUnknown:AddRef (This=0x717598) returned 0x3
	[0252.782] IWbemClassObject:Get (in: This=0x717598, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.782] IWbemClassObject:Get (in: This=0x717598, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"560\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.783] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"560\"") returned 0x5c
	[0252.783] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"560\"") returned 0x5c
	[0252.783] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.783] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.783] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.783] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.784] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0252.784] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.784] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db9a0) returned 0x0
	[0252.784] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0252.784] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db9a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db9a0) returned 0x0
	[0252.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db9a0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db9a0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.785] WbemDefPath:IUnknown:AddRef (This=0x69db9a0) returned 0x3
	[0252.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db9a0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db9a0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db9a0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71e128) returned 0x0
	[0252.785] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71e128, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.785] WbemDefPath:IUnknown:Release (This=0x71e128) returned 0x3
	[0252.785] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.785] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db9a0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.785] WbemDefPath:IUnknown:Release (This=0x69db9a0) returned 0x2
	[0252.785] WbemDefPath:IUnknown:Release (This=0x69db9a0) returned 0x1
	[0252.785] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.785] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db9a0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db9a0) returned 0x0
	[0252.785] WbemDefPath:IUnknown:AddRef (This=0x69db9a0) returned 0x3
	[0252.785] WbemDefPath:IUnknown:Release (This=0x69db9a0) returned 0x2
	[0252.785] WbemDefPath:IWbemPath:SetText (This=0x69db9a0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"560\"") returned 0x0
	[0252.785] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.786] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.786] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.786] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.786] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.786] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.786] IWbemClassObject:Get (in: This=0x717598, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba7c68*=0, plFlavor=0x2ba7c6c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="walk.exe", varVal2=0x0), pType=0x2ba7c68*=8, plFlavor=0x2ba7c6c*=0) returned 0x0
	[0252.786] SysStringByteLen (bstr="walk.exe") returned 0x10
	[0252.786] SysStringByteLen (bstr="walk.exe") returned 0x10
	[0252.786] IWbemClassObject:Get (in: This=0x717598, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba7c68*=8, plFlavor=0x2ba7c6c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="walk.exe", varVal2=0x0), pType=0x2ba7c68*=8, plFlavor=0x2ba7c6c*=0) returned 0x0
	[0252.786] SysStringByteLen (bstr="walk.exe") returned 0x10
	[0252.786] SysStringByteLen (bstr="walk.exe") returned 0x10
	[0252.826] CoTaskMemAlloc (cb=0x4) returned 0x69b98e8
	[0252.826] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98e8, puReturned=0x2b9e144 | out: apObjects=0x69b98e8*=0x7170d0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.827] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x7170d0) returned 0x0
	[0252.827] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.827] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.827] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.827] IUnknown:AddRef (This=0x7170d0) returned 0x3
	[0252.827] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.827] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.827] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x7170d4) returned 0x0
	[0252.827] IMarshal:GetUnmarshalClass (in: This=0x7170d4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.827] IUnknown:Release (This=0x7170d4) returned 0x3
	[0252.827] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.828] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.828] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.828] IUnknown:Release (This=0x7170d0) returned 0x2
	[0252.828] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.828] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.828] IUnknown:QueryInterface (in: This=0x7170d0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x7170d0) returned 0x0
	[0252.828] IUnknown:AddRef (This=0x7170d0) returned 0x4
	[0252.828] IUnknown:Release (This=0x7170d0) returned 0x3
	[0252.828] IUnknown:Release (This=0x7170d0) returned 0x2
	[0252.828] CoTaskMemFree (pv=0x69b98e8) 
	[0252.828] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.828] IUnknown:AddRef (This=0x7170d0) returned 0x3
	[0252.828] IWbemClassObject:Get (in: This=0x7170d0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.828] IWbemClassObject:Get (in: This=0x7170d0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"748\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.829] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"748\"") returned 0x5c
	[0252.829] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"748\"") returned 0x5c
	[0252.829] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.829] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.829] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.829] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.830] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0252.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.830] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbc40) returned 0x0
	[0252.830] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0252.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbc40, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbc40) returned 0x0
	[0252.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbc40, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.830] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbc40, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.831] WbemDefPath:IUnknown:AddRef (This=0x69dbc40) returned 0x3
	[0252.831] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbc40, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.831] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbc40, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.831] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbc40, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x71e068) returned 0x0
	[0252.831] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x71e068, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.831] WbemDefPath:IUnknown:Release (This=0x71e068) returned 0x3
	[0252.831] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.831] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.831] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbc40, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.831] WbemDefPath:IUnknown:Release (This=0x69dbc40) returned 0x2
	[0252.831] WbemDefPath:IUnknown:Release (This=0x69dbc40) returned 0x1
	[0252.831] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.831] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.831] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbc40, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbc40) returned 0x0
	[0252.831] WbemDefPath:IUnknown:AddRef (This=0x69dbc40) returned 0x3
	[0252.831] WbemDefPath:IUnknown:Release (This=0x69dbc40) returned 0x2
	[0252.832] WbemDefPath:IWbemPath:SetText (This=0x69dbc40, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"748\"") returned 0x0
	[0252.832] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.833] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.833] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.833] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.833] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.833] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.833] IWbemClassObject:Get (in: This=0x7170d0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba84ec*=0, plFlavor=0x2ba84f0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="herself_capital_practice.exe", varVal2=0x0), pType=0x2ba84ec*=8, plFlavor=0x2ba84f0*=0) returned 0x0
	[0252.833] SysStringByteLen (bstr="herself_capital_practice.exe") returned 0x38
	[0252.833] SysStringByteLen (bstr="herself_capital_practice.exe") returned 0x38
	[0252.833] IWbemClassObject:Get (in: This=0x7170d0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba84ec*=8, plFlavor=0x2ba84f0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="herself_capital_practice.exe", varVal2=0x0), pType=0x2ba84ec*=8, plFlavor=0x2ba84f0*=0) returned 0x0
	[0252.833] SysStringByteLen (bstr="herself_capital_practice.exe") returned 0x38
	[0252.833] SysStringByteLen (bstr="herself_capital_practice.exe") returned 0x38
	[0252.833] CoTaskMemAlloc (cb=0x4) returned 0x69b97f8
	[0252.833] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97f8, puReturned=0x2b9e144 | out: apObjects=0x69b97f8*=0x716a70, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.834] IUnknown:QueryInterface (in: This=0x716a70, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x716a70) returned 0x0
	[0252.835] IUnknown:QueryInterface (in: This=0x716a70, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.835] IUnknown:QueryInterface (in: This=0x716a70, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.835] IUnknown:QueryInterface (in: This=0x716a70, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.835] IUnknown:AddRef (This=0x716a70) returned 0x3
	[0252.835] IUnknown:QueryInterface (in: This=0x716a70, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.835] IUnknown:QueryInterface (in: This=0x716a70, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.835] IUnknown:QueryInterface (in: This=0x716a70, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x716a74) returned 0x0
	[0252.835] IMarshal:GetUnmarshalClass (in: This=0x716a74, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.835] IUnknown:Release (This=0x716a74) returned 0x3
	[0252.835] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.835] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.835] IUnknown:QueryInterface (in: This=0x716a70, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.835] IUnknown:Release (This=0x716a70) returned 0x2
	[0252.835] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.836] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.836] IUnknown:QueryInterface (in: This=0x716a70, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x716a70) returned 0x0
	[0252.836] IUnknown:AddRef (This=0x716a70) returned 0x4
	[0252.836] IUnknown:Release (This=0x716a70) returned 0x3
	[0252.836] IUnknown:Release (This=0x716a70) returned 0x2
	[0252.836] CoTaskMemFree (pv=0x69b97f8) 
	[0252.836] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.836] IUnknown:AddRef (This=0x716a70) returned 0x3
	[0252.836] IWbemClassObject:Get (in: This=0x716a70, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.836] IWbemClassObject:Get (in: This=0x716a70, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1132\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.836] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1132\"") returned 0x5e
	[0252.836] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1132\"") returned 0x5e
	[0252.836] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.836] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.836] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.836] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.837] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9828) returned 0x0
	[0252.837] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9828, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.837] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9828, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbd90) returned 0x0
	[0252.837] WbemDefPath:IUnknown:Release (This=0x69b9828) returned 0x0
	[0252.837] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd90, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbd90) returned 0x0
	[0252.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd90, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd90, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.838] WbemDefPath:IUnknown:AddRef (This=0x69dbd90) returned 0x3
	[0252.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd90, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd90, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd90, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e10b8) returned 0x0
	[0252.838] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e10b8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.838] WbemDefPath:IUnknown:Release (This=0x69e10b8) returned 0x3
	[0252.838] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.838] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd90, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.838] WbemDefPath:IUnknown:Release (This=0x69dbd90) returned 0x2
	[0252.838] WbemDefPath:IUnknown:Release (This=0x69dbd90) returned 0x1
	[0252.838] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.838] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.838] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbd90, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbd90) returned 0x0
	[0252.839] WbemDefPath:IUnknown:AddRef (This=0x69dbd90) returned 0x3
	[0252.839] WbemDefPath:IUnknown:Release (This=0x69dbd90) returned 0x2
	[0252.839] WbemDefPath:IWbemPath:SetText (This=0x69dbd90, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1132\"") returned 0x0
	[0252.839] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.839] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.839] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.839] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.839] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.839] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.839] IWbemClassObject:Get (in: This=0x716a70, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba8dc0*=0, plFlavor=0x2ba8dc4*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="door-war-sea.exe", varVal2=0x0), pType=0x2ba8dc0*=8, plFlavor=0x2ba8dc4*=0) returned 0x0
	[0252.839] SysStringByteLen (bstr="door-war-sea.exe") returned 0x20
	[0252.839] SysStringByteLen (bstr="door-war-sea.exe") returned 0x20
	[0252.839] IWbemClassObject:Get (in: This=0x716a70, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba8dc0*=8, plFlavor=0x2ba8dc4*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="door-war-sea.exe", varVal2=0x0), pType=0x2ba8dc0*=8, plFlavor=0x2ba8dc4*=0) returned 0x0
	[0252.839] SysStringByteLen (bstr="door-war-sea.exe") returned 0x20
	[0252.839] SysStringByteLen (bstr="door-war-sea.exe") returned 0x20
	[0252.839] CoTaskMemAlloc (cb=0x4) returned 0x69b9748
	[0252.839] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9748, puReturned=0x2b9e144 | out: apObjects=0x69b9748*=0x716da0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.840] IUnknown:QueryInterface (in: This=0x716da0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x716da0) returned 0x0
	[0252.840] IUnknown:QueryInterface (in: This=0x716da0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.840] IUnknown:QueryInterface (in: This=0x716da0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.840] IUnknown:QueryInterface (in: This=0x716da0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.841] IUnknown:AddRef (This=0x716da0) returned 0x3
	[0252.841] IUnknown:QueryInterface (in: This=0x716da0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.841] IUnknown:QueryInterface (in: This=0x716da0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.841] IUnknown:QueryInterface (in: This=0x716da0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x716da4) returned 0x0
	[0252.841] IMarshal:GetUnmarshalClass (in: This=0x716da4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.841] IUnknown:Release (This=0x716da4) returned 0x3
	[0252.841] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.841] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.841] IUnknown:QueryInterface (in: This=0x716da0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.841] IUnknown:Release (This=0x716da0) returned 0x2
	[0252.841] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.841] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.841] IUnknown:QueryInterface (in: This=0x716da0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x716da0) returned 0x0
	[0252.841] IUnknown:AddRef (This=0x716da0) returned 0x4
	[0252.841] IUnknown:Release (This=0x716da0) returned 0x3
	[0252.841] IUnknown:Release (This=0x716da0) returned 0x2
	[0252.841] CoTaskMemFree (pv=0x69b9748) 
	[0252.841] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.841] IUnknown:AddRef (This=0x716da0) returned 0x3
	[0252.841] IWbemClassObject:Get (in: This=0x716da0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.842] IWbemClassObject:Get (in: This=0x716da0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2508\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.842] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2508\"") returned 0x5e
	[0252.842] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2508\"") returned 0x5e
	[0252.842] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.842] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.842] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.842] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.878] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97e8) returned 0x0
	[0252.879] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97e8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.879] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97e8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db770) returned 0x0
	[0252.879] WbemDefPath:IUnknown:Release (This=0x69b97e8) returned 0x0
	[0252.879] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db770, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db770) returned 0x0
	[0252.879] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db770, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.879] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db770, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.879] WbemDefPath:IUnknown:AddRef (This=0x69db770) returned 0x3
	[0252.879] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db770, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.879] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db770, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.879] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db770, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e0ef0) returned 0x0
	[0252.879] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e0ef0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.880] WbemDefPath:IUnknown:Release (This=0x69e0ef0) returned 0x3
	[0252.880] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.880] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.880] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db770, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.880] WbemDefPath:IUnknown:Release (This=0x69db770) returned 0x2
	[0252.880] WbemDefPath:IUnknown:Release (This=0x69db770) returned 0x1
	[0252.880] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.880] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.880] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db770, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db770) returned 0x0
	[0252.880] WbemDefPath:IUnknown:AddRef (This=0x69db770) returned 0x3
	[0252.880] WbemDefPath:IUnknown:Release (This=0x69db770) returned 0x2
	[0252.880] WbemDefPath:IWbemPath:SetText (This=0x69db770, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2508\"") returned 0x0
	[0252.880] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.880] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.880] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.880] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.880] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.880] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.880] IWbemClassObject:Get (in: This=0x716da0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba9664*=0, plFlavor=0x2ba9668*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="whether.exe", varVal2=0x0), pType=0x2ba9664*=8, plFlavor=0x2ba9668*=0) returned 0x0
	[0252.881] SysStringByteLen (bstr="whether.exe") returned 0x16
	[0252.881] SysStringByteLen (bstr="whether.exe") returned 0x16
	[0252.881] IWbemClassObject:Get (in: This=0x716da0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba9664*=8, plFlavor=0x2ba9668*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="whether.exe", varVal2=0x0), pType=0x2ba9664*=8, plFlavor=0x2ba9668*=0) returned 0x0
	[0252.881] SysStringByteLen (bstr="whether.exe") returned 0x16
	[0252.881] SysStringByteLen (bstr="whether.exe") returned 0x16
	[0252.881] CoTaskMemAlloc (cb=0x4) returned 0x69b9828
	[0252.881] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9828, puReturned=0x2b9e144 | out: apObjects=0x69b9828*=0x716c08, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.882] IUnknown:QueryInterface (in: This=0x716c08, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x716c08) returned 0x0
	[0252.882] IUnknown:QueryInterface (in: This=0x716c08, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.882] IUnknown:QueryInterface (in: This=0x716c08, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.882] IUnknown:QueryInterface (in: This=0x716c08, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.882] IUnknown:AddRef (This=0x716c08) returned 0x3
	[0252.883] IUnknown:QueryInterface (in: This=0x716c08, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.883] IUnknown:QueryInterface (in: This=0x716c08, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.883] IUnknown:QueryInterface (in: This=0x716c08, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x716c0c) returned 0x0
	[0252.883] IMarshal:GetUnmarshalClass (in: This=0x716c0c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.883] IUnknown:Release (This=0x716c0c) returned 0x3
	[0252.883] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.883] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.883] IUnknown:QueryInterface (in: This=0x716c08, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.883] IUnknown:Release (This=0x716c08) returned 0x2
	[0252.883] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.883] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.883] IUnknown:QueryInterface (in: This=0x716c08, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x716c08) returned 0x0
	[0252.883] IUnknown:AddRef (This=0x716c08) returned 0x4
	[0252.883] IUnknown:Release (This=0x716c08) returned 0x3
	[0252.883] IUnknown:Release (This=0x716c08) returned 0x2
	[0252.884] CoTaskMemFree (pv=0x69b9828) 
	[0252.884] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.884] IUnknown:AddRef (This=0x716c08) returned 0x3
	[0252.884] IWbemClassObject:Get (in: This=0x716c08, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.884] IWbemClassObject:Get (in: This=0x716c08, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2012\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.884] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2012\"") returned 0x5e
	[0252.884] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2012\"") returned 0x5e
	[0252.884] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.884] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.885] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.885] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.885] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0252.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.886] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbcb0) returned 0x0
	[0252.886] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0252.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbcb0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbcb0) returned 0x0
	[0252.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbcb0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbcb0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.886] WbemDefPath:IUnknown:AddRef (This=0x69dbcb0) returned 0x3
	[0252.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbcb0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbcb0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbcb0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e0290) returned 0x0
	[0252.886] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e0290, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.886] WbemDefPath:IUnknown:Release (This=0x69e0290) returned 0x3
	[0252.887] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.887] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.887] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbcb0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.887] WbemDefPath:IUnknown:Release (This=0x69dbcb0) returned 0x2
	[0252.887] WbemDefPath:IUnknown:Release (This=0x69dbcb0) returned 0x1
	[0252.887] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.887] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.887] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbcb0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbcb0) returned 0x0
	[0252.887] WbemDefPath:IUnknown:AddRef (This=0x69dbcb0) returned 0x3
	[0252.887] WbemDefPath:IUnknown:Release (This=0x69dbcb0) returned 0x2
	[0252.887] WbemDefPath:IWbemPath:SetText (This=0x69dbcb0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2012\"") returned 0x0
	[0252.887] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.887] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.887] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.887] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.887] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.887] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.887] IWbemClassObject:Get (in: This=0x716c08, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba9ef0*=0, plFlavor=0x2ba9ef4*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="size.exe", varVal2=0x0), pType=0x2ba9ef0*=8, plFlavor=0x2ba9ef4*=0) returned 0x0
	[0252.888] SysStringByteLen (bstr="size.exe") returned 0x10
	[0252.888] SysStringByteLen (bstr="size.exe") returned 0x10
	[0252.888] IWbemClassObject:Get (in: This=0x716c08, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ba9ef0*=8, plFlavor=0x2ba9ef4*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="size.exe", varVal2=0x0), pType=0x2ba9ef0*=8, plFlavor=0x2ba9ef4*=0) returned 0x0
	[0252.888] SysStringByteLen (bstr="size.exe") returned 0x10
	[0252.888] SysStringByteLen (bstr="size.exe") returned 0x10
	[0252.888] CoTaskMemAlloc (cb=0x4) returned 0x69b9868
	[0252.888] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9868, puReturned=0x2b9e144 | out: apObjects=0x69b9868*=0x716f38, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.889] IUnknown:QueryInterface (in: This=0x716f38, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x716f38) returned 0x0
	[0252.889] IUnknown:QueryInterface (in: This=0x716f38, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.889] IUnknown:QueryInterface (in: This=0x716f38, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.889] IUnknown:QueryInterface (in: This=0x716f38, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.889] IUnknown:AddRef (This=0x716f38) returned 0x3
	[0252.889] IUnknown:QueryInterface (in: This=0x716f38, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.889] IUnknown:QueryInterface (in: This=0x716f38, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.889] IUnknown:QueryInterface (in: This=0x716f38, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x716f3c) returned 0x0
	[0252.889] IMarshal:GetUnmarshalClass (in: This=0x716f3c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.889] IUnknown:Release (This=0x716f3c) returned 0x3
	[0252.889] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.889] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.890] IUnknown:QueryInterface (in: This=0x716f38, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.890] IUnknown:Release (This=0x716f38) returned 0x2
	[0252.890] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.890] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.890] IUnknown:QueryInterface (in: This=0x716f38, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x716f38) returned 0x0
	[0252.890] IUnknown:AddRef (This=0x716f38) returned 0x4
	[0252.890] IUnknown:Release (This=0x716f38) returned 0x3
	[0252.890] IUnknown:Release (This=0x716f38) returned 0x2
	[0252.890] CoTaskMemFree (pv=0x69b9868) 
	[0252.890] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.890] IUnknown:AddRef (This=0x716f38) returned 0x3
	[0252.890] IWbemClassObject:Get (in: This=0x716f38, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.890] IWbemClassObject:Get (in: This=0x716f38, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3112\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.890] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3112\"") returned 0x5e
	[0252.890] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3112\"") returned 0x5e
	[0252.891] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.891] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.891] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.891] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.891] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0252.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.892] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dba10) returned 0x0
	[0252.892] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0252.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba10, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dba10) returned 0x0
	[0252.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba10, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba10, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.892] WbemDefPath:IUnknown:AddRef (This=0x69dba10) returned 0x3
	[0252.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba10, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba10, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba10, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e02c0) returned 0x0
	[0252.892] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e02c0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.892] WbemDefPath:IUnknown:Release (This=0x69e02c0) returned 0x3
	[0252.892] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.892] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.893] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba10, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.893] WbemDefPath:IUnknown:Release (This=0x69dba10) returned 0x2
	[0252.893] WbemDefPath:IUnknown:Release (This=0x69dba10) returned 0x1
	[0252.893] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.893] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.893] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba10, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dba10) returned 0x0
	[0252.893] WbemDefPath:IUnknown:AddRef (This=0x69dba10) returned 0x3
	[0252.893] WbemDefPath:IUnknown:Release (This=0x69dba10) returned 0x2
	[0252.893] WbemDefPath:IWbemPath:SetText (This=0x69dba10, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3112\"") returned 0x0
	[0252.893] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.893] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.893] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.893] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.893] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.893] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.893] IWbemClassObject:Get (in: This=0x716f38, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2baa774*=0, plFlavor=0x2baa778*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="measure recent.exe", varVal2=0x0), pType=0x2baa774*=8, plFlavor=0x2baa778*=0) returned 0x0
	[0252.893] SysStringByteLen (bstr="measure recent.exe") returned 0x24
	[0252.893] SysStringByteLen (bstr="measure recent.exe") returned 0x24
	[0252.894] IWbemClassObject:Get (in: This=0x716f38, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2baa774*=8, plFlavor=0x2baa778*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="measure recent.exe", varVal2=0x0), pType=0x2baa774*=8, plFlavor=0x2baa778*=0) returned 0x0
	[0252.894] SysStringByteLen (bstr="measure recent.exe") returned 0x24
	[0252.894] SysStringByteLen (bstr="measure recent.exe") returned 0x24
	[0252.894] CoTaskMemAlloc (cb=0x4) returned 0x69b9738
	[0252.894] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9738, puReturned=0x2b9e144 | out: apObjects=0x69b9738*=0x69e4e88, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.896] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e4e88) returned 0x0
	[0252.896] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.896] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.896] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.896] IUnknown:AddRef (This=0x69e4e88) returned 0x3
	[0252.896] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.897] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.897] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e4e8c) returned 0x0
	[0252.897] IMarshal:GetUnmarshalClass (in: This=0x69e4e8c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.897] IUnknown:Release (This=0x69e4e8c) returned 0x3
	[0252.897] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.897] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.897] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.897] IUnknown:Release (This=0x69e4e88) returned 0x2
	[0252.897] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.897] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.897] IUnknown:QueryInterface (in: This=0x69e4e88, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e4e88) returned 0x0
	[0252.897] IUnknown:AddRef (This=0x69e4e88) returned 0x4
	[0252.897] IUnknown:Release (This=0x69e4e88) returned 0x3
	[0252.897] IUnknown:Release (This=0x69e4e88) returned 0x2
	[0252.897] CoTaskMemFree (pv=0x69b9738) 
	[0252.897] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.897] IUnknown:AddRef (This=0x69e4e88) returned 0x3
	[0252.897] IWbemClassObject:Get (in: This=0x69e4e88, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.898] IWbemClassObject:Get (in: This=0x69e4e88, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3184\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.898] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3184\"") returned 0x5e
	[0252.898] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3184\"") returned 0x5e
	[0252.898] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.898] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.898] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.898] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.899] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0252.899] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.899] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbe00) returned 0x0
	[0252.899] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0252.899] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe00, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbe00) returned 0x0
	[0252.899] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe00, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.899] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe00, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.899] WbemDefPath:IUnknown:AddRef (This=0x69dbe00) returned 0x3
	[0252.899] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe00, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.899] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe00, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.900] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe00, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e0578) returned 0x0
	[0252.900] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e0578, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.900] WbemDefPath:IUnknown:Release (This=0x69e0578) returned 0x3
	[0252.900] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.900] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.900] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe00, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.900] WbemDefPath:IUnknown:Release (This=0x69dbe00) returned 0x2
	[0252.900] WbemDefPath:IUnknown:Release (This=0x69dbe00) returned 0x1
	[0252.900] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.900] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.900] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbe00, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbe00) returned 0x0
	[0252.900] WbemDefPath:IUnknown:AddRef (This=0x69dbe00) returned 0x3
	[0252.900] WbemDefPath:IUnknown:Release (This=0x69dbe00) returned 0x2
	[0252.900] WbemDefPath:IWbemPath:SetText (This=0x69dbe00, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3184\"") returned 0x0
	[0252.900] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.900] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.900] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.900] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.900] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.901] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.901] IWbemClassObject:Get (in: This=0x69e4e88, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bab020*=0, plFlavor=0x2bab024*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="tv write.exe", varVal2=0x0), pType=0x2bab020*=8, plFlavor=0x2bab024*=0) returned 0x0
	[0252.901] SysStringByteLen (bstr="tv write.exe") returned 0x18
	[0252.901] SysStringByteLen (bstr="tv write.exe") returned 0x18
	[0252.901] IWbemClassObject:Get (in: This=0x69e4e88, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bab020*=8, plFlavor=0x2bab024*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="tv write.exe", varVal2=0x0), pType=0x2bab020*=8, plFlavor=0x2bab024*=0) returned 0x0
	[0252.901] SysStringByteLen (bstr="tv write.exe") returned 0x18
	[0252.901] SysStringByteLen (bstr="tv write.exe") returned 0x18
	[0252.901] CoTaskMemAlloc (cb=0x4) returned 0x69b9848
	[0252.901] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9848, puReturned=0x2b9e144 | out: apObjects=0x69b9848*=0x69e4cf0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.903] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e4cf0) returned 0x0
	[0252.903] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.903] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.903] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.903] IUnknown:AddRef (This=0x69e4cf0) returned 0x3
	[0252.903] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.903] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.903] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e4cf4) returned 0x0
	[0252.903] IMarshal:GetUnmarshalClass (in: This=0x69e4cf4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.903] IUnknown:Release (This=0x69e4cf4) returned 0x3
	[0252.903] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.903] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.903] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.904] IUnknown:Release (This=0x69e4cf0) returned 0x2
	[0252.904] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.904] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.904] IUnknown:QueryInterface (in: This=0x69e4cf0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e4cf0) returned 0x0
	[0252.904] IUnknown:AddRef (This=0x69e4cf0) returned 0x4
	[0252.904] IUnknown:Release (This=0x69e4cf0) returned 0x3
	[0252.904] IUnknown:Release (This=0x69e4cf0) returned 0x2
	[0252.904] CoTaskMemFree (pv=0x69b9848) 
	[0252.904] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.904] IUnknown:AddRef (This=0x69e4cf0) returned 0x3
	[0252.904] IWbemClassObject:Get (in: This=0x69e4cf0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.904] IWbemClassObject:Get (in: This=0x69e4cf0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2196\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.904] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2196\"") returned 0x5e
	[0252.904] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2196\"") returned 0x5e
	[0252.904] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.905] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.905] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.905] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.905] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0252.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.906] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db2a0) returned 0x0
	[0252.906] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0252.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db2a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db2a0) returned 0x0
	[0252.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db2a0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db2a0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.906] WbemDefPath:IUnknown:AddRef (This=0x69db2a0) returned 0x3
	[0252.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db2a0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db2a0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db2a0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e0608) returned 0x0
	[0252.906] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e0608, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.906] WbemDefPath:IUnknown:Release (This=0x69e0608) returned 0x3
	[0252.906] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.906] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.906] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db2a0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.907] WbemDefPath:IUnknown:Release (This=0x69db2a0) returned 0x2
	[0252.907] WbemDefPath:IUnknown:Release (This=0x69db2a0) returned 0x1
	[0252.907] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.907] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.907] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db2a0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db2a0) returned 0x0
	[0252.907] WbemDefPath:IUnknown:AddRef (This=0x69db2a0) returned 0x3
	[0252.907] WbemDefPath:IUnknown:Release (This=0x69db2a0) returned 0x2
	[0252.907] WbemDefPath:IWbemPath:SetText (This=0x69db2a0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2196\"") returned 0x0
	[0252.907] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.907] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.907] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.907] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.907] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.907] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.907] IWbemClassObject:Get (in: This=0x69e4cf0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bab8b4*=0, plFlavor=0x2bab8b8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="nature thank.exe", varVal2=0x0), pType=0x2bab8b4*=8, plFlavor=0x2bab8b8*=0) returned 0x0
	[0252.907] SysStringByteLen (bstr="nature thank.exe") returned 0x20
	[0252.907] SysStringByteLen (bstr="nature thank.exe") returned 0x20
	[0252.907] IWbemClassObject:Get (in: This=0x69e4cf0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bab8b4*=8, plFlavor=0x2bab8b8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="nature thank.exe", varVal2=0x0), pType=0x2bab8b4*=8, plFlavor=0x2bab8b8*=0) returned 0x0
	[0252.907] SysStringByteLen (bstr="nature thank.exe") returned 0x20
	[0252.907] SysStringByteLen (bstr="nature thank.exe") returned 0x20
	[0252.908] CoTaskMemAlloc (cb=0x4) returned 0x69b97f8
	[0252.908] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97f8, puReturned=0x2b9e144 | out: apObjects=0x69b97f8*=0x69e3e98, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.908] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e3e98) returned 0x0
	[0252.908] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.908] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.908] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.909] IUnknown:AddRef (This=0x69e3e98) returned 0x3
	[0252.909] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.909] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.909] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e3e9c) returned 0x0
	[0252.909] IMarshal:GetUnmarshalClass (in: This=0x69e3e9c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.909] IUnknown:Release (This=0x69e3e9c) returned 0x3
	[0252.909] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.946] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.946] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.946] IUnknown:Release (This=0x69e3e98) returned 0x2
	[0252.946] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.946] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.946] IUnknown:QueryInterface (in: This=0x69e3e98, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e3e98) returned 0x0
	[0252.947] IUnknown:AddRef (This=0x69e3e98) returned 0x4
	[0252.947] IUnknown:Release (This=0x69e3e98) returned 0x3
	[0252.947] IUnknown:Release (This=0x69e3e98) returned 0x2
	[0252.947] CoTaskMemFree (pv=0x69b97f8) 
	[0252.947] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.947] IUnknown:AddRef (This=0x69e3e98) returned 0x3
	[0252.947] IWbemClassObject:Get (in: This=0x69e3e98, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.947] IWbemClassObject:Get (in: This=0x69e3e98, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"480\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.947] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"480\"") returned 0x5c
	[0252.947] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"480\"") returned 0x5c
	[0252.948] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.948] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.948] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.948] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.949] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97d8) returned 0x0
	[0252.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97d8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.949] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97d8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db380) returned 0x0
	[0252.949] WbemDefPath:IUnknown:Release (This=0x69b97d8) returned 0x0
	[0252.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db380, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db380) returned 0x0
	[0252.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db380, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db380, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.950] WbemDefPath:IUnknown:AddRef (This=0x69db380) returned 0x3
	[0252.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db380, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db380, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db380, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e0a88) returned 0x0
	[0252.950] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e0a88, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.950] WbemDefPath:IUnknown:Release (This=0x69e0a88) returned 0x3
	[0252.950] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.950] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db380, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.950] WbemDefPath:IUnknown:Release (This=0x69db380) returned 0x2
	[0252.950] WbemDefPath:IUnknown:Release (This=0x69db380) returned 0x1
	[0252.950] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.950] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db380, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db380) returned 0x0
	[0252.950] WbemDefPath:IUnknown:AddRef (This=0x69db380) returned 0x3
	[0252.950] WbemDefPath:IUnknown:Release (This=0x69db380) returned 0x2
	[0252.950] WbemDefPath:IWbemPath:SetText (This=0x69db380, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"480\"") returned 0x0
	[0252.950] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.951] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.951] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.951] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.951] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.951] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.951] IWbemClassObject:Get (in: This=0x69e3e98, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bac158*=0, plFlavor=0x2bac15c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="carry_notice.exe", varVal2=0x0), pType=0x2bac158*=8, plFlavor=0x2bac15c*=0) returned 0x0
	[0252.951] SysStringByteLen (bstr="carry_notice.exe") returned 0x20
	[0252.951] SysStringByteLen (bstr="carry_notice.exe") returned 0x20
	[0252.951] IWbemClassObject:Get (in: This=0x69e3e98, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bac158*=8, plFlavor=0x2bac15c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="carry_notice.exe", varVal2=0x0), pType=0x2bac158*=8, plFlavor=0x2bac15c*=0) returned 0x0
	[0252.952] SysStringByteLen (bstr="carry_notice.exe") returned 0x20
	[0252.952] SysStringByteLen (bstr="carry_notice.exe") returned 0x20
	[0252.952] CoTaskMemAlloc (cb=0x4) returned 0x69b9758
	[0252.952] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9758, puReturned=0x2b9e144 | out: apObjects=0x69b9758*=0x69e4360, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e4360) returned 0x0
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.953] IUnknown:AddRef (This=0x69e4360) returned 0x3
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e4364) returned 0x0
	[0252.953] IMarshal:GetUnmarshalClass (in: This=0x69e4364, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.953] IUnknown:Release (This=0x69e4364) returned 0x3
	[0252.953] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.953] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.953] IUnknown:Release (This=0x69e4360) returned 0x2
	[0252.953] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.953] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.953] IUnknown:QueryInterface (in: This=0x69e4360, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e4360) returned 0x0
	[0252.953] IUnknown:AddRef (This=0x69e4360) returned 0x4
	[0252.954] IUnknown:Release (This=0x69e4360) returned 0x3
	[0252.954] IUnknown:Release (This=0x69e4360) returned 0x2
	[0252.954] CoTaskMemFree (pv=0x69b9758) 
	[0252.954] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.954] IUnknown:AddRef (This=0x69e4360) returned 0x3
	[0252.954] IWbemClassObject:Get (in: This=0x69e4360, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.954] IWbemClassObject:Get (in: This=0x69e4360, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.954] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x5e
	[0252.954] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x5e
	[0252.954] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.954] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.954] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.954] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.955] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98c8) returned 0x0
	[0252.955] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98c8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.955] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98c8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db460) returned 0x0
	[0252.955] WbemDefPath:IUnknown:Release (This=0x69b98c8) returned 0x0
	[0252.956] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db460, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db460) returned 0x0
	[0252.956] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db460, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.956] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db460, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.956] WbemDefPath:IUnknown:AddRef (This=0x69db460) returned 0x3
	[0252.956] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db460, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.956] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db460, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.956] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db460, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e0d70) returned 0x0
	[0252.956] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e0d70, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.956] WbemDefPath:IUnknown:Release (This=0x69e0d70) returned 0x3
	[0252.956] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.956] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.956] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db460, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.956] WbemDefPath:IUnknown:Release (This=0x69db460) returned 0x2
	[0252.956] WbemDefPath:IUnknown:Release (This=0x69db460) returned 0x1
	[0252.956] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.956] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.957] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db460, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db460) returned 0x0
	[0252.957] WbemDefPath:IUnknown:AddRef (This=0x69db460) returned 0x3
	[0252.957] WbemDefPath:IUnknown:Release (This=0x69db460) returned 0x2
	[0252.957] WbemDefPath:IWbemPath:SetText (This=0x69db460, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1636\"") returned 0x0
	[0252.957] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.957] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.957] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.957] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.957] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.957] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.957] IWbemClassObject:Get (in: This=0x69e4360, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bac9fc*=0, plFlavor=0x2baca00*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="lawyer.exe", varVal2=0x0), pType=0x2bac9fc*=8, plFlavor=0x2baca00*=0) returned 0x0
	[0252.957] SysStringByteLen (bstr="lawyer.exe") returned 0x14
	[0252.957] SysStringByteLen (bstr="lawyer.exe") returned 0x14
	[0252.957] IWbemClassObject:Get (in: This=0x69e4360, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bac9fc*=8, plFlavor=0x2baca00*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="lawyer.exe", varVal2=0x0), pType=0x2bac9fc*=8, plFlavor=0x2baca00*=0) returned 0x0
	[0252.957] SysStringByteLen (bstr="lawyer.exe") returned 0x14
	[0252.957] SysStringByteLen (bstr="lawyer.exe") returned 0x14
	[0252.957] CoTaskMemAlloc (cb=0x4) returned 0x69b9898
	[0252.957] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9898, puReturned=0x2b9e144 | out: apObjects=0x69b9898*=0x69e3040, puReturned=0x2b9e144*=0x1) returned 0x0
	[0252.958] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e3040) returned 0x0
	[0252.958] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0252.958] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0252.958] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0252.959] IUnknown:AddRef (This=0x69e3040) returned 0x3
	[0252.959] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0252.959] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0252.959] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e3044) returned 0x0
	[0252.959] IMarshal:GetUnmarshalClass (in: This=0x69e3044, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0252.959] IUnknown:Release (This=0x69e3044) returned 0x3
	[0252.959] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0252.959] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0252.959] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0252.959] IUnknown:Release (This=0x69e3040) returned 0x2
	[0252.959] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0252.959] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0252.959] IUnknown:QueryInterface (in: This=0x69e3040, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e3040) returned 0x0
	[0252.959] IUnknown:AddRef (This=0x69e3040) returned 0x4
	[0252.959] IUnknown:Release (This=0x69e3040) returned 0x3
	[0252.959] IUnknown:Release (This=0x69e3040) returned 0x2
	[0252.959] CoTaskMemFree (pv=0x69b9898) 
	[0252.959] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0252.959] IUnknown:AddRef (This=0x69e3040) returned 0x3
	[0252.959] IWbemClassObject:Get (in: This=0x69e3040, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0252.960] IWbemClassObject:Get (in: This=0x69e3040, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3316\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0252.960] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3316\"") returned 0x5e
	[0252.960] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3316\"") returned 0x5e
	[0252.960] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0252.960] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0252.960] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0252.960] IUnknown:Release (This=0x66b664) returned 0x1
	[0252.961] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9828) returned 0x0
	[0252.961] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9828, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0252.961] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9828, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db690) returned 0x0
	[0252.961] WbemDefPath:IUnknown:Release (This=0x69b9828) returned 0x0
	[0252.961] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db690, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db690) returned 0x0
	[0252.961] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db690, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0252.961] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db690, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0252.961] WbemDefPath:IUnknown:AddRef (This=0x69db690) returned 0x3
	[0252.961] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db690, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0252.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db690, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0252.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db690, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e0ba8) returned 0x0
	[0252.962] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e0ba8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0252.962] WbemDefPath:IUnknown:Release (This=0x69e0ba8) returned 0x3
	[0252.962] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0252.962] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0252.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db690, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0252.962] WbemDefPath:IUnknown:Release (This=0x69db690) returned 0x2
	[0252.962] WbemDefPath:IUnknown:Release (This=0x69db690) returned 0x1
	[0252.962] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0252.962] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0252.962] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db690, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db690) returned 0x0
	[0252.962] WbemDefPath:IUnknown:AddRef (This=0x69db690) returned 0x3
	[0252.962] WbemDefPath:IUnknown:Release (This=0x69db690) returned 0x2
	[0252.962] WbemDefPath:IWbemPath:SetText (This=0x69db690, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3316\"") returned 0x0
	[0252.963] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0252.963] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0252.963] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.963] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0252.963] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0252.963] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0252.964] IWbemClassObject:Get (in: This=0x69e3040, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bad288*=0, plFlavor=0x2bad28c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="soon-standard.exe", varVal2=0x0), pType=0x2bad288*=8, plFlavor=0x2bad28c*=0) returned 0x0
	[0252.964] SysStringByteLen (bstr="soon-standard.exe") returned 0x22
	[0252.964] SysStringByteLen (bstr="soon-standard.exe") returned 0x22
	[0252.964] IWbemClassObject:Get (in: This=0x69e3040, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bad288*=8, plFlavor=0x2bad28c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="soon-standard.exe", varVal2=0x0), pType=0x2bad288*=8, plFlavor=0x2bad28c*=0) returned 0x0
	[0252.964] SysStringByteLen (bstr="soon-standard.exe") returned 0x22
	[0252.964] SysStringByteLen (bstr="soon-standard.exe") returned 0x22
	[0253.050] CoTaskMemAlloc (cb=0x4) returned 0x69b97d8
	[0253.050] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97d8, puReturned=0x2b9e144 | out: apObjects=0x69b97d8*=0x69e4690, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.051] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e4690) returned 0x0
	[0253.051] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.051] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.051] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.052] IUnknown:AddRef (This=0x69e4690) returned 0x3
	[0253.052] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.052] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.052] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e4694) returned 0x0
	[0253.052] IMarshal:GetUnmarshalClass (in: This=0x69e4694, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.052] IUnknown:Release (This=0x69e4694) returned 0x3
	[0253.052] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.052] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.052] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.052] IUnknown:Release (This=0x69e4690) returned 0x2
	[0253.052] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.053] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.053] IUnknown:QueryInterface (in: This=0x69e4690, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e4690) returned 0x0
	[0253.053] IUnknown:AddRef (This=0x69e4690) returned 0x4
	[0253.053] IUnknown:Release (This=0x69e4690) returned 0x3
	[0253.053] IUnknown:Release (This=0x69e4690) returned 0x2
	[0253.053] CoTaskMemFree (pv=0x69b97d8) 
	[0253.053] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.053] IUnknown:AddRef (This=0x69e4690) returned 0x3
	[0253.053] IWbemClassObject:Get (in: This=0x69e4690, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.053] IWbemClassObject:Get (in: This=0x69e4690, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2980\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.053] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2980\"") returned 0x5e
	[0253.053] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2980\"") returned 0x5e
	[0253.053] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.054] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.054] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.054] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.055] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0253.055] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.055] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db4d0) returned 0x0
	[0253.055] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0253.056] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db4d0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db4d0) returned 0x0
	[0253.056] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db4d0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.056] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db4d0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.056] WbemDefPath:IUnknown:AddRef (This=0x69db4d0) returned 0x3
	[0253.056] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db4d0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.056] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db4d0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.056] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db4d0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e74a0) returned 0x0
	[0253.056] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e74a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.056] WbemDefPath:IUnknown:Release (This=0x69e74a0) returned 0x3
	[0253.057] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.057] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.057] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db4d0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.057] WbemDefPath:IUnknown:Release (This=0x69db4d0) returned 0x2
	[0253.057] WbemDefPath:IUnknown:Release (This=0x69db4d0) returned 0x1
	[0253.057] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.057] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.057] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db4d0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db4d0) returned 0x0
	[0253.057] WbemDefPath:IUnknown:AddRef (This=0x69db4d0) returned 0x3
	[0253.057] WbemDefPath:IUnknown:Release (This=0x69db4d0) returned 0x2
	[0253.057] WbemDefPath:IWbemPath:SetText (This=0x69db4d0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2980\"") returned 0x0
	[0253.057] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.057] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.057] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.057] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.058] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.058] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.058] IWbemClassObject:Get (in: This=0x69e4690, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2badb2c*=0, plFlavor=0x2badb30*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="step last operation.exe", varVal2=0x0), pType=0x2badb2c*=8, plFlavor=0x2badb30*=0) returned 0x0
	[0253.058] SysStringByteLen (bstr="step last operation.exe") returned 0x2e
	[0253.058] SysStringByteLen (bstr="step last operation.exe") returned 0x2e
	[0253.058] IWbemClassObject:Get (in: This=0x69e4690, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2badb2c*=8, plFlavor=0x2badb30*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="step last operation.exe", varVal2=0x0), pType=0x2badb2c*=8, plFlavor=0x2badb30*=0) returned 0x0
	[0253.058] SysStringByteLen (bstr="step last operation.exe") returned 0x2e
	[0253.058] SysStringByteLen (bstr="step last operation.exe") returned 0x2e
	[0253.058] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0253.058] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69e36a0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.060] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e36a0) returned 0x0
	[0253.060] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.060] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.060] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.060] IUnknown:AddRef (This=0x69e36a0) returned 0x3
	[0253.060] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.060] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.060] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e36a4) returned 0x0
	[0253.060] IMarshal:GetUnmarshalClass (in: This=0x69e36a4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.060] IUnknown:Release (This=0x69e36a4) returned 0x3
	[0253.060] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.060] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.061] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.061] IUnknown:Release (This=0x69e36a0) returned 0x2
	[0253.061] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.061] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.061] IUnknown:QueryInterface (in: This=0x69e36a0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e36a0) returned 0x0
	[0253.061] IUnknown:AddRef (This=0x69e36a0) returned 0x4
	[0253.061] IUnknown:Release (This=0x69e36a0) returned 0x3
	[0253.061] IUnknown:Release (This=0x69e36a0) returned 0x2
	[0253.061] CoTaskMemFree (pv=0x69b97a8) 
	[0253.061] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.061] IUnknown:AddRef (This=0x69e36a0) returned 0x3
	[0253.061] IWbemClassObject:Get (in: This=0x69e36a0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.061] IWbemClassObject:Get (in: This=0x69e36a0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2976\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.061] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2976\"") returned 0x5e
	[0253.061] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2976\"") returned 0x5e
	[0253.062] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.062] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.062] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.062] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.063] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98a8) returned 0x0
	[0253.113] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.113] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db540) returned 0x0
	[0253.114] WbemDefPath:IUnknown:Release (This=0x69b98a8) returned 0x0
	[0253.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db540, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db540) returned 0x0
	[0253.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db540, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db540, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.114] WbemDefPath:IUnknown:AddRef (This=0x69db540) returned 0x3
	[0253.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db540, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db540, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db540, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e7560) returned 0x0
	[0253.114] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e7560, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.114] WbemDefPath:IUnknown:Release (This=0x69e7560) returned 0x3
	[0253.114] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.115] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db540, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.115] WbemDefPath:IUnknown:Release (This=0x69db540) returned 0x2
	[0253.115] WbemDefPath:IUnknown:Release (This=0x69db540) returned 0x1
	[0253.115] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.115] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db540, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db540) returned 0x0
	[0253.116] WbemDefPath:IUnknown:AddRef (This=0x69db540) returned 0x3
	[0253.116] WbemDefPath:IUnknown:Release (This=0x69db540) returned 0x2
	[0253.116] WbemDefPath:IWbemPath:SetText (This=0x69db540, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2976\"") returned 0x0
	[0253.116] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.116] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.116] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.116] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.116] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.116] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.116] IWbemClassObject:Get (in: This=0x69e36a0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bae3e8*=0, plFlavor=0x2bae3ec*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="agency rest.exe", varVal2=0x0), pType=0x2bae3e8*=8, plFlavor=0x2bae3ec*=0) returned 0x0
	[0253.116] SysStringByteLen (bstr="agency rest.exe") returned 0x1e
	[0253.116] SysStringByteLen (bstr="agency rest.exe") returned 0x1e
	[0253.117] IWbemClassObject:Get (in: This=0x69e36a0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bae3e8*=8, plFlavor=0x2bae3ec*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="agency rest.exe", varVal2=0x0), pType=0x2bae3e8*=8, plFlavor=0x2bae3ec*=0) returned 0x0
	[0253.117] SysStringByteLen (bstr="agency rest.exe") returned 0x1e
	[0253.117] SysStringByteLen (bstr="agency rest.exe") returned 0x1e
	[0253.117] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0253.117] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69e31d8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.118] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e31d8) returned 0x0
	[0253.118] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.118] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.118] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.119] IUnknown:AddRef (This=0x69e31d8) returned 0x3
	[0253.119] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.119] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.119] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e31dc) returned 0x0
	[0253.119] IMarshal:GetUnmarshalClass (in: This=0x69e31dc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.119] IUnknown:Release (This=0x69e31dc) returned 0x3
	[0253.119] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.119] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.119] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.119] IUnknown:Release (This=0x69e31d8) returned 0x2
	[0253.119] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.119] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.119] IUnknown:QueryInterface (in: This=0x69e31d8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e31d8) returned 0x0
	[0253.119] IUnknown:AddRef (This=0x69e31d8) returned 0x4
	[0253.119] IUnknown:Release (This=0x69e31d8) returned 0x3
	[0253.119] IUnknown:Release (This=0x69e31d8) returned 0x2
	[0253.119] CoTaskMemFree (pv=0x69b97a8) 
	[0253.120] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.120] IUnknown:AddRef (This=0x69e31d8) returned 0x3
	[0253.120] IWbemClassObject:Get (in: This=0x69e31d8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.120] IWbemClassObject:Get (in: This=0x69e31d8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3344\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.120] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3344\"") returned 0x5e
	[0253.120] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3344\"") returned 0x5e
	[0253.120] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.120] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.120] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.120] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.121] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9768) returned 0x0
	[0253.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9768, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.122] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9768, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db5b0) returned 0x0
	[0253.122] WbemDefPath:IUnknown:Release (This=0x69b9768) returned 0x0
	[0253.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db5b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db5b0) returned 0x0
	[0253.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db5b0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db5b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.122] WbemDefPath:IUnknown:AddRef (This=0x69db5b0) returned 0x3
	[0253.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db5b0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db5b0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.122] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db5b0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e7728) returned 0x0
	[0253.122] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e7728, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.122] WbemDefPath:IUnknown:Release (This=0x69e7728) returned 0x3
	[0253.122] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.123] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.123] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db5b0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.123] WbemDefPath:IUnknown:Release (This=0x69db5b0) returned 0x2
	[0253.123] WbemDefPath:IUnknown:Release (This=0x69db5b0) returned 0x1
	[0253.123] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.123] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.123] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db5b0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db5b0) returned 0x0
	[0253.123] WbemDefPath:IUnknown:AddRef (This=0x69db5b0) returned 0x3
	[0253.123] WbemDefPath:IUnknown:Release (This=0x69db5b0) returned 0x2
	[0253.123] WbemDefPath:IWbemPath:SetText (This=0x69db5b0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3344\"") returned 0x0
	[0253.123] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.123] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.123] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.123] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.123] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.123] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.124] IWbemClassObject:Get (in: This=0x69e31d8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2baec84*=0, plFlavor=0x2baec88*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="woman.exe", varVal2=0x0), pType=0x2baec84*=8, plFlavor=0x2baec88*=0) returned 0x0
	[0253.124] SysStringByteLen (bstr="woman.exe") returned 0x12
	[0253.124] SysStringByteLen (bstr="woman.exe") returned 0x12
	[0253.124] IWbemClassObject:Get (in: This=0x69e31d8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2baec84*=8, plFlavor=0x2baec88*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="woman.exe", varVal2=0x0), pType=0x2baec84*=8, plFlavor=0x2baec88*=0) returned 0x0
	[0253.124] SysStringByteLen (bstr="woman.exe") returned 0x12
	[0253.124] SysStringByteLen (bstr="woman.exe") returned 0x12
	[0253.124] CoTaskMemAlloc (cb=0x4) returned 0x69b97e8
	[0253.124] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97e8, puReturned=0x2b9e144 | out: apObjects=0x69b97e8*=0x69e4828, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.126] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e4828) returned 0x0
	[0253.126] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.126] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.126] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.126] IUnknown:AddRef (This=0x69e4828) returned 0x3
	[0253.126] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.126] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.126] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e482c) returned 0x0
	[0253.127] IMarshal:GetUnmarshalClass (in: This=0x69e482c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.127] IUnknown:Release (This=0x69e482c) returned 0x3
	[0253.127] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.127] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.127] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.127] IUnknown:Release (This=0x69e4828) returned 0x2
	[0253.128] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.128] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.128] IUnknown:QueryInterface (in: This=0x69e4828, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e4828) returned 0x0
	[0253.128] IUnknown:AddRef (This=0x69e4828) returned 0x4
	[0253.128] IUnknown:Release (This=0x69e4828) returned 0x3
	[0253.128] IUnknown:Release (This=0x69e4828) returned 0x2
	[0253.128] CoTaskMemFree (pv=0x69b97e8) 
	[0253.128] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.128] IUnknown:AddRef (This=0x69e4828) returned 0x3
	[0253.128] IWbemClassObject:Get (in: This=0x69e4828, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.128] IWbemClassObject:Get (in: This=0x69e4828, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3172\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.128] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3172\"") returned 0x5e
	[0253.128] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3172\"") returned 0x5e
	[0253.128] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.129] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.129] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.129] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.129] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98c8) returned 0x0
	[0253.130] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98c8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.130] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98c8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dba80) returned 0x0
	[0253.130] WbemDefPath:IUnknown:Release (This=0x69b98c8) returned 0x0
	[0253.130] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba80, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dba80) returned 0x0
	[0253.130] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba80, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.130] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba80, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.130] WbemDefPath:IUnknown:AddRef (This=0x69dba80) returned 0x3
	[0253.130] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba80, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.131] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba80, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.131] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba80, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e7920) returned 0x0
	[0253.131] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e7920, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.131] WbemDefPath:IUnknown:Release (This=0x69e7920) returned 0x3
	[0253.131] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.131] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.131] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba80, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.131] WbemDefPath:IUnknown:Release (This=0x69dba80) returned 0x2
	[0253.131] WbemDefPath:IUnknown:Release (This=0x69dba80) returned 0x1
	[0253.131] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.131] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.131] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dba80, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dba80) returned 0x0
	[0253.131] WbemDefPath:IUnknown:AddRef (This=0x69dba80) returned 0x3
	[0253.131] WbemDefPath:IUnknown:Release (This=0x69dba80) returned 0x2
	[0253.131] WbemDefPath:IWbemPath:SetText (This=0x69dba80, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3172\"") returned 0x0
	[0253.175] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.175] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.175] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.175] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.175] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.175] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.175] IWbemClassObject:Get (in: This=0x69e4828, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2baf508*=0, plFlavor=0x2baf50c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="exactly.exe", varVal2=0x0), pType=0x2baf508*=8, plFlavor=0x2baf50c*=0) returned 0x0
	[0253.175] SysStringByteLen (bstr="exactly.exe") returned 0x16
	[0253.175] SysStringByteLen (bstr="exactly.exe") returned 0x16
	[0253.175] IWbemClassObject:Get (in: This=0x69e4828, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2baf508*=8, plFlavor=0x2baf50c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="exactly.exe", varVal2=0x0), pType=0x2baf508*=8, plFlavor=0x2baf50c*=0) returned 0x0
	[0253.175] SysStringByteLen (bstr="exactly.exe") returned 0x16
	[0253.175] SysStringByteLen (bstr="exactly.exe") returned 0x16
	[0253.176] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0253.176] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x69e3b68, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.176] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e3b68) returned 0x0
	[0253.177] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.177] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.177] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.177] IUnknown:AddRef (This=0x69e3b68) returned 0x3
	[0253.177] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.177] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.177] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e3b6c) returned 0x0
	[0253.177] IMarshal:GetUnmarshalClass (in: This=0x69e3b6c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.177] IUnknown:Release (This=0x69e3b6c) returned 0x3
	[0253.177] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.177] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.177] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.177] IUnknown:Release (This=0x69e3b68) returned 0x2
	[0253.177] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.177] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.178] IUnknown:QueryInterface (in: This=0x69e3b68, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e3b68) returned 0x0
	[0253.178] IUnknown:AddRef (This=0x69e3b68) returned 0x4
	[0253.178] IUnknown:Release (This=0x69e3b68) returned 0x3
	[0253.178] IUnknown:Release (This=0x69e3b68) returned 0x2
	[0253.178] CoTaskMemFree (pv=0x69b98c8) 
	[0253.178] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.178] IUnknown:AddRef (This=0x69e3b68) returned 0x3
	[0253.178] IWbemClassObject:Get (in: This=0x69e3b68, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.178] IWbemClassObject:Get (in: This=0x69e3b68, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3000\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.178] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3000\"") returned 0x5e
	[0253.178] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3000\"") returned 0x5e
	[0253.178] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.178] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.178] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.178] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.179] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98e8) returned 0x0
	[0253.179] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98e8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.179] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98e8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbbd0) returned 0x0
	[0253.180] WbemDefPath:IUnknown:Release (This=0x69b98e8) returned 0x0
	[0253.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbbd0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbbd0) returned 0x0
	[0253.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbbd0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbbd0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.180] WbemDefPath:IUnknown:AddRef (This=0x69dbbd0) returned 0x3
	[0253.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbbd0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbbd0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbbd0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e7ad0) returned 0x0
	[0253.180] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e7ad0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.180] WbemDefPath:IUnknown:Release (This=0x69e7ad0) returned 0x3
	[0253.180] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.180] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbbd0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.180] WbemDefPath:IUnknown:Release (This=0x69dbbd0) returned 0x2
	[0253.180] WbemDefPath:IUnknown:Release (This=0x69dbbd0) returned 0x1
	[0253.180] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.180] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbbd0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbbd0) returned 0x0
	[0253.181] WbemDefPath:IUnknown:AddRef (This=0x69dbbd0) returned 0x3
	[0253.181] WbemDefPath:IUnknown:Release (This=0x69dbbd0) returned 0x2
	[0253.181] WbemDefPath:IWbemPath:SetText (This=0x69dbbd0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3000\"") returned 0x0
	[0253.181] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.181] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.181] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.181] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.181] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.181] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.181] IWbemClassObject:Get (in: This=0x69e3b68, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bafd94*=0, plFlavor=0x2bafd98*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="3dftp.exe", varVal2=0x0), pType=0x2bafd94*=8, plFlavor=0x2bafd98*=0) returned 0x0
	[0253.181] SysStringByteLen (bstr="3dftp.exe") returned 0x12
	[0253.181] SysStringByteLen (bstr="3dftp.exe") returned 0x12
	[0253.181] IWbemClassObject:Get (in: This=0x69e3b68, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bafd94*=8, plFlavor=0x2bafd98*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="3dftp.exe", varVal2=0x0), pType=0x2bafd94*=8, plFlavor=0x2bafd98*=0) returned 0x0
	[0253.181] SysStringByteLen (bstr="3dftp.exe") returned 0x12
	[0253.181] SysStringByteLen (bstr="3dftp.exe") returned 0x12
	[0253.181] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0253.181] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69e44f8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.183] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e44f8) returned 0x0
	[0253.183] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.183] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.183] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.183] IUnknown:AddRef (This=0x69e44f8) returned 0x3
	[0253.183] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.183] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.183] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e44fc) returned 0x0
	[0253.183] IMarshal:GetUnmarshalClass (in: This=0x69e44fc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.183] IUnknown:Release (This=0x69e44fc) returned 0x3
	[0253.183] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.183] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.183] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.183] IUnknown:Release (This=0x69e44f8) returned 0x2
	[0253.183] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.183] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.184] IUnknown:QueryInterface (in: This=0x69e44f8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e44f8) returned 0x0
	[0253.184] IUnknown:AddRef (This=0x69e44f8) returned 0x4
	[0253.184] IUnknown:Release (This=0x69e44f8) returned 0x3
	[0253.184] IUnknown:Release (This=0x69e44f8) returned 0x2
	[0253.184] CoTaskMemFree (pv=0x69b97a8) 
	[0253.184] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.184] IUnknown:AddRef (This=0x69e44f8) returned 0x3
	[0253.184] IWbemClassObject:Get (in: This=0x69e44f8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.184] IWbemClassObject:Get (in: This=0x69e44f8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3216\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.184] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3216\"") returned 0x5e
	[0253.184] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3216\"") returned 0x5e
	[0253.184] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.184] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.184] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.184] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.185] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0253.185] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.185] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db7e0) returned 0x0
	[0253.185] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0253.185] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db7e0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db7e0) returned 0x0
	[0253.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db7e0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db7e0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.186] WbemDefPath:IUnknown:AddRef (This=0x69db7e0) returned 0x3
	[0253.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db7e0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db7e0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db7e0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e5e08) returned 0x0
	[0253.186] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e5e08, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.186] WbemDefPath:IUnknown:Release (This=0x69e5e08) returned 0x3
	[0253.186] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.186] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db7e0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.186] WbemDefPath:IUnknown:Release (This=0x69db7e0) returned 0x2
	[0253.186] WbemDefPath:IUnknown:Release (This=0x69db7e0) returned 0x1
	[0253.186] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.186] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db7e0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db7e0) returned 0x0
	[0253.186] WbemDefPath:IUnknown:AddRef (This=0x69db7e0) returned 0x3
	[0253.186] WbemDefPath:IUnknown:Release (This=0x69db7e0) returned 0x2
	[0253.186] WbemDefPath:IWbemPath:SetText (This=0x69db7e0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3216\"") returned 0x0
	[0253.187] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.187] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.187] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.187] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.187] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.187] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.187] IWbemClassObject:Get (in: This=0x69e44f8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb0618*=0, plFlavor=0x2bb061c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="absolutetelnet.exe", varVal2=0x0), pType=0x2bb0618*=8, plFlavor=0x2bb061c*=0) returned 0x0
	[0253.187] SysStringByteLen (bstr="absolutetelnet.exe") returned 0x24
	[0253.187] SysStringByteLen (bstr="absolutetelnet.exe") returned 0x24
	[0253.187] IWbemClassObject:Get (in: This=0x69e44f8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb0618*=8, plFlavor=0x2bb061c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="absolutetelnet.exe", varVal2=0x0), pType=0x2bb0618*=8, plFlavor=0x2bb061c*=0) returned 0x0
	[0253.187] SysStringByteLen (bstr="absolutetelnet.exe") returned 0x24
	[0253.187] SysStringByteLen (bstr="absolutetelnet.exe") returned 0x24
	[0253.187] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0253.188] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x69e3d00, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.188] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e3d00) returned 0x0
	[0253.189] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.189] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.189] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.189] IUnknown:AddRef (This=0x69e3d00) returned 0x3
	[0253.189] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.189] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.189] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e3d04) returned 0x0
	[0253.189] IMarshal:GetUnmarshalClass (in: This=0x69e3d04, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.189] IUnknown:Release (This=0x69e3d04) returned 0x3
	[0253.189] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.189] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.189] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.189] IUnknown:Release (This=0x69e3d00) returned 0x2
	[0253.189] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.189] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.189] IUnknown:QueryInterface (in: This=0x69e3d00, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e3d00) returned 0x0
	[0253.332] IUnknown:AddRef (This=0x69e3d00) returned 0x4
	[0253.332] IUnknown:Release (This=0x69e3d00) returned 0x3
	[0253.332] IUnknown:Release (This=0x69e3d00) returned 0x2
	[0253.333] CoTaskMemFree (pv=0x69b98c8) 
	[0253.333] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.333] IUnknown:AddRef (This=0x69e3d00) returned 0x3
	[0253.333] IWbemClassObject:Get (in: This=0x69e3d00, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.333] IWbemClassObject:Get (in: This=0x69e3d00, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3204\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.333] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3204\"") returned 0x5e
	[0253.333] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3204\"") returned 0x5e
	[0253.333] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.333] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.333] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.333] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.334] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9758) returned 0x0
	[0253.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9758, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.335] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9758, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db700) returned 0x0
	[0253.335] WbemDefPath:IUnknown:Release (This=0x69b9758) returned 0x0
	[0253.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db700, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db700) returned 0x0
	[0253.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db700, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db700, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.335] WbemDefPath:IUnknown:AddRef (This=0x69db700) returned 0x3
	[0253.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db700, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db700, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db700, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6048) returned 0x0
	[0253.335] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6048, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.335] WbemDefPath:IUnknown:Release (This=0x69e6048) returned 0x3
	[0253.335] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.335] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db700, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.335] WbemDefPath:IUnknown:Release (This=0x69db700) returned 0x2
	[0253.335] WbemDefPath:IUnknown:Release (This=0x69db700) returned 0x1
	[0253.335] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.335] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.336] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db700, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db700) returned 0x0
	[0253.336] WbemDefPath:IUnknown:AddRef (This=0x69db700) returned 0x3
	[0253.336] WbemDefPath:IUnknown:Release (This=0x69db700) returned 0x2
	[0253.336] WbemDefPath:IWbemPath:SetText (This=0x69db700, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3204\"") returned 0x0
	[0253.336] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.336] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.336] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.336] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.336] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.336] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.336] IWbemClassObject:Get (in: This=0x69e3d00, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb0ec4*=0, plFlavor=0x2bb0ec8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="alftp.exe", varVal2=0x0), pType=0x2bb0ec4*=8, plFlavor=0x2bb0ec8*=0) returned 0x0
	[0253.336] SysStringByteLen (bstr="alftp.exe") returned 0x12
	[0253.336] SysStringByteLen (bstr="alftp.exe") returned 0x12
	[0253.336] IWbemClassObject:Get (in: This=0x69e3d00, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb0ec4*=8, plFlavor=0x2bb0ec8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="alftp.exe", varVal2=0x0), pType=0x2bb0ec4*=8, plFlavor=0x2bb0ec8*=0) returned 0x0
	[0253.336] SysStringByteLen (bstr="alftp.exe") returned 0x12
	[0253.336] SysStringByteLen (bstr="alftp.exe") returned 0x12
	[0253.337] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0253.337] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x69e4030, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.337] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e4030) returned 0x0
	[0253.338] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.338] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.338] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.338] IUnknown:AddRef (This=0x69e4030) returned 0x3
	[0253.338] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.338] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.338] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e4034) returned 0x0
	[0253.338] IMarshal:GetUnmarshalClass (in: This=0x69e4034, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.338] IUnknown:Release (This=0x69e4034) returned 0x3
	[0253.338] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.338] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.338] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.338] IUnknown:Release (This=0x69e4030) returned 0x2
	[0253.338] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.338] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.338] IUnknown:QueryInterface (in: This=0x69e4030, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e4030) returned 0x0
	[0253.338] IUnknown:AddRef (This=0x69e4030) returned 0x4
	[0253.339] IUnknown:Release (This=0x69e4030) returned 0x3
	[0253.339] IUnknown:Release (This=0x69e4030) returned 0x2
	[0253.339] CoTaskMemFree (pv=0x69b98c8) 
	[0253.339] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.339] IUnknown:AddRef (This=0x69e4030) returned 0x3
	[0253.339] IWbemClassObject:Get (in: This=0x69e4030, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.339] IWbemClassObject:Get (in: This=0x69e4030, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1320\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.339] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1320\"") returned 0x5e
	[0253.339] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1320\"") returned 0x5e
	[0253.339] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.339] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.339] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.339] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.340] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97d8) returned 0x0
	[0253.340] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97d8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.340] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97d8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dbaf0) returned 0x0
	[0253.340] WbemDefPath:IUnknown:Release (This=0x69b97d8) returned 0x0
	[0253.340] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbaf0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dbaf0) returned 0x0
	[0253.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbaf0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbaf0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.341] WbemDefPath:IUnknown:AddRef (This=0x69dbaf0) returned 0x3
	[0253.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbaf0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbaf0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbaf0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e5eb0) returned 0x0
	[0253.341] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e5eb0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.341] WbemDefPath:IUnknown:Release (This=0x69e5eb0) returned 0x3
	[0253.341] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.341] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbaf0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.341] WbemDefPath:IUnknown:Release (This=0x69dbaf0) returned 0x2
	[0253.341] WbemDefPath:IUnknown:Release (This=0x69dbaf0) returned 0x1
	[0253.341] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.341] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dbaf0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dbaf0) returned 0x0
	[0253.342] WbemDefPath:IUnknown:AddRef (This=0x69dbaf0) returned 0x3
	[0253.342] WbemDefPath:IUnknown:Release (This=0x69dbaf0) returned 0x2
	[0253.342] WbemDefPath:IWbemPath:SetText (This=0x69dbaf0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1320\"") returned 0x0
	[0253.342] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.342] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.342] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.342] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.342] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.342] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.343] IWbemClassObject:Get (in: This=0x69e4030, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb1748*=0, plFlavor=0x2bb174c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="barca.exe", varVal2=0x0), pType=0x2bb1748*=8, plFlavor=0x2bb174c*=0) returned 0x0
	[0253.343] SysStringByteLen (bstr="barca.exe") returned 0x12
	[0253.343] SysStringByteLen (bstr="barca.exe") returned 0x12
	[0253.343] IWbemClassObject:Get (in: This=0x69e4030, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb1748*=8, plFlavor=0x2bb174c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="barca.exe", varVal2=0x0), pType=0x2bb1748*=8, plFlavor=0x2bb174c*=0) returned 0x0
	[0253.343] SysStringByteLen (bstr="barca.exe") returned 0x12
	[0253.343] SysStringByteLen (bstr="barca.exe") returned 0x12
	[0253.343] CoTaskMemAlloc (cb=0x4) returned 0x69b97d8
	[0253.343] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97d8, puReturned=0x2b9e144 | out: apObjects=0x69b97d8*=0x69e41c8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.344] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e41c8) returned 0x0
	[0253.344] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.344] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.344] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.344] IUnknown:AddRef (This=0x69e41c8) returned 0x3
	[0253.344] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.344] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.344] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e41cc) returned 0x0
	[0253.344] IMarshal:GetUnmarshalClass (in: This=0x69e41cc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.344] IUnknown:Release (This=0x69e41cc) returned 0x3
	[0253.344] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.345] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.345] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.345] IUnknown:Release (This=0x69e41c8) returned 0x2
	[0253.345] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.345] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.345] IUnknown:QueryInterface (in: This=0x69e41c8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e41c8) returned 0x0
	[0253.345] IUnknown:AddRef (This=0x69e41c8) returned 0x4
	[0253.345] IUnknown:Release (This=0x69e41c8) returned 0x3
	[0253.345] IUnknown:Release (This=0x69e41c8) returned 0x2
	[0253.345] CoTaskMemFree (pv=0x69b97d8) 
	[0253.345] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.345] IUnknown:AddRef (This=0x69e41c8) returned 0x3
	[0253.345] IWbemClassObject:Get (in: This=0x69e41c8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.345] IWbemClassObject:Get (in: This=0x69e41c8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1292\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.345] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1292\"") returned 0x5e
	[0253.345] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1292\"") returned 0x5e
	[0253.345] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.345] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.346] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.346] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.346] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0253.346] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.346] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69db850) returned 0x0
	[0253.347] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0253.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db850, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69db850) returned 0x0
	[0253.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db850, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db850, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.347] WbemDefPath:IUnknown:AddRef (This=0x69db850) returned 0x3
	[0253.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db850, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db850, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db850, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6480) returned 0x0
	[0253.347] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6480, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.347] WbemDefPath:IUnknown:Release (This=0x69e6480) returned 0x3
	[0253.347] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.347] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db850, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.347] WbemDefPath:IUnknown:Release (This=0x69db850) returned 0x2
	[0253.347] WbemDefPath:IUnknown:Release (This=0x69db850) returned 0x1
	[0253.347] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.347] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x69db850, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69db850) returned 0x0
	[0253.348] WbemDefPath:IUnknown:AddRef (This=0x69db850) returned 0x3
	[0253.348] WbemDefPath:IUnknown:Release (This=0x69db850) returned 0x2
	[0253.348] WbemDefPath:IWbemPath:SetText (This=0x69db850, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1292\"") returned 0x0
	[0253.348] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.348] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.348] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.348] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.348] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.348] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.348] IWbemClassObject:Get (in: This=0x69e41c8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb1fcc*=0, plFlavor=0x2bb1fd0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="bitkinex.exe", varVal2=0x0), pType=0x2bb1fcc*=8, plFlavor=0x2bb1fd0*=0) returned 0x0
	[0253.348] SysStringByteLen (bstr="bitkinex.exe") returned 0x18
	[0253.349] SysStringByteLen (bstr="bitkinex.exe") returned 0x18
	[0253.349] IWbemClassObject:Get (in: This=0x69e41c8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb1fcc*=8, plFlavor=0x2bb1fd0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="bitkinex.exe", varVal2=0x0), pType=0x2bb1fcc*=8, plFlavor=0x2bb1fd0*=0) returned 0x0
	[0253.349] SysStringByteLen (bstr="bitkinex.exe") returned 0x18
	[0253.349] SysStringByteLen (bstr="bitkinex.exe") returned 0x18
	[0253.349] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0253.349] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69e49c0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.350] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e49c0) returned 0x0
	[0253.350] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.350] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.350] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.350] IUnknown:AddRef (This=0x69e49c0) returned 0x3
	[0253.351] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.351] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.351] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e49c4) returned 0x0
	[0253.351] IMarshal:GetUnmarshalClass (in: This=0x69e49c4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.351] IUnknown:Release (This=0x69e49c4) returned 0x3
	[0253.351] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.351] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.351] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.351] IUnknown:Release (This=0x69e49c0) returned 0x2
	[0253.351] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.351] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.351] IUnknown:QueryInterface (in: This=0x69e49c0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e49c0) returned 0x0
	[0253.351] IUnknown:AddRef (This=0x69e49c0) returned 0x4
	[0253.351] IUnknown:Release (This=0x69e49c0) returned 0x3
	[0253.351] IUnknown:Release (This=0x69e49c0) returned 0x2
	[0253.351] CoTaskMemFree (pv=0x69b97a8) 
	[0253.351] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.351] IUnknown:AddRef (This=0x69e49c0) returned 0x3
	[0253.352] IWbemClassObject:Get (in: This=0x69e49c0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.352] IWbemClassObject:Get (in: This=0x69e49c0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2440\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.352] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2440\"") returned 0x5e
	[0253.352] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2440\"") returned 0x5e
	[0253.352] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.352] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.352] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.352] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.353] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97f8) returned 0x0
	[0253.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97f8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.353] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97f8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dc0a0) returned 0x0
	[0253.353] WbemDefPath:IUnknown:Release (This=0x69b97f8) returned 0x0
	[0253.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc0a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dc0a0) returned 0x0
	[0253.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc0a0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc0a0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.353] WbemDefPath:IUnknown:AddRef (This=0x69dc0a0) returned 0x3
	[0253.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc0a0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc0a0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.354] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc0a0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6300) returned 0x0
	[0253.354] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6300, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.354] WbemDefPath:IUnknown:Release (This=0x69e6300) returned 0x3
	[0253.354] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.354] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0253.354] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc0a0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.354] WbemDefPath:IUnknown:Release (This=0x69dc0a0) returned 0x2
	[0253.354] WbemDefPath:IUnknown:Release (This=0x69dc0a0) returned 0x1
	[0253.354] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0253.354] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0253.354] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc0a0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dc0a0) returned 0x0
	[0253.354] WbemDefPath:IUnknown:AddRef (This=0x69dc0a0) returned 0x3
	[0253.354] WbemDefPath:IUnknown:Release (This=0x69dc0a0) returned 0x2
	[0253.354] WbemDefPath:IWbemPath:SetText (This=0x69dc0a0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2440\"") returned 0x0
	[0253.354] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.354] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.354] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.354] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.354] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.354] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.355] IWbemClassObject:Get (in: This=0x69e49c0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb2860*=0, plFlavor=0x2bb2864*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="coreftp.exe", varVal2=0x0), pType=0x2bb2860*=8, plFlavor=0x2bb2864*=0) returned 0x0
	[0253.355] SysStringByteLen (bstr="coreftp.exe") returned 0x16
	[0253.355] SysStringByteLen (bstr="coreftp.exe") returned 0x16
	[0253.355] IWbemClassObject:Get (in: This=0x69e49c0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb2860*=8, plFlavor=0x2bb2864*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="coreftp.exe", varVal2=0x0), pType=0x2bb2860*=8, plFlavor=0x2bb2864*=0) returned 0x0
	[0253.355] SysStringByteLen (bstr="coreftp.exe") returned 0x16
	[0253.355] SysStringByteLen (bstr="coreftp.exe") returned 0x16
	[0253.355] CoTaskMemAlloc (cb=0x4) returned 0x69b9738
	[0253.355] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9738, puReturned=0x2b9e144 | out: apObjects=0x69b9738*=0x69e3370, puReturned=0x2b9e144*=0x1) returned 0x0
	[0253.356] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e3370) returned 0x0
	[0253.356] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0253.356] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0253.356] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0253.356] IUnknown:AddRef (This=0x69e3370) returned 0x3
	[0253.356] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0253.356] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0253.356] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e3374) returned 0x0
	[0253.356] IMarshal:GetUnmarshalClass (in: This=0x69e3374, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0253.357] IUnknown:Release (This=0x69e3374) returned 0x3
	[0253.357] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0253.357] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0253.357] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0253.357] IUnknown:Release (This=0x69e3370) returned 0x2
	[0253.357] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0253.357] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0253.357] IUnknown:QueryInterface (in: This=0x69e3370, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e3370) returned 0x0
	[0253.357] IUnknown:AddRef (This=0x69e3370) returned 0x4
	[0253.357] IUnknown:Release (This=0x69e3370) returned 0x3
	[0253.357] IUnknown:Release (This=0x69e3370) returned 0x2
	[0253.357] CoTaskMemFree (pv=0x69b9738) 
	[0253.357] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0253.357] IUnknown:AddRef (This=0x69e3370) returned 0x3
	[0253.357] IWbemClassObject:Get (in: This=0x69e3370, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0253.357] IWbemClassObject:Get (in: This=0x69e3370, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3308\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0253.358] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3308\"") returned 0x5e
	[0253.358] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3308\"") returned 0x5e
	[0253.358] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0253.358] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0253.358] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0253.358] IUnknown:Release (This=0x66b664) returned 0x1
	[0253.359] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9758) returned 0x0
	[0253.359] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9758, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0253.359] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9758, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dc180) returned 0x0
	[0253.359] WbemDefPath:IUnknown:Release (This=0x69b9758) returned 0x0
	[0253.359] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc180, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dc180) returned 0x0
	[0253.359] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc180, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0253.359] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc180, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0253.360] WbemDefPath:IUnknown:AddRef (This=0x69dc180) returned 0x3
	[0253.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc180, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0253.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc180, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0253.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc180, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e64e0) returned 0x0
	[0253.360] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e64e0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0253.360] WbemDefPath:IUnknown:Release (This=0x69e64e0) returned 0x3
	[0253.360] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0253.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc180, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0253.360] WbemDefPath:IUnknown:Release (This=0x69dc180) returned 0x2
	[0253.360] WbemDefPath:IUnknown:Release (This=0x69dc180) returned 0x1
	[0253.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc180, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dc180) returned 0x0
	[0253.360] WbemDefPath:IUnknown:AddRef (This=0x69dc180) returned 0x3
	[0253.360] WbemDefPath:IUnknown:Release (This=0x69dc180) returned 0x2
	[0253.360] WbemDefPath:IWbemPath:SetText (This=0x69dc180, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3308\"") returned 0x0
	[0253.360] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0253.361] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0253.361] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.361] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0253.361] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0253.361] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0253.361] IWbemClassObject:Get (in: This=0x69e3370, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb30ec*=0, plFlavor=0x2bb30f0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="far.exe", varVal2=0x0), pType=0x2bb30ec*=8, plFlavor=0x2bb30f0*=0) returned 0x0
	[0253.361] SysStringByteLen (bstr="far.exe") returned 0xe
	[0253.361] SysStringByteLen (bstr="far.exe") returned 0xe
	[0253.361] IWbemClassObject:Get (in: This=0x69e3370, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb30ec*=8, plFlavor=0x2bb30f0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="far.exe", varVal2=0x0), pType=0x2bb30ec*=8, plFlavor=0x2bb30f0*=0) returned 0x0
	[0253.361] SysStringByteLen (bstr="far.exe") returned 0xe
	[0253.361] SysStringByteLen (bstr="far.exe") returned 0xe
	[0253.361] CoTaskMemAlloc (cb=0x4) returned 0x69b97d8
	[0253.361] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97d8, puReturned=0x2b9e144 | out: apObjects=0x69b97d8*=0x69e3508, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.393] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e3508) returned 0x0
	[0254.393] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.393] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.393] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.393] IUnknown:AddRef (This=0x69e3508) returned 0x3
	[0254.393] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.393] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.393] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e350c) returned 0x0
	[0254.393] IMarshal:GetUnmarshalClass (in: This=0x69e350c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.393] IUnknown:Release (This=0x69e350c) returned 0x3
	[0254.394] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.394] IUnknown:Release (This=0x69e3508) returned 0x2
	[0254.394] IUnknown:QueryInterface (in: This=0x69e3508, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e3508) returned 0x0
	[0254.394] IUnknown:AddRef (This=0x69e3508) returned 0x4
	[0254.394] IUnknown:Release (This=0x69e3508) returned 0x3
	[0254.394] IUnknown:Release (This=0x69e3508) returned 0x2
	[0254.394] CoTaskMemFree (pv=0x69b97d8) 
	[0254.394] IUnknown:AddRef (This=0x69e3508) returned 0x3
	[0254.394] IWbemClassObject:Get (in: This=0x69e3508, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.395] IWbemClassObject:Get (in: This=0x69e3508, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2200\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.395] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2200\"") returned 0x5e
	[0254.395] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2200\"") returned 0x5e
	[0254.395] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.395] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.395] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.395] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.396] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9898) returned 0x0
	[0254.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9898, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.396] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9898, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dc1f0) returned 0x0
	[0254.396] WbemDefPath:IUnknown:Release (This=0x69b9898) returned 0x0
	[0254.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc1f0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dc1f0) returned 0x0
	[0254.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc1f0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc1f0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.397] WbemDefPath:IUnknown:AddRef (This=0x69dc1f0) returned 0x3
	[0254.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc1f0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc1f0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc1f0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6618) returned 0x0
	[0254.397] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6618, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.397] WbemDefPath:IUnknown:Release (This=0x69e6618) returned 0x3
	[0254.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc1f0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.397] WbemDefPath:IUnknown:Release (This=0x69dc1f0) returned 0x2
	[0254.397] WbemDefPath:IUnknown:Release (This=0x69dc1f0) returned 0x1
	[0254.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc1f0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dc1f0) returned 0x0
	[0254.397] WbemDefPath:IUnknown:AddRef (This=0x69dc1f0) returned 0x3
	[0254.397] WbemDefPath:IUnknown:Release (This=0x69dc1f0) returned 0x2
	[0254.398] WbemDefPath:IWbemPath:SetText (This=0x69dc1f0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2200\"") returned 0x0
	[0254.398] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.398] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.398] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.399] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.399] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.399] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.399] IWbemClassObject:Get (in: This=0x69e3508, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb3968*=0, plFlavor=0x2bb396c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="filezilla.exe", varVal2=0x0), pType=0x2bb3968*=8, plFlavor=0x2bb396c*=0) returned 0x0
	[0254.399] SysStringByteLen (bstr="filezilla.exe") returned 0x1a
	[0254.399] SysStringByteLen (bstr="filezilla.exe") returned 0x1a
	[0254.399] IWbemClassObject:Get (in: This=0x69e3508, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb3968*=8, plFlavor=0x2bb396c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="filezilla.exe", varVal2=0x0), pType=0x2bb3968*=8, plFlavor=0x2bb396c*=0) returned 0x0
	[0254.399] SysStringByteLen (bstr="filezilla.exe") returned 0x1a
	[0254.399] SysStringByteLen (bstr="filezilla.exe") returned 0x1a
	[0254.399] CoTaskMemAlloc (cb=0x4) returned 0x69b9848
	[0254.399] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9848, puReturned=0x2b9e144 | out: apObjects=0x69b9848*=0x69e3838, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.400] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e3838) returned 0x0
	[0254.401] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.401] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.401] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.401] IUnknown:AddRef (This=0x69e3838) returned 0x3
	[0254.401] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.401] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.401] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e383c) returned 0x0
	[0254.401] IMarshal:GetUnmarshalClass (in: This=0x69e383c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.401] IUnknown:Release (This=0x69e383c) returned 0x3
	[0254.401] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.402] IUnknown:Release (This=0x69e3838) returned 0x2
	[0254.402] IUnknown:QueryInterface (in: This=0x69e3838, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e3838) returned 0x0
	[0254.402] IUnknown:AddRef (This=0x69e3838) returned 0x4
	[0254.402] IUnknown:Release (This=0x69e3838) returned 0x3
	[0254.402] IUnknown:Release (This=0x69e3838) returned 0x2
	[0254.402] CoTaskMemFree (pv=0x69b9848) 
	[0254.402] IUnknown:AddRef (This=0x69e3838) returned 0x3
	[0254.402] IWbemClassObject:Get (in: This=0x69e3838, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.402] IWbemClassObject:Get (in: This=0x69e3838, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3980\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.402] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3980\"") returned 0x5e
	[0254.402] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3980\"") returned 0x5e
	[0254.402] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.403] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.403] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.403] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.403] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97d8) returned 0x0
	[0254.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97d8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.404] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97d8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69dc110) returned 0x0
	[0254.404] WbemDefPath:IUnknown:Release (This=0x69b97d8) returned 0x0
	[0254.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc110, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69dc110) returned 0x0
	[0254.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc110, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc110, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.404] WbemDefPath:IUnknown:AddRef (This=0x69dc110) returned 0x3
	[0254.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc110, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc110, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc110, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6990) returned 0x0
	[0254.404] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6990, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.404] WbemDefPath:IUnknown:Release (This=0x69e6990) returned 0x3
	[0254.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc110, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.405] WbemDefPath:IUnknown:Release (This=0x69dc110) returned 0x2
	[0254.405] WbemDefPath:IUnknown:Release (This=0x69dc110) returned 0x1
	[0254.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x69dc110, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69dc110) returned 0x0
	[0254.405] WbemDefPath:IUnknown:AddRef (This=0x69dc110) returned 0x3
	[0254.405] WbemDefPath:IUnknown:Release (This=0x69dc110) returned 0x2
	[0254.405] WbemDefPath:IWbemPath:SetText (This=0x69dc110, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3980\"") returned 0x0
	[0254.405] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.405] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.405] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.405] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.405] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.405] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.405] IWbemClassObject:Get (in: This=0x69e3838, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb41fc*=0, plFlavor=0x2bb4200*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="iexplore.exe", varVal2=0x0), pType=0x2bb41fc*=8, plFlavor=0x2bb4200*=0) returned 0x0
	[0254.405] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0254.406] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0254.406] IWbemClassObject:Get (in: This=0x69e3838, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb41fc*=8, plFlavor=0x2bb4200*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="iexplore.exe", varVal2=0x0), pType=0x2bb41fc*=8, plFlavor=0x2bb4200*=0) returned 0x0
	[0254.406] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0254.406] SysStringByteLen (bstr="iexplore.exe") returned 0x18
	[0254.406] CoTaskMemAlloc (cb=0x4) returned 0x69b97f8
	[0254.406] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97f8, puReturned=0x2b9e144 | out: apObjects=0x69b97f8*=0x69e4b58, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.407] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e4b58) returned 0x0
	[0254.407] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.407] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.407] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.407] IUnknown:AddRef (This=0x69e4b58) returned 0x3
	[0254.407] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.407] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.407] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e4b5c) returned 0x0
	[0254.407] IMarshal:GetUnmarshalClass (in: This=0x69e4b5c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.407] IUnknown:Release (This=0x69e4b5c) returned 0x3
	[0254.407] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.408] IUnknown:Release (This=0x69e4b58) returned 0x2
	[0254.408] IUnknown:QueryInterface (in: This=0x69e4b58, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e4b58) returned 0x0
	[0254.408] IUnknown:AddRef (This=0x69e4b58) returned 0x4
	[0254.408] IUnknown:Release (This=0x69e4b58) returned 0x3
	[0254.408] IUnknown:Release (This=0x69e4b58) returned 0x2
	[0254.408] CoTaskMemFree (pv=0x69b97f8) 
	[0254.408] IUnknown:AddRef (This=0x69e4b58) returned 0x3
	[0254.408] IWbemClassObject:Get (in: This=0x69e4b58, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.408] IWbemClassObject:Get (in: This=0x69e4b58, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3248\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.408] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3248\"") returned 0x5e
	[0254.408] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3248\"") returned 0x5e
	[0254.408] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.408] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.408] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.409] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.409] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97a8) returned 0x0
	[0254.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.409] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee530) returned 0x0
	[0254.410] WbemDefPath:IUnknown:Release (This=0x69b97a8) returned 0x0
	[0254.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee530, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee530) returned 0x0
	[0254.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee530, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee530, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.410] WbemDefPath:IUnknown:AddRef (This=0x69ee530) returned 0x3
	[0254.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee530, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee530, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee530, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6840) returned 0x0
	[0254.410] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6840, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.410] WbemDefPath:IUnknown:Release (This=0x69e6840) returned 0x3
	[0254.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee530, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.411] WbemDefPath:IUnknown:Release (This=0x69ee530) returned 0x2
	[0254.411] WbemDefPath:IUnknown:Release (This=0x69ee530) returned 0x1
	[0254.411] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee530, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee530) returned 0x0
	[0254.411] WbemDefPath:IUnknown:AddRef (This=0x69ee530) returned 0x3
	[0254.411] WbemDefPath:IUnknown:Release (This=0x69ee530) returned 0x2
	[0254.411] WbemDefPath:IWbemPath:SetText (This=0x69ee530, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3248\"") returned 0x0
	[0254.411] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.411] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.411] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.411] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.411] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.411] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.411] IWbemClassObject:Get (in: This=0x69e4b58, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb4a90*=0, plFlavor=0x2bb4a94*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="flashfxp.exe", varVal2=0x0), pType=0x2bb4a90*=8, plFlavor=0x2bb4a94*=0) returned 0x0
	[0254.411] SysStringByteLen (bstr="flashfxp.exe") returned 0x18
	[0254.411] SysStringByteLen (bstr="flashfxp.exe") returned 0x18
	[0254.411] IWbemClassObject:Get (in: This=0x69e4b58, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb4a90*=8, plFlavor=0x2bb4a94*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="flashfxp.exe", varVal2=0x0), pType=0x2bb4a90*=8, plFlavor=0x2bb4a94*=0) returned 0x0
	[0254.411] SysStringByteLen (bstr="flashfxp.exe") returned 0x18
	[0254.411] SysStringByteLen (bstr="flashfxp.exe") returned 0x18
	[0254.412] CoTaskMemAlloc (cb=0x4) returned 0x69b9738
	[0254.412] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9738, puReturned=0x2b9e144 | out: apObjects=0x69b9738*=0x69e39d0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.413] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69e39d0) returned 0x0
	[0254.413] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.413] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.413] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.413] IUnknown:AddRef (This=0x69e39d0) returned 0x3
	[0254.413] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.413] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.413] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69e39d4) returned 0x0
	[0254.413] IMarshal:GetUnmarshalClass (in: This=0x69e39d4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.414] IUnknown:Release (This=0x69e39d4) returned 0x3
	[0254.414] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.414] IUnknown:Release (This=0x69e39d0) returned 0x2
	[0254.414] IUnknown:QueryInterface (in: This=0x69e39d0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69e39d0) returned 0x0
	[0254.414] IUnknown:AddRef (This=0x69e39d0) returned 0x4
	[0254.414] IUnknown:Release (This=0x69e39d0) returned 0x3
	[0254.414] IUnknown:Release (This=0x69e39d0) returned 0x2
	[0254.414] CoTaskMemFree (pv=0x69b9738) 
	[0254.414] IUnknown:AddRef (This=0x69e39d0) returned 0x3
	[0254.414] IWbemClassObject:Get (in: This=0x69e39d0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.414] IWbemClassObject:Get (in: This=0x69e39d0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2840\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.414] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2840\"") returned 0x5e
	[0254.414] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2840\"") returned 0x5e
	[0254.415] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.415] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.415] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.415] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.415] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97e8) returned 0x0
	[0254.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97e8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.416] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97e8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eebc0) returned 0x0
	[0254.416] WbemDefPath:IUnknown:Release (This=0x69b97e8) returned 0x0
	[0254.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eebc0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eebc0) returned 0x0
	[0254.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eebc0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eebc0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.416] WbemDefPath:IUnknown:AddRef (This=0x69eebc0) returned 0x3
	[0254.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eebc0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eebc0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eebc0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6af8) returned 0x0
	[0254.416] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6af8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.416] WbemDefPath:IUnknown:Release (This=0x69e6af8) returned 0x3
	[0254.417] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eebc0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.417] WbemDefPath:IUnknown:Release (This=0x69eebc0) returned 0x2
	[0254.417] WbemDefPath:IUnknown:Release (This=0x69eebc0) returned 0x1
	[0254.417] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eebc0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eebc0) returned 0x0
	[0254.417] WbemDefPath:IUnknown:AddRef (This=0x69eebc0) returned 0x3
	[0254.417] WbemDefPath:IUnknown:Release (This=0x69eebc0) returned 0x2
	[0254.417] WbemDefPath:IWbemPath:SetText (This=0x69eebc0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2840\"") returned 0x0
	[0254.417] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.417] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.417] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.417] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.417] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.417] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.417] IWbemClassObject:Get (in: This=0x69e39d0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb5324*=0, plFlavor=0x2bb5328*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="fling.exe", varVal2=0x0), pType=0x2bb5324*=8, plFlavor=0x2bb5328*=0) returned 0x0
	[0254.417] SysStringByteLen (bstr="fling.exe") returned 0x12
	[0254.418] SysStringByteLen (bstr="fling.exe") returned 0x12
	[0254.418] IWbemClassObject:Get (in: This=0x69e39d0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb5324*=8, plFlavor=0x2bb5328*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="fling.exe", varVal2=0x0), pType=0x2bb5324*=8, plFlavor=0x2bb5328*=0) returned 0x0
	[0254.418] SysStringByteLen (bstr="fling.exe") returned 0x12
	[0254.418] SysStringByteLen (bstr="fling.exe") returned 0x12
	[0254.418] CoTaskMemAlloc (cb=0x4) returned 0x69b97f8
	[0254.418] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97f8, puReturned=0x2b9e144 | out: apObjects=0x69b97f8*=0x69f0808, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.420] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f0808) returned 0x0
	[0254.420] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.420] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.420] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.420] IUnknown:AddRef (This=0x69f0808) returned 0x3
	[0254.420] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.420] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.420] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f080c) returned 0x0
	[0254.420] IMarshal:GetUnmarshalClass (in: This=0x69f080c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.420] IUnknown:Release (This=0x69f080c) returned 0x3
	[0254.420] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.421] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.421] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.421] IUnknown:Release (This=0x69f0808) returned 0x2
	[0254.421] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.421] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.421] IUnknown:QueryInterface (in: This=0x69f0808, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f0808) returned 0x0
	[0254.421] IUnknown:AddRef (This=0x69f0808) returned 0x4
	[0254.421] IUnknown:Release (This=0x69f0808) returned 0x3
	[0254.421] IUnknown:Release (This=0x69f0808) returned 0x2
	[0254.421] CoTaskMemFree (pv=0x69b97f8) 
	[0254.421] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.421] IUnknown:AddRef (This=0x69f0808) returned 0x3
	[0254.421] IWbemClassObject:Get (in: This=0x69f0808, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.421] IWbemClassObject:Get (in: This=0x69f0808, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4000\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.421] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4000\"") returned 0x5e
	[0254.421] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4000\"") returned 0x5e
	[0254.421] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.421] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.421] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.422] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.422] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9848) returned 0x0
	[0254.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9848, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.422] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9848, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee760) returned 0x0
	[0254.422] WbemDefPath:IUnknown:Release (This=0x69b9848) returned 0x0
	[0254.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee760, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee760) returned 0x0
	[0254.423] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee760, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.423] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee760, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.423] WbemDefPath:IUnknown:AddRef (This=0x69ee760) returned 0x3
	[0254.423] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee760, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.423] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee760, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.423] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee760, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6f48) returned 0x0
	[0254.423] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6f48, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.423] WbemDefPath:IUnknown:Release (This=0x69e6f48) returned 0x3
	[0254.423] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.423] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.423] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee760, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.423] WbemDefPath:IUnknown:Release (This=0x69ee760) returned 0x2
	[0254.423] WbemDefPath:IUnknown:Release (This=0x69ee760) returned 0x1
	[0254.423] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.423] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.423] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee760, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee760) returned 0x0
	[0254.423] WbemDefPath:IUnknown:AddRef (This=0x69ee760) returned 0x3
	[0254.423] WbemDefPath:IUnknown:Release (This=0x69ee760) returned 0x2
	[0254.424] WbemDefPath:IWbemPath:SetText (This=0x69ee760, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4000\"") returned 0x0
	[0254.424] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.424] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.424] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.424] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.424] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.424] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.424] IWbemClassObject:Get (in: This=0x69f0808, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb5ba8*=0, plFlavor=0x2bb5bac*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="foxmailincmail.exe", varVal2=0x0), pType=0x2bb5ba8*=8, plFlavor=0x2bb5bac*=0) returned 0x0
	[0254.424] SysStringByteLen (bstr="foxmailincmail.exe") returned 0x24
	[0254.424] SysStringByteLen (bstr="foxmailincmail.exe") returned 0x24
	[0254.424] IWbemClassObject:Get (in: This=0x69f0808, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb5ba8*=8, plFlavor=0x2bb5bac*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="foxmailincmail.exe", varVal2=0x0), pType=0x2bb5ba8*=8, plFlavor=0x2bb5bac*=0) returned 0x0
	[0254.424] SysStringByteLen (bstr="foxmailincmail.exe") returned 0x24
	[0254.463] SysStringByteLen (bstr="foxmailincmail.exe") returned 0x24
	[0254.464] CoTaskMemAlloc (cb=0x4) returned 0x69b9898
	[0254.464] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9898, puReturned=0x2b9e144 | out: apObjects=0x69b9898*=0x69efe78, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.465] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69efe78) returned 0x0
	[0254.465] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.465] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.465] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.466] IUnknown:AddRef (This=0x69efe78) returned 0x3
	[0254.466] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.466] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.466] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69efe7c) returned 0x0
	[0254.466] IMarshal:GetUnmarshalClass (in: This=0x69efe7c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.466] IUnknown:Release (This=0x69efe7c) returned 0x3
	[0254.466] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.467] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.467] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.467] IUnknown:Release (This=0x69efe78) returned 0x2
	[0254.467] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.467] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.467] IUnknown:QueryInterface (in: This=0x69efe78, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69efe78) returned 0x0
	[0254.467] IUnknown:AddRef (This=0x69efe78) returned 0x4
	[0254.467] IUnknown:Release (This=0x69efe78) returned 0x3
	[0254.467] IUnknown:Release (This=0x69efe78) returned 0x2
	[0254.467] CoTaskMemFree (pv=0x69b9898) 
	[0254.467] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.467] IUnknown:AddRef (This=0x69efe78) returned 0x3
	[0254.467] IWbemClassObject:Get (in: This=0x69efe78, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.468] IWbemClassObject:Get (in: This=0x69efe78, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4020\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.468] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4020\"") returned 0x5e
	[0254.468] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4020\"") returned 0x5e
	[0254.468] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.468] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.468] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.468] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.469] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97a8) returned 0x0
	[0254.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.470] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee060) returned 0x0
	[0254.470] WbemDefPath:IUnknown:Release (This=0x69b97a8) returned 0x0
	[0254.470] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee060, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee060) returned 0x0
	[0254.470] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee060, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.470] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee060, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.471] WbemDefPath:IUnknown:AddRef (This=0x69ee060) returned 0x3
	[0254.471] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee060, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.471] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee060, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.471] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee060, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e6fd8) returned 0x0
	[0254.471] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e6fd8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.471] WbemDefPath:IUnknown:Release (This=0x69e6fd8) returned 0x3
	[0254.471] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.471] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.471] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee060, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.471] WbemDefPath:IUnknown:Release (This=0x69ee060) returned 0x2
	[0254.471] WbemDefPath:IUnknown:Release (This=0x69ee060) returned 0x1
	[0254.471] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.471] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.471] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee060, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee060) returned 0x0
	[0254.471] WbemDefPath:IUnknown:AddRef (This=0x69ee060) returned 0x3
	[0254.471] WbemDefPath:IUnknown:Release (This=0x69ee060) returned 0x2
	[0254.472] WbemDefPath:IWbemPath:SetText (This=0x69ee060, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4020\"") returned 0x0
	[0254.472] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.472] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.472] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.472] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.472] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.472] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.472] IWbemClassObject:Get (in: This=0x69efe78, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb6454*=0, plFlavor=0x2bb6458*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="gmailnotifierpro.exe", varVal2=0x0), pType=0x2bb6454*=8, plFlavor=0x2bb6458*=0) returned 0x0
	[0254.472] SysStringByteLen (bstr="gmailnotifierpro.exe") returned 0x28
	[0254.472] SysStringByteLen (bstr="gmailnotifierpro.exe") returned 0x28
	[0254.472] IWbemClassObject:Get (in: This=0x69efe78, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb6454*=8, plFlavor=0x2bb6458*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="gmailnotifierpro.exe", varVal2=0x0), pType=0x2bb6454*=8, plFlavor=0x2bb6458*=0) returned 0x0
	[0254.473] SysStringByteLen (bstr="gmailnotifierpro.exe") returned 0x28
	[0254.473] SysStringByteLen (bstr="gmailnotifierpro.exe") returned 0x28
	[0254.473] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0254.473] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69efce0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.474] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69efce0) returned 0x0
	[0254.474] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.474] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.474] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.474] IUnknown:AddRef (This=0x69efce0) returned 0x3
	[0254.474] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.474] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.474] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69efce4) returned 0x0
	[0254.474] IMarshal:GetUnmarshalClass (in: This=0x69efce4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.474] IUnknown:Release (This=0x69efce4) returned 0x3
	[0254.474] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.475] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.475] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.475] IUnknown:Release (This=0x69efce0) returned 0x2
	[0254.475] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.475] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.475] IUnknown:QueryInterface (in: This=0x69efce0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69efce0) returned 0x0
	[0254.475] IUnknown:AddRef (This=0x69efce0) returned 0x4
	[0254.475] IUnknown:Release (This=0x69efce0) returned 0x3
	[0254.475] IUnknown:Release (This=0x69efce0) returned 0x2
	[0254.475] CoTaskMemFree (pv=0x69b97a8) 
	[0254.475] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.475] IUnknown:AddRef (This=0x69efce0) returned 0x3
	[0254.475] IWbemClassObject:Get (in: This=0x69efce0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.475] IWbemClassObject:Get (in: This=0x69efce0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1472\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.475] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1472\"") returned 0x5e
	[0254.475] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1472\"") returned 0x5e
	[0254.475] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.476] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.476] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.476] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.477] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97a8) returned 0x0
	[0254.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.477] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eeca0) returned 0x0
	[0254.477] WbemDefPath:IUnknown:Release (This=0x69b97a8) returned 0x0
	[0254.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeca0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eeca0) returned 0x0
	[0254.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeca0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeca0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.477] WbemDefPath:IUnknown:AddRef (This=0x69eeca0) returned 0x3
	[0254.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeca0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeca0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeca0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e7200) returned 0x0
	[0254.478] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e7200, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.478] WbemDefPath:IUnknown:Release (This=0x69e7200) returned 0x3
	[0254.478] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.478] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeca0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.478] WbemDefPath:IUnknown:Release (This=0x69eeca0) returned 0x2
	[0254.478] WbemDefPath:IUnknown:Release (This=0x69eeca0) returned 0x1
	[0254.478] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.478] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeca0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eeca0) returned 0x0
	[0254.478] WbemDefPath:IUnknown:AddRef (This=0x69eeca0) returned 0x3
	[0254.478] WbemDefPath:IUnknown:Release (This=0x69eeca0) returned 0x2
	[0254.478] WbemDefPath:IWbemPath:SetText (This=0x69eeca0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1472\"") returned 0x0
	[0254.478] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.478] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.479] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.479] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.479] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.479] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.479] IWbemClassObject:Get (in: This=0x69efce0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb6d08*=0, plFlavor=0x2bb6d0c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="icq.exe", varVal2=0x0), pType=0x2bb6d08*=8, plFlavor=0x2bb6d0c*=0) returned 0x0
	[0254.479] SysStringByteLen (bstr="icq.exe") returned 0xe
	[0254.479] SysStringByteLen (bstr="icq.exe") returned 0xe
	[0254.479] IWbemClassObject:Get (in: This=0x69efce0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb6d08*=8, plFlavor=0x2bb6d0c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="icq.exe", varVal2=0x0), pType=0x2bb6d08*=8, plFlavor=0x2bb6d0c*=0) returned 0x0
	[0254.479] SysStringByteLen (bstr="icq.exe") returned 0xe
	[0254.479] SysStringByteLen (bstr="icq.exe") returned 0xe
	[0254.479] CoTaskMemAlloc (cb=0x4) returned 0x69b9888
	[0254.479] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9888, puReturned=0x2b9e144 | out: apObjects=0x69b9888*=0x69f01a8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.480] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f01a8) returned 0x0
	[0254.481] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.481] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.481] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.481] IUnknown:AddRef (This=0x69f01a8) returned 0x3
	[0254.481] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.481] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.481] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f01ac) returned 0x0
	[0254.481] IMarshal:GetUnmarshalClass (in: This=0x69f01ac, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.481] IUnknown:Release (This=0x69f01ac) returned 0x3
	[0254.481] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.481] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.481] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.481] IUnknown:Release (This=0x69f01a8) returned 0x2
	[0254.481] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.482] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.482] IUnknown:QueryInterface (in: This=0x69f01a8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f01a8) returned 0x0
	[0254.482] IUnknown:AddRef (This=0x69f01a8) returned 0x4
	[0254.482] IUnknown:Release (This=0x69f01a8) returned 0x3
	[0254.482] IUnknown:Release (This=0x69f01a8) returned 0x2
	[0254.482] CoTaskMemFree (pv=0x69b9888) 
	[0254.482] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.482] IUnknown:AddRef (This=0x69f01a8) returned 0x3
	[0254.482] IWbemClassObject:Get (in: This=0x69f01a8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.482] IWbemClassObject:Get (in: This=0x69f01a8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2944\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.482] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2944\"") returned 0x5e
	[0254.482] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2944\"") returned 0x5e
	[0254.482] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.483] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.483] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.483] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.483] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9848) returned 0x0
	[0254.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9848, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.484] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9848, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee610) returned 0x0
	[0254.484] WbemDefPath:IUnknown:Release (This=0x69b9848) returned 0x0
	[0254.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee610, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee610) returned 0x0
	[0254.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee610, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee610, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.484] WbemDefPath:IUnknown:AddRef (This=0x69ee610) returned 0x3
	[0254.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee610, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee610, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee610, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69e70c8) returned 0x0
	[0254.484] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69e70c8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.484] WbemDefPath:IUnknown:Release (This=0x69e70c8) returned 0x3
	[0254.485] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.485] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.485] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee610, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.485] WbemDefPath:IUnknown:Release (This=0x69ee610) returned 0x2
	[0254.485] WbemDefPath:IUnknown:Release (This=0x69ee610) returned 0x1
	[0254.485] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.485] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.485] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee610, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee610) returned 0x0
	[0254.485] WbemDefPath:IUnknown:AddRef (This=0x69ee610) returned 0x3
	[0254.485] WbemDefPath:IUnknown:Release (This=0x69ee610) returned 0x2
	[0254.485] WbemDefPath:IWbemPath:SetText (This=0x69ee610, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"2944\"") returned 0x0
	[0254.485] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.485] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.485] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.485] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.488] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.488] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.489] IWbemClassObject:Get (in: This=0x69f01a8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb7584*=0, plFlavor=0x2bb7588*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="leechftp.exe", varVal2=0x0), pType=0x2bb7584*=8, plFlavor=0x2bb7588*=0) returned 0x0
	[0254.489] SysStringByteLen (bstr="leechftp.exe") returned 0x18
	[0254.489] SysStringByteLen (bstr="leechftp.exe") returned 0x18
	[0254.489] IWbemClassObject:Get (in: This=0x69f01a8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb7584*=8, plFlavor=0x2bb7588*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="leechftp.exe", varVal2=0x0), pType=0x2bb7584*=8, plFlavor=0x2bb7588*=0) returned 0x0
	[0254.489] SysStringByteLen (bstr="leechftp.exe") returned 0x18
	[0254.489] SysStringByteLen (bstr="leechftp.exe") returned 0x18
	[0254.489] CoTaskMemAlloc (cb=0x4) returned 0x69b97a8
	[0254.489] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97a8, puReturned=0x2b9e144 | out: apObjects=0x69b97a8*=0x69ef818, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.528] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69ef818) returned 0x0
	[0254.528] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.528] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.528] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.528] IUnknown:AddRef (This=0x69ef818) returned 0x3
	[0254.529] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.529] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.529] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69ef81c) returned 0x0
	[0254.529] IMarshal:GetUnmarshalClass (in: This=0x69ef81c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.529] IUnknown:Release (This=0x69ef81c) returned 0x3
	[0254.529] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.529] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.529] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.529] IUnknown:Release (This=0x69ef818) returned 0x2
	[0254.529] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.529] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.529] IUnknown:QueryInterface (in: This=0x69ef818, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69ef818) returned 0x0
	[0254.529] IUnknown:AddRef (This=0x69ef818) returned 0x4
	[0254.529] IUnknown:Release (This=0x69ef818) returned 0x3
	[0254.529] IUnknown:Release (This=0x69ef818) returned 0x2
	[0254.529] CoTaskMemFree (pv=0x69b97a8) 
	[0254.529] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.529] IUnknown:AddRef (This=0x69ef818) returned 0x3
	[0254.530] IWbemClassObject:Get (in: This=0x69ef818, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.530] IWbemClassObject:Get (in: This=0x69ef818, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"808\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.530] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"808\"") returned 0x5c
	[0254.530] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"808\"") returned 0x5c
	[0254.530] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.530] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.530] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.530] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.531] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9748) returned 0x0
	[0254.531] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9748, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.532] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9748, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee3e0) returned 0x0
	[0254.532] WbemDefPath:IUnknown:Release (This=0x69b9748) returned 0x0
	[0254.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee3e0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee3e0) returned 0x0
	[0254.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee3e0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee3e0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.532] WbemDefPath:IUnknown:AddRef (This=0x69ee3e0) returned 0x3
	[0254.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee3e0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee3e0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.532] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee3e0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4ea0) returned 0x0
	[0254.532] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4ea0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.532] WbemDefPath:IUnknown:Release (This=0x69f4ea0) returned 0x3
	[0254.532] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.533] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee3e0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.533] WbemDefPath:IUnknown:Release (This=0x69ee3e0) returned 0x2
	[0254.533] WbemDefPath:IUnknown:Release (This=0x69ee3e0) returned 0x1
	[0254.533] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.533] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.533] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee3e0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee3e0) returned 0x0
	[0254.533] WbemDefPath:IUnknown:AddRef (This=0x69ee3e0) returned 0x3
	[0254.533] WbemDefPath:IUnknown:Release (This=0x69ee3e0) returned 0x2
	[0254.533] WbemDefPath:IWbemPath:SetText (This=0x69ee3e0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"808\"") returned 0x0
	[0254.533] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.533] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.533] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.533] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.533] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.533] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.533] IWbemClassObject:Get (in: This=0x69ef818, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb7e18*=0, plFlavor=0x2bb7e1c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ncftp.exe", varVal2=0x0), pType=0x2bb7e18*=8, plFlavor=0x2bb7e1c*=0) returned 0x0
	[0254.534] SysStringByteLen (bstr="ncftp.exe") returned 0x12
	[0254.534] SysStringByteLen (bstr="ncftp.exe") returned 0x12
	[0254.534] IWbemClassObject:Get (in: This=0x69ef818, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb7e18*=8, plFlavor=0x2bb7e1c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ncftp.exe", varVal2=0x0), pType=0x2bb7e18*=8, plFlavor=0x2bb7e1c*=0) returned 0x0
	[0254.534] SysStringByteLen (bstr="ncftp.exe") returned 0x12
	[0254.534] SysStringByteLen (bstr="ncftp.exe") returned 0x12
	[0254.534] CoTaskMemAlloc (cb=0x4) returned 0x69b9738
	[0254.534] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9738, puReturned=0x2b9e144 | out: apObjects=0x69b9738*=0x69f0010, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.535] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f0010) returned 0x0
	[0254.535] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.535] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.535] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.535] IUnknown:AddRef (This=0x69f0010) returned 0x3
	[0254.535] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.535] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.535] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f0014) returned 0x0
	[0254.536] IMarshal:GetUnmarshalClass (in: This=0x69f0014, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.536] IUnknown:Release (This=0x69f0014) returned 0x3
	[0254.536] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.536] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.536] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.536] IUnknown:Release (This=0x69f0010) returned 0x2
	[0254.536] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.536] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.536] IUnknown:QueryInterface (in: This=0x69f0010, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f0010) returned 0x0
	[0254.536] IUnknown:AddRef (This=0x69f0010) returned 0x4
	[0254.536] IUnknown:Release (This=0x69f0010) returned 0x3
	[0254.536] IUnknown:Release (This=0x69f0010) returned 0x2
	[0254.536] CoTaskMemFree (pv=0x69b9738) 
	[0254.536] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.537] IUnknown:AddRef (This=0x69f0010) returned 0x3
	[0254.537] IWbemClassObject:Get (in: This=0x69f0010, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.537] IWbemClassObject:Get (in: This=0x69f0010, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4032\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.537] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4032\"") returned 0x5e
	[0254.537] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4032\"") returned 0x5e
	[0254.537] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.537] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.537] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.537] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.538] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98a8) returned 0x0
	[0254.539] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.539] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eea00) returned 0x0
	[0254.539] WbemDefPath:IUnknown:Release (This=0x69b98a8) returned 0x0
	[0254.539] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea00, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eea00) returned 0x0
	[0254.539] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea00, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.539] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea00, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.539] WbemDefPath:IUnknown:AddRef (This=0x69eea00) returned 0x3
	[0254.539] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea00, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.539] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea00, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.539] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea00, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4db0) returned 0x0
	[0254.540] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4db0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.540] WbemDefPath:IUnknown:Release (This=0x69f4db0) returned 0x3
	[0254.540] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.540] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.540] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea00, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.540] WbemDefPath:IUnknown:Release (This=0x69eea00) returned 0x2
	[0254.540] WbemDefPath:IUnknown:Release (This=0x69eea00) returned 0x1
	[0254.540] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.540] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.540] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea00, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eea00) returned 0x0
	[0254.540] WbemDefPath:IUnknown:AddRef (This=0x69eea00) returned 0x3
	[0254.540] WbemDefPath:IUnknown:Release (This=0x69eea00) returned 0x2
	[0254.540] WbemDefPath:IWbemPath:SetText (This=0x69eea00, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4032\"") returned 0x0
	[0254.540] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.540] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.540] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.540] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.541] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.541] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.541] IWbemClassObject:Get (in: This=0x69f0010, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb869c*=0, plFlavor=0x2bb86a0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="notepad.exe", varVal2=0x0), pType=0x2bb869c*=8, plFlavor=0x2bb86a0*=0) returned 0x0
	[0254.541] SysStringByteLen (bstr="notepad.exe") returned 0x16
	[0254.541] SysStringByteLen (bstr="notepad.exe") returned 0x16
	[0254.541] IWbemClassObject:Get (in: This=0x69f0010, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb869c*=8, plFlavor=0x2bb86a0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="notepad.exe", varVal2=0x0), pType=0x2bb869c*=8, plFlavor=0x2bb86a0*=0) returned 0x0
	[0254.541] SysStringByteLen (bstr="notepad.exe") returned 0x16
	[0254.541] SysStringByteLen (bstr="notepad.exe") returned 0x16
	[0254.541] CoTaskMemAlloc (cb=0x4) returned 0x69b9738
	[0254.541] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9738, puReturned=0x2b9e144 | out: apObjects=0x69b9738*=0x69ef9b0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.542] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69ef9b0) returned 0x0
	[0254.542] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.542] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.542] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.542] IUnknown:AddRef (This=0x69ef9b0) returned 0x3
	[0254.542] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.542] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.543] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69ef9b4) returned 0x0
	[0254.543] IMarshal:GetUnmarshalClass (in: This=0x69ef9b4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.543] IUnknown:Release (This=0x69ef9b4) returned 0x3
	[0254.543] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.543] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.543] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.543] IUnknown:Release (This=0x69ef9b0) returned 0x2
	[0254.543] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.543] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.543] IUnknown:QueryInterface (in: This=0x69ef9b0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69ef9b0) returned 0x0
	[0254.543] IUnknown:AddRef (This=0x69ef9b0) returned 0x4
	[0254.543] IUnknown:Release (This=0x69ef9b0) returned 0x3
	[0254.543] IUnknown:Release (This=0x69ef9b0) returned 0x2
	[0254.543] CoTaskMemFree (pv=0x69b9738) 
	[0254.543] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.543] IUnknown:AddRef (This=0x69ef9b0) returned 0x3
	[0254.543] IWbemClassObject:Get (in: This=0x69ef9b0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.543] IWbemClassObject:Get (in: This=0x69ef9b0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"596\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.544] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"596\"") returned 0x5c
	[0254.544] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"596\"") returned 0x5c
	[0254.544] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.544] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.544] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.544] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.545] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97e8) returned 0x0
	[0254.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97e8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.545] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97e8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee1b0) returned 0x0
	[0254.545] WbemDefPath:IUnknown:Release (This=0x69b97e8) returned 0x0
	[0254.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee1b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee1b0) returned 0x0
	[0254.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee1b0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee1b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.545] WbemDefPath:IUnknown:AddRef (This=0x69ee1b0) returned 0x3
	[0254.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee1b0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee1b0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee1b0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4fd8) returned 0x0
	[0254.545] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4fd8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.545] WbemDefPath:IUnknown:Release (This=0x69f4fd8) returned 0x3
	[0254.545] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.546] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.546] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee1b0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.546] WbemDefPath:IUnknown:Release (This=0x69ee1b0) returned 0x2
	[0254.546] WbemDefPath:IUnknown:Release (This=0x69ee1b0) returned 0x1
	[0254.546] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.546] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.546] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee1b0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee1b0) returned 0x0
	[0254.546] WbemDefPath:IUnknown:AddRef (This=0x69ee1b0) returned 0x3
	[0254.546] WbemDefPath:IUnknown:Release (This=0x69ee1b0) returned 0x2
	[0254.546] WbemDefPath:IWbemPath:SetText (This=0x69ee1b0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"596\"") returned 0x0
	[0254.546] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.546] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.546] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.546] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.546] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.546] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.546] IWbemClassObject:Get (in: This=0x69ef9b0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb8f28*=0, plFlavor=0x2bb8f2c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="operamail.exe", varVal2=0x0), pType=0x2bb8f28*=8, plFlavor=0x2bb8f2c*=0) returned 0x0
	[0254.546] SysStringByteLen (bstr="operamail.exe") returned 0x1a
	[0254.546] SysStringByteLen (bstr="operamail.exe") returned 0x1a
	[0254.547] IWbemClassObject:Get (in: This=0x69ef9b0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb8f28*=8, plFlavor=0x2bb8f2c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="operamail.exe", varVal2=0x0), pType=0x2bb8f28*=8, plFlavor=0x2bb8f2c*=0) returned 0x0
	[0254.547] SysStringByteLen (bstr="operamail.exe") returned 0x1a
	[0254.547] SysStringByteLen (bstr="operamail.exe") returned 0x1a
	[0254.547] CoTaskMemAlloc (cb=0x4) returned 0x69b9888
	[0254.547] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9888, puReturned=0x2b9e144 | out: apObjects=0x69b9888*=0x69ef4e8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.548] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69ef4e8) returned 0x0
	[0254.548] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.548] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.548] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.548] IUnknown:AddRef (This=0x69ef4e8) returned 0x3
	[0254.548] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.548] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.548] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69ef4ec) returned 0x0
	[0254.548] IMarshal:GetUnmarshalClass (in: This=0x69ef4ec, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.548] IUnknown:Release (This=0x69ef4ec) returned 0x3
	[0254.548] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.548] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.548] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.548] IUnknown:Release (This=0x69ef4e8) returned 0x2
	[0254.548] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.548] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.549] IUnknown:QueryInterface (in: This=0x69ef4e8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69ef4e8) returned 0x0
	[0254.549] IUnknown:AddRef (This=0x69ef4e8) returned 0x4
	[0254.549] IUnknown:Release (This=0x69ef4e8) returned 0x3
	[0254.549] IUnknown:Release (This=0x69ef4e8) returned 0x2
	[0254.549] CoTaskMemFree (pv=0x69b9888) 
	[0254.549] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.549] IUnknown:AddRef (This=0x69ef4e8) returned 0x3
	[0254.549] IWbemClassObject:Get (in: This=0x69ef4e8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.549] IWbemClassObject:Get (in: This=0x69ef4e8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"992\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.549] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"992\"") returned 0x5c
	[0254.549] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"992\"") returned 0x5c
	[0254.549] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.549] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.549] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.549] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.554] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98c8) returned 0x0
	[0254.554] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98c8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.555] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98c8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee370) returned 0x0
	[0254.555] WbemDefPath:IUnknown:Release (This=0x69b98c8) returned 0x0
	[0254.555] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee370, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee370) returned 0x0
	[0254.555] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee370, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.555] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee370, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.555] WbemDefPath:IUnknown:AddRef (This=0x69ee370) returned 0x3
	[0254.555] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee370, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.555] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee370, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.555] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee370, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f5080) returned 0x0
	[0254.555] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f5080, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.555] WbemDefPath:IUnknown:Release (This=0x69f5080) returned 0x3
	[0254.555] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.555] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.555] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee370, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.555] WbemDefPath:IUnknown:Release (This=0x69ee370) returned 0x2
	[0254.555] WbemDefPath:IUnknown:Release (This=0x69ee370) returned 0x1
	[0254.555] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.555] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.556] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee370, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee370) returned 0x0
	[0254.556] WbemDefPath:IUnknown:AddRef (This=0x69ee370) returned 0x3
	[0254.556] WbemDefPath:IUnknown:Release (This=0x69ee370) returned 0x2
	[0254.556] WbemDefPath:IWbemPath:SetText (This=0x69ee370, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"992\"") returned 0x0
	[0254.556] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.556] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.556] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.556] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.556] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.556] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.556] IWbemClassObject:Get (in: This=0x69ef4e8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb97bc*=0, plFlavor=0x2bb97c0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="outlook.exe", varVal2=0x0), pType=0x2bb97bc*=8, plFlavor=0x2bb97c0*=0) returned 0x0
	[0254.556] SysStringByteLen (bstr="outlook.exe") returned 0x16
	[0254.556] SysStringByteLen (bstr="outlook.exe") returned 0x16
	[0254.556] IWbemClassObject:Get (in: This=0x69ef4e8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bb97bc*=8, plFlavor=0x2bb97c0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="outlook.exe", varVal2=0x0), pType=0x2bb97bc*=8, plFlavor=0x2bb97c0*=0) returned 0x0
	[0254.556] SysStringByteLen (bstr="outlook.exe") returned 0x16
	[0254.556] SysStringByteLen (bstr="outlook.exe") returned 0x16
	[0254.556] CoTaskMemAlloc (cb=0x4) returned 0x69b98a8
	[0254.556] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98a8, puReturned=0x2b9e144 | out: apObjects=0x69b98a8*=0x69f09a0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.557] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f09a0) returned 0x0
	[0254.557] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.557] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.557] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.558] IUnknown:AddRef (This=0x69f09a0) returned 0x3
	[0254.558] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.558] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.558] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f09a4) returned 0x0
	[0254.558] IMarshal:GetUnmarshalClass (in: This=0x69f09a4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.558] IUnknown:Release (This=0x69f09a4) returned 0x3
	[0254.558] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.558] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.558] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.558] IUnknown:Release (This=0x69f09a0) returned 0x2
	[0254.558] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.558] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.558] IUnknown:QueryInterface (in: This=0x69f09a0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f09a0) returned 0x0
	[0254.558] IUnknown:AddRef (This=0x69f09a0) returned 0x4
	[0254.558] IUnknown:Release (This=0x69f09a0) returned 0x3
	[0254.558] IUnknown:Release (This=0x69f09a0) returned 0x2
	[0254.558] CoTaskMemFree (pv=0x69b98a8) 
	[0254.559] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.559] IUnknown:AddRef (This=0x69f09a0) returned 0x3
	[0254.559] IWbemClassObject:Get (in: This=0x69f09a0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.559] IWbemClassObject:Get (in: This=0x69f09a0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"676\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.559] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"676\"") returned 0x5c
	[0254.559] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"676\"") returned 0x5c
	[0254.559] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.559] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.559] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.559] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.560] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0254.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.560] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee990) returned 0x0
	[0254.560] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0254.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee990, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee990) returned 0x0
	[0254.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee990, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.560] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee990, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.597] WbemDefPath:IUnknown:AddRef (This=0x69ee990) returned 0x3
	[0254.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee990, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee990, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee990, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f54b8) returned 0x0
	[0254.597] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f54b8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.597] WbemDefPath:IUnknown:Release (This=0x69f54b8) returned 0x3
	[0254.597] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.597] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee990, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.597] WbemDefPath:IUnknown:Release (This=0x69ee990) returned 0x2
	[0254.597] WbemDefPath:IUnknown:Release (This=0x69ee990) returned 0x1
	[0254.597] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.597] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee990, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee990) returned 0x0
	[0254.598] WbemDefPath:IUnknown:AddRef (This=0x69ee990) returned 0x3
	[0254.598] WbemDefPath:IUnknown:Release (This=0x69ee990) returned 0x2
	[0254.598] WbemDefPath:IWbemPath:SetText (This=0x69ee990, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"676\"") returned 0x0
	[0254.598] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.598] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.598] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.598] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.598] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.598] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.598] IWbemClassObject:Get (in: This=0x69f09a0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bba048*=0, plFlavor=0x2bba04c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="pidgin.exe", varVal2=0x0), pType=0x2bba048*=8, plFlavor=0x2bba04c*=0) returned 0x0
	[0254.598] SysStringByteLen (bstr="pidgin.exe") returned 0x14
	[0254.598] SysStringByteLen (bstr="pidgin.exe") returned 0x14
	[0254.598] IWbemClassObject:Get (in: This=0x69f09a0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bba048*=8, plFlavor=0x2bba04c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="pidgin.exe", varVal2=0x0), pType=0x2bba048*=8, plFlavor=0x2bba04c*=0) returned 0x0
	[0254.598] SysStringByteLen (bstr="pidgin.exe") returned 0x14
	[0254.599] SysStringByteLen (bstr="pidgin.exe") returned 0x14
	[0254.599] CoTaskMemAlloc (cb=0x4) returned 0x69b97d8
	[0254.599] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97d8, puReturned=0x2b9e144 | out: apObjects=0x69b97d8*=0x69f0e68, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.599] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f0e68) returned 0x0
	[0254.600] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.600] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.600] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.600] IUnknown:AddRef (This=0x69f0e68) returned 0x3
	[0254.600] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.600] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.600] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f0e6c) returned 0x0
	[0254.600] IMarshal:GetUnmarshalClass (in: This=0x69f0e6c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.600] IUnknown:Release (This=0x69f0e6c) returned 0x3
	[0254.600] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.600] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.600] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.600] IUnknown:Release (This=0x69f0e68) returned 0x2
	[0254.600] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.600] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.600] IUnknown:QueryInterface (in: This=0x69f0e68, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f0e68) returned 0x0
	[0254.601] IUnknown:AddRef (This=0x69f0e68) returned 0x4
	[0254.601] IUnknown:Release (This=0x69f0e68) returned 0x3
	[0254.601] IUnknown:Release (This=0x69f0e68) returned 0x2
	[0254.601] CoTaskMemFree (pv=0x69b97d8) 
	[0254.601] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.601] IUnknown:AddRef (This=0x69f0e68) returned 0x3
	[0254.601] IWbemClassObject:Get (in: This=0x69f0e68, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.601] IWbemClassObject:Get (in: This=0x69f0e68, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1360\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.601] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1360\"") returned 0x5e
	[0254.601] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1360\"") returned 0x5e
	[0254.601] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.601] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.601] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.601] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.602] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0254.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.603] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eeb50) returned 0x0
	[0254.603] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0254.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeb50, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eeb50) returned 0x0
	[0254.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeb50, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeb50, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.603] WbemDefPath:IUnknown:AddRef (This=0x69eeb50) returned 0x3
	[0254.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeb50, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeb50, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.603] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeb50, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f57e8) returned 0x0
	[0254.603] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f57e8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.603] WbemDefPath:IUnknown:Release (This=0x69f57e8) returned 0x3
	[0254.603] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.604] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.604] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeb50, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.604] WbemDefPath:IUnknown:Release (This=0x69eeb50) returned 0x2
	[0254.604] WbemDefPath:IUnknown:Release (This=0x69eeb50) returned 0x1
	[0254.604] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.604] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.604] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeb50, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eeb50) returned 0x0
	[0254.604] WbemDefPath:IUnknown:AddRef (This=0x69eeb50) returned 0x3
	[0254.604] WbemDefPath:IUnknown:Release (This=0x69eeb50) returned 0x2
	[0254.604] WbemDefPath:IWbemPath:SetText (This=0x69eeb50, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1360\"") returned 0x0
	[0254.604] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.604] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.604] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.604] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.604] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.604] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.604] IWbemClassObject:Get (in: This=0x69f0e68, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bba8d4*=0, plFlavor=0x2bba8d8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="scriptftp.exe", varVal2=0x0), pType=0x2bba8d4*=8, plFlavor=0x2bba8d8*=0) returned 0x0
	[0254.605] SysStringByteLen (bstr="scriptftp.exe") returned 0x1a
	[0254.605] SysStringByteLen (bstr="scriptftp.exe") returned 0x1a
	[0254.605] IWbemClassObject:Get (in: This=0x69f0e68, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bba8d4*=8, plFlavor=0x2bba8d8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="scriptftp.exe", varVal2=0x0), pType=0x2bba8d4*=8, plFlavor=0x2bba8d8*=0) returned 0x0
	[0254.605] SysStringByteLen (bstr="scriptftp.exe") returned 0x1a
	[0254.605] SysStringByteLen (bstr="scriptftp.exe") returned 0x1a
	[0254.605] CoTaskMemAlloc (cb=0x4) returned 0x69b9748
	[0254.605] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9748, puReturned=0x2b9e144 | out: apObjects=0x69b9748*=0x69f0340, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.607] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f0340) returned 0x0
	[0254.607] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.607] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.607] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.608] IUnknown:AddRef (This=0x69f0340) returned 0x3
	[0254.608] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.608] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.608] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f0344) returned 0x0
	[0254.608] IMarshal:GetUnmarshalClass (in: This=0x69f0344, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.608] IUnknown:Release (This=0x69f0344) returned 0x3
	[0254.608] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.608] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.608] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.608] IUnknown:Release (This=0x69f0340) returned 0x2
	[0254.608] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.608] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.608] IUnknown:QueryInterface (in: This=0x69f0340, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f0340) returned 0x0
	[0254.608] IUnknown:AddRef (This=0x69f0340) returned 0x4
	[0254.608] IUnknown:Release (This=0x69f0340) returned 0x3
	[0254.608] IUnknown:Release (This=0x69f0340) returned 0x2
	[0254.608] CoTaskMemFree (pv=0x69b9748) 
	[0254.608] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.608] IUnknown:AddRef (This=0x69f0340) returned 0x3
	[0254.608] IWbemClassObject:Get (in: This=0x69f0340, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.609] IWbemClassObject:Get (in: This=0x69f0340, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4120\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.609] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4120\"") returned 0x5e
	[0254.609] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4120\"") returned 0x5e
	[0254.609] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.609] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.609] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.609] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.610] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0254.610] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.610] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69edff0) returned 0x0
	[0254.610] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0254.610] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edff0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69edff0) returned 0x0
	[0254.610] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edff0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.610] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edff0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.610] WbemDefPath:IUnknown:AddRef (This=0x69edff0) returned 0x3
	[0254.610] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edff0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.610] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edff0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.610] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edff0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f5848) returned 0x0
	[0254.611] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f5848, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.611] WbemDefPath:IUnknown:Release (This=0x69f5848) returned 0x3
	[0254.611] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.611] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.611] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edff0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.611] WbemDefPath:IUnknown:Release (This=0x69edff0) returned 0x2
	[0254.611] WbemDefPath:IUnknown:Release (This=0x69edff0) returned 0x1
	[0254.611] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.611] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.611] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edff0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69edff0) returned 0x0
	[0254.611] WbemDefPath:IUnknown:AddRef (This=0x69edff0) returned 0x3
	[0254.611] WbemDefPath:IUnknown:Release (This=0x69edff0) returned 0x2
	[0254.611] WbemDefPath:IWbemPath:SetText (This=0x69edff0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4120\"") returned 0x0
	[0254.611] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.611] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.611] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.611] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.611] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.611] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.611] IWbemClassObject:Get (in: This=0x69f0340, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbb168*=0, plFlavor=0x2bbb16c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="skype.exe", varVal2=0x0), pType=0x2bbb168*=8, plFlavor=0x2bbb16c*=0) returned 0x0
	[0254.611] SysStringByteLen (bstr="skype.exe") returned 0x12
	[0254.611] SysStringByteLen (bstr="skype.exe") returned 0x12
	[0254.612] IWbemClassObject:Get (in: This=0x69f0340, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbb168*=8, plFlavor=0x2bbb16c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="skype.exe", varVal2=0x0), pType=0x2bbb168*=8, plFlavor=0x2bbb16c*=0) returned 0x0
	[0254.612] SysStringByteLen (bstr="skype.exe") returned 0x12
	[0254.612] SysStringByteLen (bstr="skype.exe") returned 0x12
	[0254.612] CoTaskMemAlloc (cb=0x4) returned 0x69b97d8
	[0254.612] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97d8, puReturned=0x2b9e144 | out: apObjects=0x69b97d8*=0x69f0b38, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.613] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f0b38) returned 0x0
	[0254.613] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.613] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.613] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.613] IUnknown:AddRef (This=0x69f0b38) returned 0x3
	[0254.613] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.613] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.613] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f0b3c) returned 0x0
	[0254.614] IMarshal:GetUnmarshalClass (in: This=0x69f0b3c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.614] IUnknown:Release (This=0x69f0b3c) returned 0x3
	[0254.614] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.614] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.614] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.614] IUnknown:Release (This=0x69f0b38) returned 0x2
	[0254.614] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.614] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.614] IUnknown:QueryInterface (in: This=0x69f0b38, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f0b38) returned 0x0
	[0254.614] IUnknown:AddRef (This=0x69f0b38) returned 0x4
	[0254.614] IUnknown:Release (This=0x69f0b38) returned 0x3
	[0254.614] IUnknown:Release (This=0x69f0b38) returned 0x2
	[0254.614] CoTaskMemFree (pv=0x69b97d8) 
	[0254.614] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.615] IUnknown:AddRef (This=0x69f0b38) returned 0x3
	[0254.615] IWbemClassObject:Get (in: This=0x69f0b38, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.615] IWbemClassObject:Get (in: This=0x69f0b38, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.615] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"") returned 0x5e
	[0254.615] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"") returned 0x5e
	[0254.615] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.615] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.615] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.615] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.616] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9848) returned 0x0
	[0254.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9848, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.616] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9848, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69edf10) returned 0x0
	[0254.616] WbemDefPath:IUnknown:Release (This=0x69b9848) returned 0x0
	[0254.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf10, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69edf10) returned 0x0
	[0254.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf10, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.616] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf10, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.617] WbemDefPath:IUnknown:AddRef (This=0x69edf10) returned 0x3
	[0254.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf10, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf10, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf10, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f5b78) returned 0x0
	[0254.617] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f5b78, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.617] WbemDefPath:IUnknown:Release (This=0x69f5b78) returned 0x3
	[0254.617] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.617] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf10, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.617] WbemDefPath:IUnknown:Release (This=0x69edf10) returned 0x2
	[0254.617] WbemDefPath:IUnknown:Release (This=0x69edf10) returned 0x1
	[0254.617] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.617] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.617] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf10, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69edf10) returned 0x0
	[0254.617] WbemDefPath:IUnknown:AddRef (This=0x69edf10) returned 0x3
	[0254.617] WbemDefPath:IUnknown:Release (This=0x69edf10) returned 0x2
	[0254.617] WbemDefPath:IWbemPath:SetText (This=0x69edf10, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4164\"") returned 0x0
	[0254.617] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.617] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.617] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.617] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.617] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.617] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.618] IWbemClassObject:Get (in: This=0x69f0b38, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbb9ec*=0, plFlavor=0x2bbb9f0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="smartftp.exe", varVal2=0x0), pType=0x2bbb9ec*=8, plFlavor=0x2bbb9f0*=0) returned 0x0
	[0254.618] SysStringByteLen (bstr="smartftp.exe") returned 0x18
	[0254.618] SysStringByteLen (bstr="smartftp.exe") returned 0x18
	[0254.618] IWbemClassObject:Get (in: This=0x69f0b38, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbb9ec*=8, plFlavor=0x2bbb9f0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="smartftp.exe", varVal2=0x0), pType=0x2bbb9ec*=8, plFlavor=0x2bbb9f0*=0) returned 0x0
	[0254.618] SysStringByteLen (bstr="smartftp.exe") returned 0x18
	[0254.618] SysStringByteLen (bstr="smartftp.exe") returned 0x18
	[0254.618] CoTaskMemAlloc (cb=0x4) returned 0x69b9768
	[0254.618] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9768, puReturned=0x2b9e144 | out: apObjects=0x69b9768*=0x69efb48, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.619] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69efb48) returned 0x0
	[0254.619] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.619] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.619] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.619] IUnknown:AddRef (This=0x69efb48) returned 0x3
	[0254.619] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.619] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.619] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69efb4c) returned 0x0
	[0254.619] IMarshal:GetUnmarshalClass (in: This=0x69efb4c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.619] IUnknown:Release (This=0x69efb4c) returned 0x3
	[0254.619] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.619] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.619] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.619] IUnknown:Release (This=0x69efb48) returned 0x2
	[0254.619] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.620] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.620] IUnknown:QueryInterface (in: This=0x69efb48, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69efb48) returned 0x0
	[0254.620] IUnknown:AddRef (This=0x69efb48) returned 0x4
	[0254.620] IUnknown:Release (This=0x69efb48) returned 0x3
	[0254.620] IUnknown:Release (This=0x69efb48) returned 0x2
	[0254.620] CoTaskMemFree (pv=0x69b9768) 
	[0254.620] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.620] IUnknown:AddRef (This=0x69efb48) returned 0x3
	[0254.620] IWbemClassObject:Get (in: This=0x69efb48, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.620] IWbemClassObject:Get (in: This=0x69efb48, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4176\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.620] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4176\"") returned 0x5e
	[0254.620] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4176\"") returned 0x5e
	[0254.620] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.620] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.620] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.620] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.621] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9868) returned 0x0
	[0254.621] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.621] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9868, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee220) returned 0x0
	[0254.621] WbemDefPath:IUnknown:Release (This=0x69b9868) returned 0x0
	[0254.621] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee220, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee220) returned 0x0
	[0254.622] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee220, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.622] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee220, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.623] WbemDefPath:IUnknown:AddRef (This=0x69ee220) returned 0x3
	[0254.623] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee220, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.623] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee220, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.623] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee220, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f5b00) returned 0x0
	[0254.623] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f5b00, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.623] WbemDefPath:IUnknown:Release (This=0x69f5b00) returned 0x3
	[0254.623] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.623] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.623] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee220, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.623] WbemDefPath:IUnknown:Release (This=0x69ee220) returned 0x2
	[0254.623] WbemDefPath:IUnknown:Release (This=0x69ee220) returned 0x1
	[0254.623] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.623] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.623] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee220, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee220) returned 0x0
	[0254.623] WbemDefPath:IUnknown:AddRef (This=0x69ee220) returned 0x3
	[0254.623] WbemDefPath:IUnknown:Release (This=0x69ee220) returned 0x2
	[0254.623] WbemDefPath:IWbemPath:SetText (This=0x69ee220, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4176\"") returned 0x0
	[0254.624] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.624] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.624] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.624] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.624] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.625] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.625] IWbemClassObject:Get (in: This=0x69efb48, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbc280*=0, plFlavor=0x2bbc284*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="thunderbird.exe", varVal2=0x0), pType=0x2bbc280*=8, plFlavor=0x2bbc284*=0) returned 0x0
	[0254.625] SysStringByteLen (bstr="thunderbird.exe") returned 0x1e
	[0254.625] SysStringByteLen (bstr="thunderbird.exe") returned 0x1e
	[0254.625] IWbemClassObject:Get (in: This=0x69efb48, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbc280*=8, plFlavor=0x2bbc284*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="thunderbird.exe", varVal2=0x0), pType=0x2bbc280*=8, plFlavor=0x2bbc284*=0) returned 0x0
	[0254.625] SysStringByteLen (bstr="thunderbird.exe") returned 0x1e
	[0254.625] SysStringByteLen (bstr="thunderbird.exe") returned 0x1e
	[0254.625] CoTaskMemAlloc (cb=0x4) returned 0x69b97d8
	[0254.625] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97d8, puReturned=0x2b9e144 | out: apObjects=0x69b97d8*=0x69f1000, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.626] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f1000) returned 0x0
	[0254.626] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.626] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.626] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.626] IUnknown:AddRef (This=0x69f1000) returned 0x3
	[0254.626] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.626] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.626] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f1004) returned 0x0
	[0254.627] IMarshal:GetUnmarshalClass (in: This=0x69f1004, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.627] IUnknown:Release (This=0x69f1004) returned 0x3
	[0254.627] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.627] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.627] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.627] IUnknown:Release (This=0x69f1000) returned 0x2
	[0254.627] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.627] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.627] IUnknown:QueryInterface (in: This=0x69f1000, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f1000) returned 0x0
	[0254.627] IUnknown:AddRef (This=0x69f1000) returned 0x4
	[0254.627] IUnknown:Release (This=0x69f1000) returned 0x3
	[0254.627] IUnknown:Release (This=0x69f1000) returned 0x2
	[0254.627] CoTaskMemFree (pv=0x69b97d8) 
	[0254.627] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.627] IUnknown:AddRef (This=0x69f1000) returned 0x3
	[0254.627] IWbemClassObject:Get (in: This=0x69f1000, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.627] IWbemClassObject:Get (in: This=0x69f1000, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4184\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.628] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4184\"") returned 0x5e
	[0254.628] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4184\"") returned 0x5e
	[0254.628] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.628] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.628] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.667] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.668] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0254.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.668] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69edf80) returned 0x0
	[0254.668] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0254.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf80, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69edf80) returned 0x0
	[0254.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf80, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf80, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.668] WbemDefPath:IUnknown:AddRef (This=0x69edf80) returned 0x3
	[0254.668] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf80, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf80, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf80, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f5d28) returned 0x0
	[0254.669] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f5d28, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.669] WbemDefPath:IUnknown:Release (This=0x69f5d28) returned 0x3
	[0254.669] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.669] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf80, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.669] WbemDefPath:IUnknown:Release (This=0x69edf80) returned 0x2
	[0254.669] WbemDefPath:IUnknown:Release (This=0x69edf80) returned 0x1
	[0254.669] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.669] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.669] WbemDefPath:IUnknown:QueryInterface (in: This=0x69edf80, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69edf80) returned 0x0
	[0254.669] WbemDefPath:IUnknown:AddRef (This=0x69edf80) returned 0x3
	[0254.669] WbemDefPath:IUnknown:Release (This=0x69edf80) returned 0x2
	[0254.669] WbemDefPath:IWbemPath:SetText (This=0x69edf80, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4184\"") returned 0x0
	[0254.669] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.669] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.669] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.669] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.669] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.670] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.670] IWbemClassObject:Get (in: This=0x69f1000, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbcb1c*=0, plFlavor=0x2bbcb20*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="trillian.exe", varVal2=0x0), pType=0x2bbcb1c*=8, plFlavor=0x2bbcb20*=0) returned 0x0
	[0254.670] SysStringByteLen (bstr="trillian.exe") returned 0x18
	[0254.670] SysStringByteLen (bstr="trillian.exe") returned 0x18
	[0254.670] IWbemClassObject:Get (in: This=0x69f1000, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbcb1c*=8, plFlavor=0x2bbcb20*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="trillian.exe", varVal2=0x0), pType=0x2bbcb1c*=8, plFlavor=0x2bbcb20*=0) returned 0x0
	[0254.670] SysStringByteLen (bstr="trillian.exe") returned 0x18
	[0254.670] SysStringByteLen (bstr="trillian.exe") returned 0x18
	[0254.670] CoTaskMemAlloc (cb=0x4) returned 0x69b9848
	[0254.670] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9848, puReturned=0x2b9e144 | out: apObjects=0x69b9848*=0x69ef680, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.671] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69ef680) returned 0x0
	[0254.671] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.671] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.671] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.672] IUnknown:AddRef (This=0x69ef680) returned 0x3
	[0254.672] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.672] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.672] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69ef684) returned 0x0
	[0254.672] IMarshal:GetUnmarshalClass (in: This=0x69ef684, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.672] IUnknown:Release (This=0x69ef684) returned 0x3
	[0254.672] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.672] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.672] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.672] IUnknown:Release (This=0x69ef680) returned 0x2
	[0254.672] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.672] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.672] IUnknown:QueryInterface (in: This=0x69ef680, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69ef680) returned 0x0
	[0254.672] IUnknown:AddRef (This=0x69ef680) returned 0x4
	[0254.672] IUnknown:Release (This=0x69ef680) returned 0x3
	[0254.672] IUnknown:Release (This=0x69ef680) returned 0x2
	[0254.672] CoTaskMemFree (pv=0x69b9848) 
	[0254.672] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.672] IUnknown:AddRef (This=0x69ef680) returned 0x3
	[0254.672] IWbemClassObject:Get (in: This=0x69ef680, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.673] IWbemClassObject:Get (in: This=0x69ef680, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4192\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.673] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4192\"") returned 0x5e
	[0254.673] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4192\"") returned 0x5e
	[0254.673] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.673] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.673] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.673] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.674] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0254.674] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.674] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee8b0) returned 0x0
	[0254.674] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0254.674] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee8b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee8b0) returned 0x0
	[0254.674] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee8b0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.674] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee8b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.674] WbemDefPath:IUnknown:AddRef (This=0x69ee8b0) returned 0x3
	[0254.674] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee8b0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.674] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee8b0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee8b0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f3f28) returned 0x0
	[0254.675] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f3f28, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.675] WbemDefPath:IUnknown:Release (This=0x69f3f28) returned 0x3
	[0254.675] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.675] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee8b0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.675] WbemDefPath:IUnknown:Release (This=0x69ee8b0) returned 0x2
	[0254.675] WbemDefPath:IUnknown:Release (This=0x69ee8b0) returned 0x1
	[0254.675] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.675] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee8b0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee8b0) returned 0x0
	[0254.675] WbemDefPath:IUnknown:AddRef (This=0x69ee8b0) returned 0x3
	[0254.675] WbemDefPath:IUnknown:Release (This=0x69ee8b0) returned 0x2
	[0254.675] WbemDefPath:IWbemPath:SetText (This=0x69ee8b0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4192\"") returned 0x0
	[0254.675] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.675] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.676] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.676] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.676] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.676] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.676] IWbemClassObject:Get (in: This=0x69ef680, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbd3b0*=0, plFlavor=0x2bbd3b4*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="webdrive.exe", varVal2=0x0), pType=0x2bbd3b0*=8, plFlavor=0x2bbd3b4*=0) returned 0x0
	[0254.676] SysStringByteLen (bstr="webdrive.exe") returned 0x18
	[0254.676] SysStringByteLen (bstr="webdrive.exe") returned 0x18
	[0254.676] IWbemClassObject:Get (in: This=0x69ef680, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbd3b0*=8, plFlavor=0x2bbd3b4*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="webdrive.exe", varVal2=0x0), pType=0x2bbd3b0*=8, plFlavor=0x2bbd3b4*=0) returned 0x0
	[0254.676] SysStringByteLen (bstr="webdrive.exe") returned 0x18
	[0254.676] SysStringByteLen (bstr="webdrive.exe") returned 0x18
	[0254.676] CoTaskMemAlloc (cb=0x4) returned 0x69b9738
	[0254.676] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9738, puReturned=0x2b9e144 | out: apObjects=0x69b9738*=0x69ef1b8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.677] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69ef1b8) returned 0x0
	[0254.678] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.678] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.678] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.678] IUnknown:AddRef (This=0x69ef1b8) returned 0x3
	[0254.678] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.678] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.678] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69ef1bc) returned 0x0
	[0254.678] IMarshal:GetUnmarshalClass (in: This=0x69ef1bc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.678] IUnknown:Release (This=0x69ef1bc) returned 0x3
	[0254.678] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.679] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.679] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.679] IUnknown:Release (This=0x69ef1b8) returned 0x2
	[0254.679] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.679] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.679] IUnknown:QueryInterface (in: This=0x69ef1b8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69ef1b8) returned 0x0
	[0254.679] IUnknown:AddRef (This=0x69ef1b8) returned 0x4
	[0254.679] IUnknown:Release (This=0x69ef1b8) returned 0x3
	[0254.679] IUnknown:Release (This=0x69ef1b8) returned 0x2
	[0254.679] CoTaskMemFree (pv=0x69b9738) 
	[0254.679] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.679] IUnknown:AddRef (This=0x69ef1b8) returned 0x3
	[0254.679] IWbemClassObject:Get (in: This=0x69ef1b8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.680] IWbemClassObject:Get (in: This=0x69ef1b8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4200\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.680] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4200\"") returned 0x5e
	[0254.680] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4200\"") returned 0x5e
	[0254.680] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.680] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.680] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.680] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.681] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0254.681] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.681] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eec30) returned 0x0
	[0254.681] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0254.681] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eec30, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eec30) returned 0x0
	[0254.681] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eec30, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.681] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eec30, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.681] WbemDefPath:IUnknown:AddRef (This=0x69eec30) returned 0x3
	[0254.681] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eec30, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.681] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eec30, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.681] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eec30, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4090) returned 0x0
	[0254.681] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4090, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.681] WbemDefPath:IUnknown:Release (This=0x69f4090) returned 0x3
	[0254.682] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.682] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.682] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eec30, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.682] WbemDefPath:IUnknown:Release (This=0x69eec30) returned 0x2
	[0254.682] WbemDefPath:IUnknown:Release (This=0x69eec30) returned 0x1
	[0254.682] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.682] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.682] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eec30, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eec30) returned 0x0
	[0254.682] WbemDefPath:IUnknown:AddRef (This=0x69eec30) returned 0x3
	[0254.682] WbemDefPath:IUnknown:Release (This=0x69eec30) returned 0x2
	[0254.682] WbemDefPath:IWbemPath:SetText (This=0x69eec30, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4200\"") returned 0x0
	[0254.682] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.682] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.682] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.682] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.682] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.682] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.682] IWbemClassObject:Get (in: This=0x69ef1b8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbdc44*=0, plFlavor=0x2bbdc48*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="whatsapp.exe", varVal2=0x0), pType=0x2bbdc44*=8, plFlavor=0x2bbdc48*=0) returned 0x0
	[0254.682] SysStringByteLen (bstr="whatsapp.exe") returned 0x18
	[0254.682] SysStringByteLen (bstr="whatsapp.exe") returned 0x18
	[0254.682] IWbemClassObject:Get (in: This=0x69ef1b8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbdc44*=8, plFlavor=0x2bbdc48*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="whatsapp.exe", varVal2=0x0), pType=0x2bbdc44*=8, plFlavor=0x2bbdc48*=0) returned 0x0
	[0254.683] SysStringByteLen (bstr="whatsapp.exe") returned 0x18
	[0254.683] SysStringByteLen (bstr="whatsapp.exe") returned 0x18
	[0254.683] CoTaskMemAlloc (cb=0x4) returned 0x69b97b8
	[0254.683] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97b8, puReturned=0x2b9e144 | out: apObjects=0x69b97b8*=0x69f04d8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.683] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f04d8) returned 0x0
	[0254.683] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.683] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.683] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.684] IUnknown:AddRef (This=0x69f04d8) returned 0x3
	[0254.684] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.684] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.684] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f04dc) returned 0x0
	[0254.684] IMarshal:GetUnmarshalClass (in: This=0x69f04dc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.684] IUnknown:Release (This=0x69f04dc) returned 0x3
	[0254.684] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.684] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.684] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.684] IUnknown:Release (This=0x69f04d8) returned 0x2
	[0254.684] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.684] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.684] IUnknown:QueryInterface (in: This=0x69f04d8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f04d8) returned 0x0
	[0254.684] IUnknown:AddRef (This=0x69f04d8) returned 0x4
	[0254.684] IUnknown:Release (This=0x69f04d8) returned 0x3
	[0254.684] IUnknown:Release (This=0x69f04d8) returned 0x2
	[0254.684] CoTaskMemFree (pv=0x69b97b8) 
	[0254.684] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.684] IUnknown:AddRef (This=0x69f04d8) returned 0x3
	[0254.684] IWbemClassObject:Get (in: This=0x69f04d8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.684] IWbemClassObject:Get (in: This=0x69f04d8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4208\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.685] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4208\"") returned 0x5e
	[0254.685] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4208\"") returned 0x5e
	[0254.685] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.685] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.685] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.685] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.686] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9828) returned 0x0
	[0254.686] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9828, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.686] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9828, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee0d0) returned 0x0
	[0254.686] WbemDefPath:IUnknown:Release (This=0x69b9828) returned 0x0
	[0254.686] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee0d0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee0d0) returned 0x0
	[0254.686] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee0d0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee0d0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.687] WbemDefPath:IUnknown:AddRef (This=0x69ee0d0) returned 0x3
	[0254.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee0d0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee0d0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee0d0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4330) returned 0x0
	[0254.687] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4330, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.687] WbemDefPath:IUnknown:Release (This=0x69f4330) returned 0x3
	[0254.687] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.687] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee0d0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.687] WbemDefPath:IUnknown:Release (This=0x69ee0d0) returned 0x2
	[0254.687] WbemDefPath:IUnknown:Release (This=0x69ee0d0) returned 0x1
	[0254.687] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.687] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee0d0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee0d0) returned 0x0
	[0254.687] WbemDefPath:IUnknown:AddRef (This=0x69ee0d0) returned 0x3
	[0254.687] WbemDefPath:IUnknown:Release (This=0x69ee0d0) returned 0x2
	[0254.688] WbemDefPath:IWbemPath:SetText (This=0x69ee0d0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4208\"") returned 0x0
	[0254.688] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.688] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.688] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.688] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.688] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.688] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.688] IWbemClassObject:Get (in: This=0x69f04d8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbe4d8*=0, plFlavor=0x2bbe4dc*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winscp.exe", varVal2=0x0), pType=0x2bbe4d8*=8, plFlavor=0x2bbe4dc*=0) returned 0x0
	[0254.688] SysStringByteLen (bstr="winscp.exe") returned 0x14
	[0254.688] SysStringByteLen (bstr="winscp.exe") returned 0x14
	[0254.688] IWbemClassObject:Get (in: This=0x69f04d8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbe4d8*=8, plFlavor=0x2bbe4dc*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="winscp.exe", varVal2=0x0), pType=0x2bbe4d8*=8, plFlavor=0x2bbe4dc*=0) returned 0x0
	[0254.688] SysStringByteLen (bstr="winscp.exe") returned 0x14
	[0254.688] SysStringByteLen (bstr="winscp.exe") returned 0x14
	[0254.688] CoTaskMemAlloc (cb=0x4) returned 0x69b9828
	[0254.688] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9828, puReturned=0x2b9e144 | out: apObjects=0x69b9828*=0x69f0670, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.689] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f0670) returned 0x0
	[0254.689] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.689] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.689] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.689] IUnknown:AddRef (This=0x69f0670) returned 0x3
	[0254.690] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.690] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.690] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f0674) returned 0x0
	[0254.690] IMarshal:GetUnmarshalClass (in: This=0x69f0674, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.690] IUnknown:Release (This=0x69f0674) returned 0x3
	[0254.690] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.690] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.690] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.690] IUnknown:Release (This=0x69f0670) returned 0x2
	[0254.690] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.690] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.690] IUnknown:QueryInterface (in: This=0x69f0670, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f0670) returned 0x0
	[0254.690] IUnknown:AddRef (This=0x69f0670) returned 0x4
	[0254.690] IUnknown:Release (This=0x69f0670) returned 0x3
	[0254.690] IUnknown:Release (This=0x69f0670) returned 0x2
	[0254.690] CoTaskMemFree (pv=0x69b9828) 
	[0254.690] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.690] IUnknown:AddRef (This=0x69f0670) returned 0x3
	[0254.690] IWbemClassObject:Get (in: This=0x69f0670, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.691] IWbemClassObject:Get (in: This=0x69f0670, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4220\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.691] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4220\"") returned 0x5e
	[0254.691] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4220\"") returned 0x5e
	[0254.691] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.691] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.691] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.691] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.692] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9828) returned 0x0
	[0254.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9828, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.692] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9828, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee5a0) returned 0x0
	[0254.692] WbemDefPath:IUnknown:Release (This=0x69b9828) returned 0x0
	[0254.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee5a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee5a0) returned 0x0
	[0254.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee5a0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee5a0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.692] WbemDefPath:IUnknown:AddRef (This=0x69ee5a0) returned 0x3
	[0254.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee5a0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee5a0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee5a0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4258) returned 0x0
	[0254.692] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4258, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.693] WbemDefPath:IUnknown:Release (This=0x69f4258) returned 0x3
	[0254.693] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.693] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee5a0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.693] WbemDefPath:IUnknown:Release (This=0x69ee5a0) returned 0x2
	[0254.693] WbemDefPath:IUnknown:Release (This=0x69ee5a0) returned 0x1
	[0254.693] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.693] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee5a0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee5a0) returned 0x0
	[0254.693] WbemDefPath:IUnknown:AddRef (This=0x69ee5a0) returned 0x3
	[0254.693] WbemDefPath:IUnknown:Release (This=0x69ee5a0) returned 0x2
	[0254.693] WbemDefPath:IWbemPath:SetText (This=0x69ee5a0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4220\"") returned 0x0
	[0254.693] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.693] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.693] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.693] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.693] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.693] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.694] IWbemClassObject:Get (in: This=0x69f0670, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbed64*=0, plFlavor=0x2bbed68*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="yahoomessenger.exe", varVal2=0x0), pType=0x2bbed64*=8, plFlavor=0x2bbed68*=0) returned 0x0
	[0254.694] SysStringByteLen (bstr="yahoomessenger.exe") returned 0x24
	[0254.694] SysStringByteLen (bstr="yahoomessenger.exe") returned 0x24
	[0254.694] IWbemClassObject:Get (in: This=0x69f0670, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbed64*=8, plFlavor=0x2bbed68*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="yahoomessenger.exe", varVal2=0x0), pType=0x2bbed64*=8, plFlavor=0x2bbed68*=0) returned 0x0
	[0254.694] SysStringByteLen (bstr="yahoomessenger.exe") returned 0x24
	[0254.694] SysStringByteLen (bstr="yahoomessenger.exe") returned 0x24
	[0254.694] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0254.694] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x69f0cd0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.695] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69f0cd0) returned 0x0
	[0254.696] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.696] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.696] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.696] IUnknown:AddRef (This=0x69f0cd0) returned 0x3
	[0254.696] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.696] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.696] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69f0cd4) returned 0x0
	[0254.696] IMarshal:GetUnmarshalClass (in: This=0x69f0cd4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.696] IUnknown:Release (This=0x69f0cd4) returned 0x3
	[0254.696] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.696] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.696] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.696] IUnknown:Release (This=0x69f0cd0) returned 0x2
	[0254.697] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.697] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.697] IUnknown:QueryInterface (in: This=0x69f0cd0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69f0cd0) returned 0x0
	[0254.697] IUnknown:AddRef (This=0x69f0cd0) returned 0x4
	[0254.697] IUnknown:Release (This=0x69f0cd0) returned 0x3
	[0254.697] IUnknown:Release (This=0x69f0cd0) returned 0x2
	[0254.697] CoTaskMemFree (pv=0x69b98c8) 
	[0254.736] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.736] IUnknown:AddRef (This=0x69f0cd0) returned 0x3
	[0254.737] IWbemClassObject:Get (in: This=0x69f0cd0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.737] IWbemClassObject:Get (in: This=0x69f0cd0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4240\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.737] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4240\"") returned 0x5e
	[0254.737] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4240\"") returned 0x5e
	[0254.737] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.737] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.737] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.737] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.738] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0254.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.738] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee140) returned 0x0
	[0254.738] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0254.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee140, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee140) returned 0x0
	[0254.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee140, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee140, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.739] WbemDefPath:IUnknown:AddRef (This=0x69ee140) returned 0x3
	[0254.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee140, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee140, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee140, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f44f8) returned 0x0
	[0254.739] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f44f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.739] WbemDefPath:IUnknown:Release (This=0x69f44f8) returned 0x3
	[0254.739] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.739] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee140, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.739] WbemDefPath:IUnknown:Release (This=0x69ee140) returned 0x2
	[0254.739] WbemDefPath:IUnknown:Release (This=0x69ee140) returned 0x1
	[0254.739] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.739] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee140, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee140) returned 0x0
	[0254.740] WbemDefPath:IUnknown:AddRef (This=0x69ee140) returned 0x3
	[0254.740] WbemDefPath:IUnknown:Release (This=0x69ee140) returned 0x2
	[0254.740] WbemDefPath:IWbemPath:SetText (This=0x69ee140, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4240\"") returned 0x0
	[0254.740] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.740] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.740] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.740] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.740] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.740] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.740] IWbemClassObject:Get (in: This=0x69f0cd0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbf610*=0, plFlavor=0x2bbf614*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="active-charge.exe", varVal2=0x0), pType=0x2bbf610*=8, plFlavor=0x2bbf614*=0) returned 0x0
	[0254.740] SysStringByteLen (bstr="active-charge.exe") returned 0x22
	[0254.740] SysStringByteLen (bstr="active-charge.exe") returned 0x22
	[0254.740] IWbemClassObject:Get (in: This=0x69f0cd0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbf610*=8, plFlavor=0x2bbf614*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="active-charge.exe", varVal2=0x0), pType=0x2bbf610*=8, plFlavor=0x2bbf614*=0) returned 0x0
	[0254.740] SysStringByteLen (bstr="active-charge.exe") returned 0x22
	[0254.740] SysStringByteLen (bstr="active-charge.exe") returned 0x22
	[0254.740] CoTaskMemAlloc (cb=0x4) returned 0x69b97b8
	[0254.740] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97b8, puReturned=0x2b9e144 | out: apObjects=0x69b97b8*=0x69ef350, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.741] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69ef350) returned 0x0
	[0254.741] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.741] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.741] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.742] IUnknown:AddRef (This=0x69ef350) returned 0x3
	[0254.742] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.742] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.742] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69ef354) returned 0x0
	[0254.742] IMarshal:GetUnmarshalClass (in: This=0x69ef354, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.742] IUnknown:Release (This=0x69ef354) returned 0x3
	[0254.742] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.742] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.742] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.742] IUnknown:Release (This=0x69ef350) returned 0x2
	[0254.742] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.742] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.742] IUnknown:QueryInterface (in: This=0x69ef350, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69ef350) returned 0x0
	[0254.742] IUnknown:AddRef (This=0x69ef350) returned 0x4
	[0254.742] IUnknown:Release (This=0x69ef350) returned 0x3
	[0254.742] IUnknown:Release (This=0x69ef350) returned 0x2
	[0254.742] CoTaskMemFree (pv=0x69b97b8) 
	[0254.742] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.742] IUnknown:AddRef (This=0x69ef350) returned 0x3
	[0254.743] IWbemClassObject:Get (in: This=0x69ef350, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.743] IWbemClassObject:Get (in: This=0x69ef350, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4264\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.743] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4264\"") returned 0x5e
	[0254.743] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4264\"") returned 0x5e
	[0254.743] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.743] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.743] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.743] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.744] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0254.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.744] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee290) returned 0x0
	[0254.744] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0254.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee290, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee290) returned 0x0
	[0254.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee290, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee290, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.745] WbemDefPath:IUnknown:AddRef (This=0x69ee290) returned 0x3
	[0254.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee290, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee290, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee290, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4858) returned 0x0
	[0254.745] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4858, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.745] WbemDefPath:IUnknown:Release (This=0x69f4858) returned 0x3
	[0254.745] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.745] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee290, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.745] WbemDefPath:IUnknown:Release (This=0x69ee290) returned 0x2
	[0254.745] WbemDefPath:IUnknown:Release (This=0x69ee290) returned 0x1
	[0254.745] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.745] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee290, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee290) returned 0x0
	[0254.745] WbemDefPath:IUnknown:AddRef (This=0x69ee290) returned 0x3
	[0254.745] WbemDefPath:IUnknown:Release (This=0x69ee290) returned 0x2
	[0254.745] WbemDefPath:IWbemPath:SetText (This=0x69ee290, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4264\"") returned 0x0
	[0254.745] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.745] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.745] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.745] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.745] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.746] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.746] IWbemClassObject:Get (in: This=0x69ef350, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbfeb4*=0, plFlavor=0x2bbfeb8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="accupos.exe", varVal2=0x0), pType=0x2bbfeb4*=8, plFlavor=0x2bbfeb8*=0) returned 0x0
	[0254.746] SysStringByteLen (bstr="accupos.exe") returned 0x16
	[0254.746] SysStringByteLen (bstr="accupos.exe") returned 0x16
	[0254.746] IWbemClassObject:Get (in: This=0x69ef350, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bbfeb4*=8, plFlavor=0x2bbfeb8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="accupos.exe", varVal2=0x0), pType=0x2bbfeb4*=8, plFlavor=0x2bbfeb8*=0) returned 0x0
	[0254.746] SysStringByteLen (bstr="accupos.exe") returned 0x16
	[0254.746] SysStringByteLen (bstr="accupos.exe") returned 0x16
	[0254.746] CoTaskMemAlloc (cb=0x4) returned 0x69b97d8
	[0254.746] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97d8, puReturned=0x2b9e144 | out: apObjects=0x69b97d8*=0x69fa0a0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.748] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fa0a0) returned 0x0
	[0254.748] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.748] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.748] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.748] IUnknown:AddRef (This=0x69fa0a0) returned 0x3
	[0254.748] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.748] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.748] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fa0a4) returned 0x0
	[0254.748] IMarshal:GetUnmarshalClass (in: This=0x69fa0a4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.748] IUnknown:Release (This=0x69fa0a4) returned 0x3
	[0254.749] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.749] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.749] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.749] IUnknown:Release (This=0x69fa0a0) returned 0x2
	[0254.749] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.749] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.749] IUnknown:QueryInterface (in: This=0x69fa0a0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fa0a0) returned 0x0
	[0254.749] IUnknown:AddRef (This=0x69fa0a0) returned 0x4
	[0254.749] IUnknown:Release (This=0x69fa0a0) returned 0x3
	[0254.749] IUnknown:Release (This=0x69fa0a0) returned 0x2
	[0254.749] CoTaskMemFree (pv=0x69b97d8) 
	[0254.749] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.749] IUnknown:AddRef (This=0x69fa0a0) returned 0x3
	[0254.749] IWbemClassObject:Get (in: This=0x69fa0a0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.749] IWbemClassObject:Get (in: This=0x69fa0a0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.749] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"") returned 0x5e
	[0254.750] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"") returned 0x5e
	[0254.750] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.750] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.750] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.750] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.750] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0254.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.751] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee300) returned 0x0
	[0254.751] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0254.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee300, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee300) returned 0x0
	[0254.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee300, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee300, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.751] WbemDefPath:IUnknown:AddRef (This=0x69ee300) returned 0x3
	[0254.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee300, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee300, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee300, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4780) returned 0x0
	[0254.751] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4780, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.752] WbemDefPath:IUnknown:Release (This=0x69f4780) returned 0x3
	[0254.752] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.752] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee300, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.752] WbemDefPath:IUnknown:Release (This=0x69ee300) returned 0x2
	[0254.752] WbemDefPath:IUnknown:Release (This=0x69ee300) returned 0x1
	[0254.752] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.752] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee300, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee300) returned 0x0
	[0254.752] WbemDefPath:IUnknown:AddRef (This=0x69ee300) returned 0x3
	[0254.752] WbemDefPath:IUnknown:Release (This=0x69ee300) returned 0x2
	[0254.752] WbemDefPath:IWbemPath:SetText (This=0x69ee300, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4276\"") returned 0x0
	[0254.752] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.752] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.752] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.752] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.752] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.752] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.752] IWbemClassObject:Get (in: This=0x69fa0a0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc0740*=0, plFlavor=0x2bc0744*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="afr38.exe", varVal2=0x0), pType=0x2bc0740*=8, plFlavor=0x2bc0744*=0) returned 0x0
	[0254.752] SysStringByteLen (bstr="afr38.exe") returned 0x12
	[0254.753] SysStringByteLen (bstr="afr38.exe") returned 0x12
	[0254.790] IWbemClassObject:Get (in: This=0x69fa0a0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc0740*=8, plFlavor=0x2bc0744*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="afr38.exe", varVal2=0x0), pType=0x2bc0740*=8, plFlavor=0x2bc0744*=0) returned 0x0
	[0254.790] SysStringByteLen (bstr="afr38.exe") returned 0x12
	[0254.790] SysStringByteLen (bstr="afr38.exe") returned 0x12
	[0254.791] CoTaskMemAlloc (cb=0x4) returned 0x69b9848
	[0254.791] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9848, puReturned=0x2b9e144 | out: apObjects=0x69b9848*=0x69faa30, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.792] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69faa30) returned 0x0
	[0254.792] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.792] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.792] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.792] IUnknown:AddRef (This=0x69faa30) returned 0x3
	[0254.792] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.793] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.793] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69faa34) returned 0x0
	[0254.793] IMarshal:GetUnmarshalClass (in: This=0x69faa34, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.793] IUnknown:Release (This=0x69faa34) returned 0x3
	[0254.793] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.793] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.793] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.793] IUnknown:Release (This=0x69faa30) returned 0x2
	[0254.793] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.793] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.793] IUnknown:QueryInterface (in: This=0x69faa30, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69faa30) returned 0x0
	[0254.793] IUnknown:AddRef (This=0x69faa30) returned 0x4
	[0254.793] IUnknown:Release (This=0x69faa30) returned 0x3
	[0254.793] IUnknown:Release (This=0x69faa30) returned 0x2
	[0254.793] CoTaskMemFree (pv=0x69b9848) 
	[0254.793] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.794] IUnknown:AddRef (This=0x69faa30) returned 0x3
	[0254.794] IWbemClassObject:Get (in: This=0x69faa30, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.794] IWbemClassObject:Get (in: This=0x69faa30, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4288\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.794] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4288\"") returned 0x5e
	[0254.794] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4288\"") returned 0x5e
	[0254.794] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.794] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.794] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.794] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.795] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0254.796] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.796] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eea70) returned 0x0
	[0254.796] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0254.796] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea70, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eea70) returned 0x0
	[0254.796] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea70, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.796] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea70, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.796] WbemDefPath:IUnknown:AddRef (This=0x69eea70) returned 0x3
	[0254.796] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea70, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.796] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea70, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.796] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea70, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4c18) returned 0x0
	[0254.796] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4c18, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.796] WbemDefPath:IUnknown:Release (This=0x69f4c18) returned 0x3
	[0254.796] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.797] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea70, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.797] WbemDefPath:IUnknown:Release (This=0x69eea70) returned 0x2
	[0254.797] WbemDefPath:IUnknown:Release (This=0x69eea70) returned 0x1
	[0254.797] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.797] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eea70, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eea70) returned 0x0
	[0254.797] WbemDefPath:IUnknown:AddRef (This=0x69eea70) returned 0x3
	[0254.797] WbemDefPath:IUnknown:Release (This=0x69eea70) returned 0x2
	[0254.797] WbemDefPath:IWbemPath:SetText (This=0x69eea70, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4288\"") returned 0x0
	[0254.797] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.797] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.797] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.797] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.797] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.797] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.798] IWbemClassObject:Get (in: This=0x69faa30, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc0fc4*=0, plFlavor=0x2bc0fc8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="aldelo.exe", varVal2=0x0), pType=0x2bc0fc4*=8, plFlavor=0x2bc0fc8*=0) returned 0x0
	[0254.798] SysStringByteLen (bstr="aldelo.exe") returned 0x14
	[0254.798] SysStringByteLen (bstr="aldelo.exe") returned 0x14
	[0254.798] IWbemClassObject:Get (in: This=0x69faa30, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc0fc4*=8, plFlavor=0x2bc0fc8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="aldelo.exe", varVal2=0x0), pType=0x2bc0fc4*=8, plFlavor=0x2bc0fc8*=0) returned 0x0
	[0254.798] SysStringByteLen (bstr="aldelo.exe") returned 0x14
	[0254.798] SysStringByteLen (bstr="aldelo.exe") returned 0x14
	[0254.798] CoTaskMemAlloc (cb=0x4) returned 0x69b97e8
	[0254.798] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97e8, puReturned=0x2b9e144 | out: apObjects=0x69b97e8*=0x69fbd50, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.799] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fbd50) returned 0x0
	[0254.799] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.799] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.799] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.800] IUnknown:AddRef (This=0x69fbd50) returned 0x3
	[0254.800] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.800] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.800] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fbd54) returned 0x0
	[0254.800] IMarshal:GetUnmarshalClass (in: This=0x69fbd54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.800] IUnknown:Release (This=0x69fbd54) returned 0x3
	[0254.800] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.800] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.800] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.801] IUnknown:Release (This=0x69fbd50) returned 0x2
	[0254.801] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.801] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.801] IUnknown:QueryInterface (in: This=0x69fbd50, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fbd50) returned 0x0
	[0254.801] IUnknown:AddRef (This=0x69fbd50) returned 0x4
	[0254.801] IUnknown:Release (This=0x69fbd50) returned 0x3
	[0254.801] IUnknown:Release (This=0x69fbd50) returned 0x2
	[0254.801] CoTaskMemFree (pv=0x69b97e8) 
	[0254.801] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.801] IUnknown:AddRef (This=0x69fbd50) returned 0x3
	[0254.801] IWbemClassObject:Get (in: This=0x69fbd50, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.801] IWbemClassObject:Get (in: This=0x69fbd50, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4300\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.801] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4300\"") returned 0x5e
	[0254.801] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4300\"") returned 0x5e
	[0254.801] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.802] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.802] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.802] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.803] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0254.803] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.803] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee4c0) returned 0x0
	[0254.803] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0254.803] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee4c0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee4c0) returned 0x0
	[0254.803] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee4c0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.804] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee4c0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.804] WbemDefPath:IUnknown:AddRef (This=0x69ee4c0) returned 0x3
	[0254.804] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee4c0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.804] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee4c0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.804] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee4c0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69f4b10) returned 0x0
	[0254.804] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69f4b10, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.804] WbemDefPath:IUnknown:Release (This=0x69f4b10) returned 0x3
	[0254.804] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.804] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.804] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee4c0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.804] WbemDefPath:IUnknown:Release (This=0x69ee4c0) returned 0x2
	[0254.804] WbemDefPath:IUnknown:Release (This=0x69ee4c0) returned 0x1
	[0254.804] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.804] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.805] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee4c0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee4c0) returned 0x0
	[0254.805] WbemDefPath:IUnknown:AddRef (This=0x69ee4c0) returned 0x3
	[0254.805] WbemDefPath:IUnknown:Release (This=0x69ee4c0) returned 0x2
	[0254.805] WbemDefPath:IWbemPath:SetText (This=0x69ee4c0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4300\"") returned 0x0
	[0254.843] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.843] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.844] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.844] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.844] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.844] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.844] IWbemClassObject:Get (in: This=0x69fbd50, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc1850*=0, plFlavor=0x2bc1854*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ccv_server.exe", varVal2=0x0), pType=0x2bc1850*=8, plFlavor=0x2bc1854*=0) returned 0x0
	[0254.844] SysStringByteLen (bstr="ccv_server.exe") returned 0x1c
	[0254.844] SysStringByteLen (bstr="ccv_server.exe") returned 0x1c
	[0254.844] IWbemClassObject:Get (in: This=0x69fbd50, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc1850*=8, plFlavor=0x2bc1854*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ccv_server.exe", varVal2=0x0), pType=0x2bc1850*=8, plFlavor=0x2bc1854*=0) returned 0x0
	[0254.844] SysStringByteLen (bstr="ccv_server.exe") returned 0x1c
	[0254.844] SysStringByteLen (bstr="ccv_server.exe") returned 0x1c
	[0254.845] CoTaskMemAlloc (cb=0x4) returned 0x69b98a8
	[0254.845] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98a8, puReturned=0x2b9e144 | out: apObjects=0x69b98a8*=0x69fbee8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0254.848] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fbee8) returned 0x0
	[0254.849] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0254.849] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0254.849] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0254.849] IUnknown:AddRef (This=0x69fbee8) returned 0x3
	[0254.849] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0254.849] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0254.849] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fbeec) returned 0x0
	[0254.849] IMarshal:GetUnmarshalClass (in: This=0x69fbeec, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0254.849] IUnknown:Release (This=0x69fbeec) returned 0x3
	[0254.849] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0254.849] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0254.850] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0254.850] IUnknown:Release (This=0x69fbee8) returned 0x2
	[0254.850] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0254.850] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0254.850] IUnknown:QueryInterface (in: This=0x69fbee8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fbee8) returned 0x0
	[0254.850] IUnknown:AddRef (This=0x69fbee8) returned 0x4
	[0254.850] IUnknown:Release (This=0x69fbee8) returned 0x3
	[0254.850] IUnknown:Release (This=0x69fbee8) returned 0x2
	[0254.850] CoTaskMemFree (pv=0x69b98a8) 
	[0254.850] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0254.850] IUnknown:AddRef (This=0x69fbee8) returned 0x3
	[0254.850] IWbemClassObject:Get (in: This=0x69fbee8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0254.850] IWbemClassObject:Get (in: This=0x69fbee8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4312\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0254.851] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4312\"") returned 0x5e
	[0254.851] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4312\"") returned 0x5e
	[0254.851] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0254.851] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0254.851] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0254.851] IUnknown:Release (This=0x66b664) returned 0x1
	[0254.852] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0254.852] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0254.852] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee450) returned 0x0
	[0254.853] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0254.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee450, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee450) returned 0x0
	[0254.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee450, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0254.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee450, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0254.853] WbemDefPath:IUnknown:AddRef (This=0x69ee450) returned 0x3
	[0254.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee450, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0254.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee450, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0254.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee450, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fd1c8) returned 0x0
	[0254.853] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fd1c8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0254.853] WbemDefPath:IUnknown:Release (This=0x69fd1c8) returned 0x3
	[0254.853] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0254.853] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0254.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee450, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0254.854] WbemDefPath:IUnknown:Release (This=0x69ee450) returned 0x2
	[0254.854] WbemDefPath:IUnknown:Release (This=0x69ee450) returned 0x1
	[0254.855] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0254.855] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0254.855] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee450, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee450) returned 0x0
	[0254.855] WbemDefPath:IUnknown:AddRef (This=0x69ee450) returned 0x3
	[0254.855] WbemDefPath:IUnknown:Release (This=0x69ee450) returned 0x2
	[0254.855] WbemDefPath:IWbemPath:SetText (This=0x69ee450, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4312\"") returned 0x0
	[0254.855] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0254.855] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0254.856] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.857] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0254.857] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0254.857] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0254.857] IWbemClassObject:Get (in: This=0x69fbee8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc20ec*=0, plFlavor=0x2bc20f0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="centralcreditcard.exe", varVal2=0x0), pType=0x2bc20ec*=8, plFlavor=0x2bc20f0*=0) returned 0x0
	[0254.857] SysStringByteLen (bstr="centralcreditcard.exe") returned 0x2a
	[0254.857] SysStringByteLen (bstr="centralcreditcard.exe") returned 0x2a
	[0254.857] IWbemClassObject:Get (in: This=0x69fbee8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc20ec*=8, plFlavor=0x2bc20f0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="centralcreditcard.exe", varVal2=0x0), pType=0x2bc20ec*=8, plFlavor=0x2bc20f0*=0) returned 0x0
	[0254.857] SysStringByteLen (bstr="centralcreditcard.exe") returned 0x2a
	[0254.857] SysStringByteLen (bstr="centralcreditcard.exe") returned 0x2a
	[0254.857] CoTaskMemAlloc (cb=0x4) returned 0x69b97b8
	[0254.857] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97b8, puReturned=0x2b9e144 | out: apObjects=0x69b97b8*=0x69fabc8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.011] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fabc8) returned 0x0
	[0255.011] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.011] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.011] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.012] IUnknown:AddRef (This=0x69fabc8) returned 0x3
	[0255.012] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.012] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.012] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fabcc) returned 0x0
	[0255.012] IMarshal:GetUnmarshalClass (in: This=0x69fabcc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.012] IUnknown:Release (This=0x69fabcc) returned 0x3
	[0255.012] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.012] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.012] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.012] IUnknown:Release (This=0x69fabc8) returned 0x2
	[0255.012] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.012] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.012] IUnknown:QueryInterface (in: This=0x69fabc8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fabc8) returned 0x0
	[0255.012] IUnknown:AddRef (This=0x69fabc8) returned 0x4
	[0255.012] IUnknown:Release (This=0x69fabc8) returned 0x3
	[0255.012] IUnknown:Release (This=0x69fabc8) returned 0x2
	[0255.012] CoTaskMemFree (pv=0x69b97b8) 
	[0255.012] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.012] IUnknown:AddRef (This=0x69fabc8) returned 0x3
	[0255.013] IWbemClassObject:Get (in: This=0x69fabc8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.013] IWbemClassObject:Get (in: This=0x69fabc8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4328\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.013] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4328\"") returned 0x5e
	[0255.013] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4328\"") returned 0x5e
	[0255.013] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.013] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.013] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.013] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.014] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98a8) returned 0x0
	[0255.040] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.040] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee680) returned 0x0
	[0255.040] WbemDefPath:IUnknown:Release (This=0x69b98a8) returned 0x0
	[0255.040] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee680, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee680) returned 0x0
	[0255.040] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee680, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.040] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee680, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.041] WbemDefPath:IUnknown:AddRef (This=0x69ee680) returned 0x3
	[0255.041] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee680, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.041] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee680, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.041] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee680, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fd150) returned 0x0
	[0255.041] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fd150, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.041] WbemDefPath:IUnknown:Release (This=0x69fd150) returned 0x3
	[0255.041] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.041] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.041] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee680, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.041] WbemDefPath:IUnknown:Release (This=0x69ee680) returned 0x2
	[0255.041] WbemDefPath:IUnknown:Release (This=0x69ee680) returned 0x1
	[0255.041] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.041] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.041] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee680, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee680) returned 0x0
	[0255.042] WbemDefPath:IUnknown:AddRef (This=0x69ee680) returned 0x3
	[0255.042] WbemDefPath:IUnknown:Release (This=0x69ee680) returned 0x2
	[0255.042] WbemDefPath:IWbemPath:SetText (This=0x69ee680, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4328\"") returned 0x0
	[0255.042] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.042] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.042] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.042] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.042] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.042] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.042] IWbemClassObject:Get (in: This=0x69fabc8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc29a0*=0, plFlavor=0x2bc29a4*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="creditservice.exe", varVal2=0x0), pType=0x2bc29a0*=8, plFlavor=0x2bc29a4*=0) returned 0x0
	[0255.042] SysStringByteLen (bstr="creditservice.exe") returned 0x22
	[0255.042] SysStringByteLen (bstr="creditservice.exe") returned 0x22
	[0255.042] IWbemClassObject:Get (in: This=0x69fabc8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc29a0*=8, plFlavor=0x2bc29a4*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="creditservice.exe", varVal2=0x0), pType=0x2bc29a0*=8, plFlavor=0x2bc29a4*=0) returned 0x0
	[0255.043] SysStringByteLen (bstr="creditservice.exe") returned 0x22
	[0255.043] SysStringByteLen (bstr="creditservice.exe") returned 0x22
	[0255.043] CoTaskMemAlloc (cb=0x4) returned 0x69b97e8
	[0255.043] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97e8, puReturned=0x2b9e144 | out: apObjects=0x69b97e8*=0x69fa898, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.044] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fa898) returned 0x0
	[0255.044] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.044] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.044] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.044] IUnknown:AddRef (This=0x69fa898) returned 0x3
	[0255.044] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.044] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.044] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fa89c) returned 0x0
	[0255.045] IMarshal:GetUnmarshalClass (in: This=0x69fa89c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.045] IUnknown:Release (This=0x69fa89c) returned 0x3
	[0255.045] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.045] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.045] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.045] IUnknown:Release (This=0x69fa898) returned 0x2
	[0255.045] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.045] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.045] IUnknown:QueryInterface (in: This=0x69fa898, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fa898) returned 0x0
	[0255.045] IUnknown:AddRef (This=0x69fa898) returned 0x4
	[0255.045] IUnknown:Release (This=0x69fa898) returned 0x3
	[0255.045] IUnknown:Release (This=0x69fa898) returned 0x2
	[0255.045] CoTaskMemFree (pv=0x69b97e8) 
	[0255.045] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.045] IUnknown:AddRef (This=0x69fa898) returned 0x3
	[0255.045] IWbemClassObject:Get (in: This=0x69fa898, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.046] IWbemClassObject:Get (in: This=0x69fa898, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4348\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.046] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4348\"") returned 0x5e
	[0255.046] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4348\"") returned 0x5e
	[0255.046] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.046] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.046] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.046] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.047] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97d8) returned 0x0
	[0255.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97d8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.048] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97d8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eeae0) returned 0x0
	[0255.048] WbemDefPath:IUnknown:Release (This=0x69b97d8) returned 0x0
	[0255.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeae0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eeae0) returned 0x0
	[0255.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeae0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeae0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.048] WbemDefPath:IUnknown:AddRef (This=0x69eeae0) returned 0x3
	[0255.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeae0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeae0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeae0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fd288) returned 0x0
	[0255.048] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fd288, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.048] WbemDefPath:IUnknown:Release (This=0x69fd288) returned 0x3
	[0255.049] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.049] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.049] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeae0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.049] WbemDefPath:IUnknown:Release (This=0x69eeae0) returned 0x2
	[0255.049] WbemDefPath:IUnknown:Release (This=0x69eeae0) returned 0x1
	[0255.049] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.049] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.049] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eeae0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eeae0) returned 0x0
	[0255.049] WbemDefPath:IUnknown:AddRef (This=0x69eeae0) returned 0x3
	[0255.049] WbemDefPath:IUnknown:Release (This=0x69eeae0) returned 0x2
	[0255.049] WbemDefPath:IWbemPath:SetText (This=0x69eeae0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4348\"") returned 0x0
	[0255.050] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.050] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.050] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.050] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.050] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.050] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.050] IWbemClassObject:Get (in: This=0x69fa898, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc3244*=0, plFlavor=0x2bc3248*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="edcsvr.exe", varVal2=0x0), pType=0x2bc3244*=8, plFlavor=0x2bc3248*=0) returned 0x0
	[0255.050] SysStringByteLen (bstr="edcsvr.exe") returned 0x14
	[0255.050] SysStringByteLen (bstr="edcsvr.exe") returned 0x14
	[0255.050] IWbemClassObject:Get (in: This=0x69fa898, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc3244*=8, plFlavor=0x2bc3248*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="edcsvr.exe", varVal2=0x0), pType=0x2bc3244*=8, plFlavor=0x2bc3248*=0) returned 0x0
	[0255.050] SysStringByteLen (bstr="edcsvr.exe") returned 0x14
	[0255.050] SysStringByteLen (bstr="edcsvr.exe") returned 0x14
	[0255.050] CoTaskMemAlloc (cb=0x4) returned 0x69b97d8
	[0255.051] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97d8, puReturned=0x2b9e144 | out: apObjects=0x69b97d8*=0x69fad60, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.318] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fad60) returned 0x0
	[0255.318] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.318] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.318] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.318] IUnknown:AddRef (This=0x69fad60) returned 0x3
	[0255.318] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.318] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.318] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fad64) returned 0x0
	[0255.318] IMarshal:GetUnmarshalClass (in: This=0x69fad64, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.318] IUnknown:Release (This=0x69fad64) returned 0x3
	[0255.318] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.318] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.318] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.319] IUnknown:Release (This=0x69fad60) returned 0x2
	[0255.319] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.319] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.319] IUnknown:QueryInterface (in: This=0x69fad60, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fad60) returned 0x0
	[0255.319] IUnknown:AddRef (This=0x69fad60) returned 0x4
	[0255.319] IUnknown:Release (This=0x69fad60) returned 0x3
	[0255.319] IUnknown:Release (This=0x69fad60) returned 0x2
	[0255.319] CoTaskMemFree (pv=0x69b97d8) 
	[0255.319] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.319] IUnknown:AddRef (This=0x69fad60) returned 0x3
	[0255.319] IWbemClassObject:Get (in: This=0x69fad60, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.319] IWbemClassObject:Get (in: This=0x69fad60, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4360\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.319] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4360\"") returned 0x5e
	[0255.319] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4360\"") returned 0x5e
	[0255.319] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.320] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.320] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.320] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.323] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9848) returned 0x0
	[0255.323] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9848, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.323] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9848, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee6f0) returned 0x0
	[0255.323] WbemDefPath:IUnknown:Release (This=0x69b9848) returned 0x0
	[0255.323] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee6f0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee6f0) returned 0x0
	[0255.324] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee6f0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.324] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee6f0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.324] WbemDefPath:IUnknown:AddRef (This=0x69ee6f0) returned 0x3
	[0255.324] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee6f0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.324] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee6f0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.324] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee6f0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fd6f0) returned 0x0
	[0255.324] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fd6f0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.324] WbemDefPath:IUnknown:Release (This=0x69fd6f0) returned 0x3
	[0255.324] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.324] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.324] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee6f0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.324] WbemDefPath:IUnknown:Release (This=0x69ee6f0) returned 0x2
	[0255.324] WbemDefPath:IUnknown:Release (This=0x69ee6f0) returned 0x1
	[0255.324] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.324] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.324] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee6f0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee6f0) returned 0x0
	[0255.325] WbemDefPath:IUnknown:AddRef (This=0x69ee6f0) returned 0x3
	[0255.325] WbemDefPath:IUnknown:Release (This=0x69ee6f0) returned 0x2
	[0255.325] WbemDefPath:IWbemPath:SetText (This=0x69ee6f0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4360\"") returned 0x0
	[0255.325] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.325] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.325] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.325] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.325] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.325] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.325] IWbemClassObject:Get (in: This=0x69fad60, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc3ad0*=0, plFlavor=0x2bc3ad4*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="fpos.exe", varVal2=0x0), pType=0x2bc3ad0*=8, plFlavor=0x2bc3ad4*=0) returned 0x0
	[0255.325] SysStringByteLen (bstr="fpos.exe") returned 0x10
	[0255.325] SysStringByteLen (bstr="fpos.exe") returned 0x10
	[0255.325] IWbemClassObject:Get (in: This=0x69fad60, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc3ad0*=8, plFlavor=0x2bc3ad4*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="fpos.exe", varVal2=0x0), pType=0x2bc3ad0*=8, plFlavor=0x2bc3ad4*=0) returned 0x0
	[0255.325] SysStringByteLen (bstr="fpos.exe") returned 0x10
	[0255.325] SysStringByteLen (bstr="fpos.exe") returned 0x10
	[0255.325] CoTaskMemAlloc (cb=0x4) returned 0x69b9868
	[0255.326] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9868, puReturned=0x2b9e144 | out: apObjects=0x69b9868*=0x69fa238, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.329] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fa238) returned 0x0
	[0255.329] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.329] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.329] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.330] IUnknown:AddRef (This=0x69fa238) returned 0x3
	[0255.330] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.330] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.330] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fa23c) returned 0x0
	[0255.330] IMarshal:GetUnmarshalClass (in: This=0x69fa23c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.330] IUnknown:Release (This=0x69fa23c) returned 0x3
	[0255.330] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.330] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.330] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.330] IUnknown:Release (This=0x69fa238) returned 0x2
	[0255.331] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.331] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.331] IUnknown:QueryInterface (in: This=0x69fa238, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fa238) returned 0x0
	[0255.331] IUnknown:AddRef (This=0x69fa238) returned 0x4
	[0255.331] IUnknown:Release (This=0x69fa238) returned 0x3
	[0255.331] IUnknown:Release (This=0x69fa238) returned 0x2
	[0255.331] CoTaskMemFree (pv=0x69b9868) 
	[0255.331] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.331] IUnknown:AddRef (This=0x69fa238) returned 0x3
	[0255.333] IWbemClassObject:Get (in: This=0x69fa238, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.333] IWbemClassObject:Get (in: This=0x69fa238, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4368\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.333] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4368\"") returned 0x5e
	[0255.333] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4368\"") returned 0x5e
	[0255.333] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.334] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.334] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.334] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.335] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0255.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.335] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee840) returned 0x0
	[0255.335] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0255.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee840, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee840) returned 0x0
	[0255.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee840, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.335] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee840, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.336] WbemDefPath:IUnknown:AddRef (This=0x69ee840) returned 0x3
	[0255.336] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee840, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.336] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee840, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.336] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee840, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fd660) returned 0x0
	[0255.336] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fd660, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.336] WbemDefPath:IUnknown:Release (This=0x69fd660) returned 0x3
	[0255.336] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.336] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee840, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.336] WbemDefPath:IUnknown:Release (This=0x69ee840) returned 0x2
	[0255.336] WbemDefPath:IUnknown:Release (This=0x69ee840) returned 0x1
	[0255.336] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee840, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee840) returned 0x0
	[0255.336] WbemDefPath:IUnknown:AddRef (This=0x69ee840) returned 0x3
	[0255.336] WbemDefPath:IUnknown:Release (This=0x69ee840) returned 0x2
	[0255.336] WbemDefPath:IWbemPath:SetText (This=0x69ee840, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4368\"") returned 0x0
	[0255.336] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.336] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.336] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.337] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.337] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.337] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.337] IWbemClassObject:Get (in: This=0x69fa238, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc4354*=0, plFlavor=0x2bc4358*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="isspos.exe", varVal2=0x0), pType=0x2bc4354*=8, plFlavor=0x2bc4358*=0) returned 0x0
	[0255.337] SysStringByteLen (bstr="isspos.exe") returned 0x14
	[0255.337] SysStringByteLen (bstr="isspos.exe") returned 0x14
	[0255.337] IWbemClassObject:Get (in: This=0x69fa238, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc4354*=8, plFlavor=0x2bc4358*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="isspos.exe", varVal2=0x0), pType=0x2bc4354*=8, plFlavor=0x2bc4358*=0) returned 0x0
	[0255.337] SysStringByteLen (bstr="isspos.exe") returned 0x14
	[0255.337] SysStringByteLen (bstr="isspos.exe") returned 0x14
	[0255.337] CoTaskMemAlloc (cb=0x4) returned 0x69b97b8
	[0255.337] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97b8, puReturned=0x2b9e144 | out: apObjects=0x69b97b8*=0x69fb3c0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.339] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fb3c0) returned 0x0
	[0255.339] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.339] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.339] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.339] IUnknown:AddRef (This=0x69fb3c0) returned 0x3
	[0255.339] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.339] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.339] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fb3c4) returned 0x0
	[0255.339] IMarshal:GetUnmarshalClass (in: This=0x69fb3c4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.339] IUnknown:Release (This=0x69fb3c4) returned 0x3
	[0255.340] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.340] IUnknown:Release (This=0x69fb3c0) returned 0x2
	[0255.340] IUnknown:QueryInterface (in: This=0x69fb3c0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fb3c0) returned 0x0
	[0255.340] IUnknown:AddRef (This=0x69fb3c0) returned 0x4
	[0255.340] IUnknown:Release (This=0x69fb3c0) returned 0x3
	[0255.340] IUnknown:Release (This=0x69fb3c0) returned 0x2
	[0255.340] CoTaskMemFree (pv=0x69b97b8) 
	[0255.340] IUnknown:AddRef (This=0x69fb3c0) returned 0x3
	[0255.340] IWbemClassObject:Get (in: This=0x69fb3c0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.340] IWbemClassObject:Get (in: This=0x69fb3c0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.340] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"") returned 0x5e
	[0255.340] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"") returned 0x5e
	[0255.340] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.340] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.340] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.340] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.341] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0255.341] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.341] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee7d0) returned 0x0
	[0255.342] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0255.342] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee7d0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee7d0) returned 0x0
	[0255.342] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee7d0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.342] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee7d0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.342] WbemDefPath:IUnknown:AddRef (This=0x69ee7d0) returned 0x3
	[0255.342] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee7d0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.342] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee7d0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.342] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee7d0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fd960) returned 0x0
	[0255.342] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fd960, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.342] WbemDefPath:IUnknown:Release (This=0x69fd960) returned 0x3
	[0255.342] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee7d0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.342] WbemDefPath:IUnknown:Release (This=0x69ee7d0) returned 0x2
	[0255.342] WbemDefPath:IUnknown:Release (This=0x69ee7d0) returned 0x1
	[0255.343] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee7d0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee7d0) returned 0x0
	[0255.343] WbemDefPath:IUnknown:AddRef (This=0x69ee7d0) returned 0x3
	[0255.343] WbemDefPath:IUnknown:Release (This=0x69ee7d0) returned 0x2
	[0255.343] WbemDefPath:IWbemPath:SetText (This=0x69ee7d0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4380\"") returned 0x0
	[0255.343] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.343] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.343] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.343] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.343] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.343] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.343] IWbemClassObject:Get (in: This=0x69fb3c0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc4be0*=0, plFlavor=0x2bc4be4*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="mxslipstream.exe", varVal2=0x0), pType=0x2bc4be0*=8, plFlavor=0x2bc4be4*=0) returned 0x0
	[0255.343] SysStringByteLen (bstr="mxslipstream.exe") returned 0x20
	[0255.343] SysStringByteLen (bstr="mxslipstream.exe") returned 0x20
	[0255.343] IWbemClassObject:Get (in: This=0x69fb3c0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc4be0*=8, plFlavor=0x2bc4be4*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="mxslipstream.exe", varVal2=0x0), pType=0x2bc4be0*=8, plFlavor=0x2bc4be4*=0) returned 0x0
	[0255.343] SysStringByteLen (bstr="mxslipstream.exe") returned 0x20
	[0255.343] SysStringByteLen (bstr="mxslipstream.exe") returned 0x20
	[0255.343] CoTaskMemAlloc (cb=0x4) returned 0x69b9828
	[0255.343] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9828, puReturned=0x2b9e144 | out: apObjects=0x69b9828*=0x69faef8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69faef8) returned 0x0
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.347] IUnknown:AddRef (This=0x69faef8) returned 0x3
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69faefc) returned 0x0
	[0255.347] IMarshal:GetUnmarshalClass (in: This=0x69faefc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.347] IUnknown:Release (This=0x69faefc) returned 0x3
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.347] IUnknown:Release (This=0x69faef8) returned 0x2
	[0255.347] IUnknown:QueryInterface (in: This=0x69faef8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69faef8) returned 0x0
	[0255.347] IUnknown:AddRef (This=0x69faef8) returned 0x4
	[0255.347] IUnknown:Release (This=0x69faef8) returned 0x3
	[0255.347] IUnknown:Release (This=0x69faef8) returned 0x2
	[0255.348] CoTaskMemFree (pv=0x69b9828) 
	[0255.348] IUnknown:AddRef (This=0x69faef8) returned 0x3
	[0255.348] IWbemClassObject:Get (in: This=0x69faef8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.348] IWbemClassObject:Get (in: This=0x69faef8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4400\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.348] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4400\"") returned 0x5e
	[0255.348] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4400\"") returned 0x5e
	[0255.348] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.348] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.348] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.348] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.349] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0255.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.349] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69ee920) returned 0x0
	[0255.349] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0255.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee920, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69ee920) returned 0x0
	[0255.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee920, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee920, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.349] WbemDefPath:IUnknown:AddRef (This=0x69ee920) returned 0x3
	[0255.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee920, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee920, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee920, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fd7f8) returned 0x0
	[0255.350] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fd7f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.350] WbemDefPath:IUnknown:Release (This=0x69fd7f8) returned 0x3
	[0255.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee920, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.350] WbemDefPath:IUnknown:Release (This=0x69ee920) returned 0x2
	[0255.350] WbemDefPath:IUnknown:Release (This=0x69ee920) returned 0x1
	[0255.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x69ee920, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69ee920) returned 0x0
	[0255.350] WbemDefPath:IUnknown:AddRef (This=0x69ee920) returned 0x3
	[0255.350] WbemDefPath:IUnknown:Release (This=0x69ee920) returned 0x2
	[0255.350] WbemDefPath:IWbemPath:SetText (This=0x69ee920, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4400\"") returned 0x0
	[0255.351] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.351] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.351] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.351] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.351] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.351] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.351] IWbemClassObject:Get (in: This=0x69faef8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc5484*=0, plFlavor=0x2bc5488*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="omnipos.exe", varVal2=0x0), pType=0x2bc5484*=8, plFlavor=0x2bc5488*=0) returned 0x0
	[0255.351] SysStringByteLen (bstr="omnipos.exe") returned 0x16
	[0255.351] SysStringByteLen (bstr="omnipos.exe") returned 0x16
	[0255.351] IWbemClassObject:Get (in: This=0x69faef8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc5484*=8, plFlavor=0x2bc5488*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="omnipos.exe", varVal2=0x0), pType=0x2bc5484*=8, plFlavor=0x2bc5488*=0) returned 0x0
	[0255.351] SysStringByteLen (bstr="omnipos.exe") returned 0x16
	[0255.351] SysStringByteLen (bstr="omnipos.exe") returned 0x16
	[0255.351] CoTaskMemAlloc (cb=0x4) returned 0x69b9738
	[0255.352] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9738, puReturned=0x2b9e144 | out: apObjects=0x69b9738*=0x69fbbb8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.357] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fbbb8) returned 0x0
	[0255.357] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.357] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.358] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.358] IUnknown:AddRef (This=0x69fbbb8) returned 0x3
	[0255.358] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.358] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.358] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fbbbc) returned 0x0
	[0255.358] IMarshal:GetUnmarshalClass (in: This=0x69fbbbc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.358] IUnknown:Release (This=0x69fbbbc) returned 0x3
	[0255.358] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.358] IUnknown:Release (This=0x69fbbb8) returned 0x2
	[0255.358] IUnknown:QueryInterface (in: This=0x69fbbb8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fbbb8) returned 0x0
	[0255.358] IUnknown:AddRef (This=0x69fbbb8) returned 0x4
	[0255.358] IUnknown:Release (This=0x69fbbb8) returned 0x3
	[0255.358] IUnknown:Release (This=0x69fbbb8) returned 0x2
	[0255.358] CoTaskMemFree (pv=0x69b9738) 
	[0255.358] IUnknown:AddRef (This=0x69fbbb8) returned 0x3
	[0255.358] IWbemClassObject:Get (in: This=0x69fbbb8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.359] IWbemClassObject:Get (in: This=0x69fbbb8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4408\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.359] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4408\"") returned 0x5e
	[0255.359] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4408\"") returned 0x5e
	[0255.359] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.359] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.359] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.359] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.360] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9748) returned 0x0
	[0255.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9748, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.360] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9748, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eee60) returned 0x0
	[0255.360] WbemDefPath:IUnknown:Release (This=0x69b9748) returned 0x0
	[0255.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eee60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eee60) returned 0x0
	[0255.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eee60, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eee60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.364] WbemDefPath:IUnknown:AddRef (This=0x69eee60) returned 0x3
	[0255.364] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eee60, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.364] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eee60, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.364] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eee60, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fdcc0) returned 0x0
	[0255.364] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fdcc0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.364] WbemDefPath:IUnknown:Release (This=0x69fdcc0) returned 0x3
	[0255.364] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eee60, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.364] WbemDefPath:IUnknown:Release (This=0x69eee60) returned 0x2
	[0255.364] WbemDefPath:IUnknown:Release (This=0x69eee60) returned 0x1
	[0255.364] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eee60, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eee60) returned 0x0
	[0255.368] WbemDefPath:IUnknown:AddRef (This=0x69eee60) returned 0x3
	[0255.368] WbemDefPath:IUnknown:Release (This=0x69eee60) returned 0x2
	[0255.368] WbemDefPath:IWbemPath:SetText (This=0x69eee60, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4408\"") returned 0x0
	[0255.368] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.368] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.368] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.368] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.368] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.368] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.368] IWbemClassObject:Get (in: This=0x69fbbb8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc5d10*=0, plFlavor=0x2bc5d14*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="spcwin.exe", varVal2=0x0), pType=0x2bc5d10*=8, plFlavor=0x2bc5d14*=0) returned 0x0
	[0255.368] SysStringByteLen (bstr="spcwin.exe") returned 0x14
	[0255.369] SysStringByteLen (bstr="spcwin.exe") returned 0x14
	[0255.369] IWbemClassObject:Get (in: This=0x69fbbb8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc5d10*=8, plFlavor=0x2bc5d14*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="spcwin.exe", varVal2=0x0), pType=0x2bc5d10*=8, plFlavor=0x2bc5d14*=0) returned 0x0
	[0255.369] SysStringByteLen (bstr="spcwin.exe") returned 0x14
	[0255.369] SysStringByteLen (bstr="spcwin.exe") returned 0x14
	[0255.369] CoTaskMemAlloc (cb=0x4) returned 0x69b98e8
	[0255.369] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98e8, puReturned=0x2b9e144 | out: apObjects=0x69b98e8*=0x69fa3d0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.370] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fa3d0) returned 0x0
	[0255.370] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.370] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.370] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.370] IUnknown:AddRef (This=0x69fa3d0) returned 0x3
	[0255.370] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.370] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.370] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fa3d4) returned 0x0
	[0255.371] IMarshal:GetUnmarshalClass (in: This=0x69fa3d4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.371] IUnknown:Release (This=0x69fa3d4) returned 0x3
	[0255.371] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.371] IUnknown:Release (This=0x69fa3d0) returned 0x2
	[0255.371] IUnknown:QueryInterface (in: This=0x69fa3d0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fa3d0) returned 0x0
	[0255.371] IUnknown:AddRef (This=0x69fa3d0) returned 0x4
	[0255.371] IUnknown:Release (This=0x69fa3d0) returned 0x3
	[0255.371] IUnknown:Release (This=0x69fa3d0) returned 0x2
	[0255.371] CoTaskMemFree (pv=0x69b98e8) 
	[0255.371] IUnknown:AddRef (This=0x69fa3d0) returned 0x3
	[0255.371] IWbemClassObject:Get (in: This=0x69fa3d0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.371] IWbemClassObject:Get (in: This=0x69fa3d0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4416\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.371] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4416\"") returned 0x5e
	[0255.371] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4416\"") returned 0x5e
	[0255.371] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.372] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.372] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.372] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.373] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9828) returned 0x0
	[0255.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9828, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.373] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9828, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eedf0) returned 0x0
	[0255.373] WbemDefPath:IUnknown:Release (This=0x69b9828) returned 0x0
	[0255.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eedf0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eedf0) returned 0x0
	[0255.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eedf0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eedf0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.373] WbemDefPath:IUnknown:AddRef (This=0x69eedf0) returned 0x3
	[0255.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eedf0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eedf0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eedf0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fdd80) returned 0x0
	[0255.373] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fdd80, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.373] WbemDefPath:IUnknown:Release (This=0x69fdd80) returned 0x3
	[0255.374] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eedf0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.374] WbemDefPath:IUnknown:Release (This=0x69eedf0) returned 0x2
	[0255.374] WbemDefPath:IUnknown:Release (This=0x69eedf0) returned 0x1
	[0255.374] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eedf0, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eedf0) returned 0x0
	[0255.374] WbemDefPath:IUnknown:AddRef (This=0x69eedf0) returned 0x3
	[0255.374] WbemDefPath:IUnknown:Release (This=0x69eedf0) returned 0x2
	[0255.374] WbemDefPath:IWbemPath:SetText (This=0x69eedf0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4416\"") returned 0x0
	[0255.375] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.375] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.375] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.375] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.375] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.375] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.375] IWbemClassObject:Get (in: This=0x69fa3d0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc659c*=0, plFlavor=0x2bc65a0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="spgagentservice.exe", varVal2=0x0), pType=0x2bc659c*=8, plFlavor=0x2bc65a0*=0) returned 0x0
	[0255.375] SysStringByteLen (bstr="spgagentservice.exe") returned 0x26
	[0255.375] SysStringByteLen (bstr="spgagentservice.exe") returned 0x26
	[0255.375] IWbemClassObject:Get (in: This=0x69fa3d0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc659c*=8, plFlavor=0x2bc65a0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="spgagentservice.exe", varVal2=0x0), pType=0x2bc659c*=8, plFlavor=0x2bc65a0*=0) returned 0x0
	[0255.375] SysStringByteLen (bstr="spgagentservice.exe") returned 0x26
	[0255.375] SysStringByteLen (bstr="spgagentservice.exe") returned 0x26
	[0255.375] CoTaskMemAlloc (cb=0x4) returned 0x69b9748
	[0255.375] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9748, puReturned=0x2b9e144 | out: apObjects=0x69b9748*=0x69fb090, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.378] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fb090) returned 0x0
	[0255.379] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.379] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.379] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.379] IUnknown:AddRef (This=0x69fb090) returned 0x3
	[0255.379] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.379] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.379] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fb094) returned 0x0
	[0255.379] IMarshal:GetUnmarshalClass (in: This=0x69fb094, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.379] IUnknown:Release (This=0x69fb094) returned 0x3
	[0255.379] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.379] IUnknown:Release (This=0x69fb090) returned 0x2
	[0255.379] IUnknown:QueryInterface (in: This=0x69fb090, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fb090) returned 0x0
	[0255.379] IUnknown:AddRef (This=0x69fb090) returned 0x4
	[0255.379] IUnknown:Release (This=0x69fb090) returned 0x3
	[0255.379] IUnknown:Release (This=0x69fb090) returned 0x2
	[0255.379] CoTaskMemFree (pv=0x69b9748) 
	[0255.379] IUnknown:AddRef (This=0x69fb090) returned 0x3
	[0255.379] IWbemClassObject:Get (in: This=0x69fb090, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.380] IWbemClassObject:Get (in: This=0x69fb090, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4428\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.380] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4428\"") returned 0x5e
	[0255.380] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4428\"") returned 0x5e
	[0255.380] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.380] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.380] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.380] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.381] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97b8) returned 0x0
	[0255.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97b8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.381] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97b8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eed80) returned 0x0
	[0255.381] WbemDefPath:IUnknown:Release (This=0x69b97b8) returned 0x0
	[0255.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed80, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eed80) returned 0x0
	[0255.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed80, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed80, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.382] WbemDefPath:IUnknown:AddRef (This=0x69eed80) returned 0x3
	[0255.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed80, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed80, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed80, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fded0) returned 0x0
	[0255.382] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fded0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.382] WbemDefPath:IUnknown:Release (This=0x69fded0) returned 0x3
	[0255.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed80, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.382] WbemDefPath:IUnknown:Release (This=0x69eed80) returned 0x2
	[0255.382] WbemDefPath:IUnknown:Release (This=0x69eed80) returned 0x1
	[0255.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed80, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eed80) returned 0x0
	[0255.382] WbemDefPath:IUnknown:AddRef (This=0x69eed80) returned 0x3
	[0255.382] WbemDefPath:IUnknown:Release (This=0x69eed80) returned 0x2
	[0255.382] WbemDefPath:IWbemPath:SetText (This=0x69eed80, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4428\"") returned 0x0
	[0255.382] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.382] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.382] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.382] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.382] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.383] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.383] IWbemClassObject:Get (in: This=0x69fb090, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc6e48*=0, plFlavor=0x2bc6e4c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="utg2.exe", varVal2=0x0), pType=0x2bc6e48*=8, plFlavor=0x2bc6e4c*=0) returned 0x0
	[0255.383] SysStringByteLen (bstr="utg2.exe") returned 0x10
	[0255.383] SysStringByteLen (bstr="utg2.exe") returned 0x10
	[0255.383] IWbemClassObject:Get (in: This=0x69fb090, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc6e48*=8, plFlavor=0x2bc6e4c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="utg2.exe", varVal2=0x0), pType=0x2bc6e48*=8, plFlavor=0x2bc6e4c*=0) returned 0x0
	[0255.383] SysStringByteLen (bstr="utg2.exe") returned 0x10
	[0255.383] SysStringByteLen (bstr="utg2.exe") returned 0x10
	[0255.383] CoTaskMemAlloc (cb=0x4) returned 0x69b9768
	[0255.383] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9768, puReturned=0x2b9e144 | out: apObjects=0x69b9768*=0x69fb558, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.384] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fb558) returned 0x0
	[0255.384] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.384] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.384] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.384] IUnknown:AddRef (This=0x69fb558) returned 0x3
	[0255.384] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.384] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.385] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fb55c) returned 0x0
	[0255.385] IMarshal:GetUnmarshalClass (in: This=0x69fb55c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.385] IUnknown:Release (This=0x69fb55c) returned 0x3
	[0255.385] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.385] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.385] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.385] IUnknown:Release (This=0x69fb558) returned 0x2
	[0255.385] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.385] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.385] IUnknown:QueryInterface (in: This=0x69fb558, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fb558) returned 0x0
	[0255.385] IUnknown:AddRef (This=0x69fb558) returned 0x4
	[0255.385] IUnknown:Release (This=0x69fb558) returned 0x3
	[0255.385] IUnknown:Release (This=0x69fb558) returned 0x2
	[0255.385] CoTaskMemFree (pv=0x69b9768) 
	[0255.385] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.385] IUnknown:AddRef (This=0x69fb558) returned 0x3
	[0255.385] IWbemClassObject:Get (in: This=0x69fb558, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.386] IWbemClassObject:Get (in: This=0x69fb558, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4528\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.386] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4528\"") returned 0x5e
	[0255.386] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4528\"") returned 0x5e
	[0255.386] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.386] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.386] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.386] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.387] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9898) returned 0x0
	[0255.388] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9898, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.388] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9898, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x69eed10) returned 0x0
	[0255.388] WbemDefPath:IUnknown:Release (This=0x69b9898) returned 0x0
	[0255.388] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed10, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x69eed10) returned 0x0
	[0255.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed10, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed10, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.389] WbemDefPath:IUnknown:AddRef (This=0x69eed10) returned 0x3
	[0255.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed10, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed10, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed10, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fdff0) returned 0x0
	[0255.389] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fdff0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.389] WbemDefPath:IUnknown:Release (This=0x69fdff0) returned 0x3
	[0255.389] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.389] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed10, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.389] WbemDefPath:IUnknown:Release (This=0x69eed10) returned 0x2
	[0255.389] WbemDefPath:IUnknown:Release (This=0x69eed10) returned 0x1
	[0255.389] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.389] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x69eed10, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69eed10) returned 0x0
	[0255.389] WbemDefPath:IUnknown:AddRef (This=0x69eed10) returned 0x3
	[0255.390] WbemDefPath:IUnknown:Release (This=0x69eed10) returned 0x2
	[0255.390] WbemDefPath:IWbemPath:SetText (This=0x69eed10, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4528\"") returned 0x0
	[0255.390] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.390] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.390] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.390] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.390] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.390] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.390] IWbemClassObject:Get (in: This=0x69fb558, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc76cc*=0, plFlavor=0x2bc76d0*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="debate.exe", varVal2=0x0), pType=0x2bc76cc*=8, plFlavor=0x2bc76d0*=0) returned 0x0
	[0255.390] SysStringByteLen (bstr="debate.exe") returned 0x14
	[0255.390] SysStringByteLen (bstr="debate.exe") returned 0x14
	[0255.390] IWbemClassObject:Get (in: This=0x69fb558, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc76cc*=8, plFlavor=0x2bc76d0*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="debate.exe", varVal2=0x0), pType=0x2bc76cc*=8, plFlavor=0x2bc76d0*=0) returned 0x0
	[0255.390] SysStringByteLen (bstr="debate.exe") returned 0x14
	[0255.390] SysStringByteLen (bstr="debate.exe") returned 0x14
	[0255.390] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0255.390] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x69fba20, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.391] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fba20) returned 0x0
	[0255.391] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.391] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.391] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.392] IUnknown:AddRef (This=0x69fba20) returned 0x3
	[0255.392] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.392] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.392] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fba24) returned 0x0
	[0255.392] IMarshal:GetUnmarshalClass (in: This=0x69fba24, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.392] IUnknown:Release (This=0x69fba24) returned 0x3
	[0255.392] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.392] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.392] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.392] IUnknown:Release (This=0x69fba20) returned 0x2
	[0255.392] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.392] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.392] IUnknown:QueryInterface (in: This=0x69fba20, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fba20) returned 0x0
	[0255.392] IUnknown:AddRef (This=0x69fba20) returned 0x4
	[0255.392] IUnknown:Release (This=0x69fba20) returned 0x3
	[0255.392] IUnknown:Release (This=0x69fba20) returned 0x2
	[0255.392] CoTaskMemFree (pv=0x69b98c8) 
	[0255.392] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.392] IUnknown:AddRef (This=0x69fba20) returned 0x3
	[0255.392] IWbemClassObject:Get (in: This=0x69fba20, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.393] IWbemClassObject:Get (in: This=0x69fba20, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4536\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.393] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4536\"") returned 0x5e
	[0255.393] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4536\"") returned 0x5e
	[0255.393] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.393] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.393] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.393] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.394] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9828) returned 0x0
	[0255.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9828, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.394] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9828, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x6a09408) returned 0x0
	[0255.395] WbemDefPath:IUnknown:Release (This=0x69b9828) returned 0x0
	[0255.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09408, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x6a09408) returned 0x0
	[0255.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09408, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09408, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.395] WbemDefPath:IUnknown:AddRef (This=0x6a09408) returned 0x3
	[0255.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09408, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09408, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09408, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fe338) returned 0x0
	[0255.395] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fe338, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.395] WbemDefPath:IUnknown:Release (This=0x69fe338) returned 0x3
	[0255.395] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.395] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09408, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.396] WbemDefPath:IUnknown:Release (This=0x6a09408) returned 0x2
	[0255.396] WbemDefPath:IUnknown:Release (This=0x6a09408) returned 0x1
	[0255.396] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.396] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09408, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6a09408) returned 0x0
	[0255.396] WbemDefPath:IUnknown:AddRef (This=0x6a09408) returned 0x3
	[0255.396] WbemDefPath:IUnknown:Release (This=0x6a09408) returned 0x2
	[0255.396] WbemDefPath:IWbemPath:SetText (This=0x6a09408, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4536\"") returned 0x0
	[0255.396] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.396] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.396] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.396] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.396] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.396] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.396] IWbemClassObject:Get (in: This=0x69fba20, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc7f58*=0, plFlavor=0x2bc7f5c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="entireteam.exe", varVal2=0x0), pType=0x2bc7f58*=8, plFlavor=0x2bc7f5c*=0) returned 0x0
	[0255.396] SysStringByteLen (bstr="entireteam.exe") returned 0x1c
	[0255.396] SysStringByteLen (bstr="entireteam.exe") returned 0x1c
	[0255.396] IWbemClassObject:Get (in: This=0x69fba20, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc7f58*=8, plFlavor=0x2bc7f5c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="entireteam.exe", varVal2=0x0), pType=0x2bc7f58*=8, plFlavor=0x2bc7f5c*=0) returned 0x0
	[0255.396] SysStringByteLen (bstr="entireteam.exe") returned 0x1c
	[0255.396] SysStringByteLen (bstr="entireteam.exe") returned 0x1c
	[0255.397] CoTaskMemAlloc (cb=0x4) returned 0x69b97b8
	[0255.397] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97b8, puReturned=0x2b9e144 | out: apObjects=0x69b97b8*=0x69fb228, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.398] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fb228) returned 0x0
	[0255.400] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.400] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.400] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.400] IUnknown:AddRef (This=0x69fb228) returned 0x3
	[0255.400] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.400] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.400] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fb22c) returned 0x0
	[0255.400] IMarshal:GetUnmarshalClass (in: This=0x69fb22c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.400] IUnknown:Release (This=0x69fb22c) returned 0x3
	[0255.400] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.400] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.401] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.401] IUnknown:Release (This=0x69fb228) returned 0x2
	[0255.401] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.401] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.401] IUnknown:QueryInterface (in: This=0x69fb228, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fb228) returned 0x0
	[0255.401] IUnknown:AddRef (This=0x69fb228) returned 0x4
	[0255.401] IUnknown:Release (This=0x69fb228) returned 0x3
	[0255.401] IUnknown:Release (This=0x69fb228) returned 0x2
	[0255.401] CoTaskMemFree (pv=0x69b97b8) 
	[0255.401] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.401] IUnknown:AddRef (This=0x69fb228) returned 0x3
	[0255.401] IWbemClassObject:Get (in: This=0x69fb228, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.401] IWbemClassObject:Get (in: This=0x69fb228, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4544\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.401] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4544\"") returned 0x5e
	[0255.401] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4544\"") returned 0x5e
	[0255.401] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.401] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.402] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.402] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.402] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0255.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.403] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x6a09948) returned 0x0
	[0255.403] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0255.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09948, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x6a09948) returned 0x0
	[0255.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09948, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09948, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.403] WbemDefPath:IUnknown:AddRef (This=0x6a09948) returned 0x3
	[0255.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09948, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09948, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09948, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fe578) returned 0x0
	[0255.403] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fe578, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.403] WbemDefPath:IUnknown:Release (This=0x69fe578) returned 0x3
	[0255.403] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.403] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09948, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.404] WbemDefPath:IUnknown:Release (This=0x6a09948) returned 0x2
	[0255.404] WbemDefPath:IUnknown:Release (This=0x6a09948) returned 0x1
	[0255.404] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.404] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09948, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6a09948) returned 0x0
	[0255.404] WbemDefPath:IUnknown:AddRef (This=0x6a09948) returned 0x3
	[0255.404] WbemDefPath:IUnknown:Release (This=0x6a09948) returned 0x2
	[0255.404] WbemDefPath:IWbemPath:SetText (This=0x6a09948, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4544\"") returned 0x0
	[0255.404] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.404] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.404] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.404] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.404] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.404] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.404] IWbemClassObject:Get (in: This=0x69fb228, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc87f4*=0, plFlavor=0x2bc87f8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sea_administration_try.exe", varVal2=0x0), pType=0x2bc87f4*=8, plFlavor=0x2bc87f8*=0) returned 0x0
	[0255.404] SysStringByteLen (bstr="sea_administration_try.exe") returned 0x34
	[0255.404] SysStringByteLen (bstr="sea_administration_try.exe") returned 0x34
	[0255.404] IWbemClassObject:Get (in: This=0x69fb228, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc87f4*=8, plFlavor=0x2bc87f8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="sea_administration_try.exe", varVal2=0x0), pType=0x2bc87f4*=8, plFlavor=0x2bc87f8*=0) returned 0x0
	[0255.405] SysStringByteLen (bstr="sea_administration_try.exe") returned 0x34
	[0255.405] SysStringByteLen (bstr="sea_administration_try.exe") returned 0x34
	[0255.405] CoTaskMemAlloc (cb=0x4) returned 0x69b9898
	[0255.405] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9898, puReturned=0x2b9e144 | out: apObjects=0x69b9898*=0x69fa568, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.406] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fa568) returned 0x0
	[0255.406] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.406] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.406] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.406] IUnknown:AddRef (This=0x69fa568) returned 0x3
	[0255.406] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.406] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.406] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fa56c) returned 0x0
	[0255.406] IMarshal:GetUnmarshalClass (in: This=0x69fa56c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.406] IUnknown:Release (This=0x69fa56c) returned 0x3
	[0255.406] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.407] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.407] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.407] IUnknown:Release (This=0x69fa568) returned 0x2
	[0255.407] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.407] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.407] IUnknown:QueryInterface (in: This=0x69fa568, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fa568) returned 0x0
	[0255.407] IUnknown:AddRef (This=0x69fa568) returned 0x4
	[0255.407] IUnknown:Release (This=0x69fa568) returned 0x3
	[0255.407] IUnknown:Release (This=0x69fa568) returned 0x2
	[0255.407] CoTaskMemFree (pv=0x69b9898) 
	[0255.407] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.407] IUnknown:AddRef (This=0x69fa568) returned 0x3
	[0255.407] IWbemClassObject:Get (in: This=0x69fa568, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.407] IWbemClassObject:Get (in: This=0x69fa568, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4556\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.408] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4556\"") returned 0x5e
	[0255.408] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4556\"") returned 0x5e
	[0255.408] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.408] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.408] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.408] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.409] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9868) returned 0x0
	[0255.412] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.412] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9868, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x6a09788) returned 0x0
	[0255.412] WbemDefPath:IUnknown:Release (This=0x69b9868) returned 0x0
	[0255.412] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09788, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x6a09788) returned 0x0
	[0255.412] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09788, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.412] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09788, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.413] WbemDefPath:IUnknown:AddRef (This=0x6a09788) returned 0x3
	[0255.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09788, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09788, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.413] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09788, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fe488) returned 0x0
	[0255.413] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fe488, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.413] WbemDefPath:IUnknown:Release (This=0x69fe488) returned 0x3
	[0255.413] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.414] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.414] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09788, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.414] WbemDefPath:IUnknown:Release (This=0x6a09788) returned 0x2
	[0255.414] WbemDefPath:IUnknown:Release (This=0x6a09788) returned 0x1
	[0255.414] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.414] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.414] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09788, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6a09788) returned 0x0
	[0255.414] WbemDefPath:IUnknown:AddRef (This=0x6a09788) returned 0x3
	[0255.414] WbemDefPath:IUnknown:Release (This=0x6a09788) returned 0x2
	[0255.415] WbemDefPath:IWbemPath:SetText (This=0x6a09788, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4556\"") returned 0x0
	[0255.415] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.415] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.415] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.415] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.415] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.415] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.415] IWbemClassObject:Get (in: This=0x69fa568, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc90c0*=0, plFlavor=0x2bc90c4*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="personothersusually.exe", varVal2=0x0), pType=0x2bc90c0*=8, plFlavor=0x2bc90c4*=0) returned 0x0
	[0255.416] SysStringByteLen (bstr="personothersusually.exe") returned 0x2e
	[0255.416] SysStringByteLen (bstr="personothersusually.exe") returned 0x2e
	[0255.416] IWbemClassObject:Get (in: This=0x69fa568, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc90c0*=8, plFlavor=0x2bc90c4*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="personothersusually.exe", varVal2=0x0), pType=0x2bc90c0*=8, plFlavor=0x2bc90c4*=0) returned 0x0
	[0255.416] SysStringByteLen (bstr="personothersusually.exe") returned 0x2e
	[0255.416] SysStringByteLen (bstr="personothersusually.exe") returned 0x2e
	[0255.417] CoTaskMemAlloc (cb=0x4) returned 0x69b9738
	[0255.417] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9738, puReturned=0x2b9e144 | out: apObjects=0x69b9738*=0x69fa700, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.418] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fa700) returned 0x0
	[0255.419] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.419] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.419] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.419] IUnknown:AddRef (This=0x69fa700) returned 0x3
	[0255.419] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.419] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.419] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fa704) returned 0x0
	[0255.419] IMarshal:GetUnmarshalClass (in: This=0x69fa704, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.422] IUnknown:Release (This=0x69fa704) returned 0x3
	[0255.422] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.423] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.423] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.423] IUnknown:Release (This=0x69fa700) returned 0x2
	[0255.423] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.423] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.423] IUnknown:QueryInterface (in: This=0x69fa700, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fa700) returned 0x0
	[0255.423] IUnknown:AddRef (This=0x69fa700) returned 0x4
	[0255.423] IUnknown:Release (This=0x69fa700) returned 0x3
	[0255.423] IUnknown:Release (This=0x69fa700) returned 0x2
	[0255.423] CoTaskMemFree (pv=0x69b9738) 
	[0255.423] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.423] IUnknown:AddRef (This=0x69fa700) returned 0x3
	[0255.423] IWbemClassObject:Get (in: This=0x69fa700, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.423] IWbemClassObject:Get (in: This=0x69fa700, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4596\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.423] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4596\"") returned 0x5e
	[0255.423] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4596\"") returned 0x5e
	[0255.424] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.424] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.424] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.424] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.425] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9868) returned 0x0
	[0255.425] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.425] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9868, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x6a08f38) returned 0x0
	[0255.425] WbemDefPath:IUnknown:Release (This=0x69b9868) returned 0x0
	[0255.425] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08f38, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x6a08f38) returned 0x0
	[0255.425] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08f38, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08f38, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.426] WbemDefPath:IUnknown:AddRef (This=0x6a08f38) returned 0x3
	[0255.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08f38, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08f38, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08f38, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fe890) returned 0x0
	[0255.426] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fe890, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.426] WbemDefPath:IUnknown:Release (This=0x69fe890) returned 0x3
	[0255.426] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.426] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08f38, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.426] WbemDefPath:IUnknown:Release (This=0x6a08f38) returned 0x2
	[0255.426] WbemDefPath:IUnknown:Release (This=0x6a08f38) returned 0x1
	[0255.426] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.426] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08f38, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6a08f38) returned 0x0
	[0255.427] WbemDefPath:IUnknown:AddRef (This=0x6a08f38) returned 0x3
	[0255.427] WbemDefPath:IUnknown:Release (This=0x6a08f38) returned 0x2
	[0255.427] WbemDefPath:IWbemPath:SetText (This=0x6a08f38, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4596\"") returned 0x0
	[0255.427] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.427] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.427] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.427] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.427] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.427] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.427] IWbemClassObject:Get (in: This=0x69fa700, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc997c*=0, plFlavor=0x2bc9980*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ground any.exe", varVal2=0x0), pType=0x2bc997c*=8, plFlavor=0x2bc9980*=0) returned 0x0
	[0255.427] SysStringByteLen (bstr="ground any.exe") returned 0x1c
	[0255.427] SysStringByteLen (bstr="ground any.exe") returned 0x1c
	[0255.429] IWbemClassObject:Get (in: This=0x69fa700, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bc997c*=8, plFlavor=0x2bc9980*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ground any.exe", varVal2=0x0), pType=0x2bc997c*=8, plFlavor=0x2bc9980*=0) returned 0x0
	[0255.429] SysStringByteLen (bstr="ground any.exe") returned 0x1c
	[0255.429] SysStringByteLen (bstr="ground any.exe") returned 0x1c
	[0255.429] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0255.429] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x69fb6f0, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.430] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fb6f0) returned 0x0
	[0255.430] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.430] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.430] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.430] IUnknown:AddRef (This=0x69fb6f0) returned 0x3
	[0255.430] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.430] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.430] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fb6f4) returned 0x0
	[0255.430] IMarshal:GetUnmarshalClass (in: This=0x69fb6f4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.430] IUnknown:Release (This=0x69fb6f4) returned 0x3
	[0255.430] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.431] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.431] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.431] IUnknown:Release (This=0x69fb6f0) returned 0x2
	[0255.431] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.431] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.431] IUnknown:QueryInterface (in: This=0x69fb6f0, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fb6f0) returned 0x0
	[0255.431] IUnknown:AddRef (This=0x69fb6f0) returned 0x4
	[0255.431] IUnknown:Release (This=0x69fb6f0) returned 0x3
	[0255.431] IUnknown:Release (This=0x69fb6f0) returned 0x2
	[0255.431] CoTaskMemFree (pv=0x69b98c8) 
	[0255.431] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.431] IUnknown:AddRef (This=0x69fb6f0) returned 0x3
	[0255.431] IWbemClassObject:Get (in: This=0x69fb6f0, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.432] IWbemClassObject:Get (in: This=0x69fb6f0, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4740\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.432] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4740\"") returned 0x5e
	[0255.432] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4740\"") returned 0x5e
	[0255.432] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.432] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.432] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.432] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.433] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9888) returned 0x0
	[0255.433] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.433] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x6a09018) returned 0x0
	[0255.434] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0255.434] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09018, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x6a09018) returned 0x0
	[0255.434] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09018, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.434] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09018, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.434] WbemDefPath:IUnknown:AddRef (This=0x6a09018) returned 0x3
	[0255.434] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09018, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.434] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09018, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.434] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09018, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fc910) returned 0x0
	[0255.434] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fc910, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.434] WbemDefPath:IUnknown:Release (This=0x69fc910) returned 0x3
	[0255.434] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.434] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.434] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09018, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.434] WbemDefPath:IUnknown:Release (This=0x6a09018) returned 0x2
	[0255.434] WbemDefPath:IUnknown:Release (This=0x6a09018) returned 0x1
	[0255.434] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.434] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.435] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09018, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6a09018) returned 0x0
	[0255.435] WbemDefPath:IUnknown:AddRef (This=0x6a09018) returned 0x3
	[0255.435] WbemDefPath:IUnknown:Release (This=0x6a09018) returned 0x2
	[0255.435] WbemDefPath:IWbemPath:SetText (This=0x6a09018, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4740\"") returned 0x0
	[0255.435] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.435] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.435] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.435] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.435] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.435] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.435] IWbemClassObject:Get (in: This=0x69fb6f0, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bca218*=0, plFlavor=0x2bca21c*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="backgroundTaskHost.exe", varVal2=0x0), pType=0x2bca218*=8, plFlavor=0x2bca21c*=0) returned 0x0
	[0255.435] SysStringByteLen (bstr="backgroundTaskHost.exe") returned 0x2c
	[0255.435] SysStringByteLen (bstr="backgroundTaskHost.exe") returned 0x2c
	[0255.436] IWbemClassObject:Get (in: This=0x69fb6f0, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bca218*=8, plFlavor=0x2bca21c*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="backgroundTaskHost.exe", varVal2=0x0), pType=0x2bca218*=8, plFlavor=0x2bca21c*=0) returned 0x0
	[0255.436] SysStringByteLen (bstr="backgroundTaskHost.exe") returned 0x2c
	[0255.436] SysStringByteLen (bstr="backgroundTaskHost.exe") returned 0x2c
	[0255.436] CoTaskMemAlloc (cb=0x4) returned 0x69b9768
	[0255.436] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9768, puReturned=0x2b9e144 | out: apObjects=0x69b9768*=0x69fb888, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.437] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x69fb888) returned 0x0
	[0255.437] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.437] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.437] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.437] IUnknown:AddRef (This=0x69fb888) returned 0x3
	[0255.437] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.437] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.437] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x69fb88c) returned 0x0
	[0255.437] IMarshal:GetUnmarshalClass (in: This=0x69fb88c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.437] IUnknown:Release (This=0x69fb88c) returned 0x3
	[0255.437] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.438] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.438] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.438] IUnknown:Release (This=0x69fb888) returned 0x2
	[0255.438] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.438] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.438] IUnknown:QueryInterface (in: This=0x69fb888, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x69fb888) returned 0x0
	[0255.438] IUnknown:AddRef (This=0x69fb888) returned 0x4
	[0255.438] IUnknown:Release (This=0x69fb888) returned 0x3
	[0255.438] IUnknown:Release (This=0x69fb888) returned 0x2
	[0255.438] CoTaskMemFree (pv=0x69b9768) 
	[0255.438] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.438] IUnknown:AddRef (This=0x69fb888) returned 0x3
	[0255.438] IWbemClassObject:Get (in: This=0x69fb888, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.438] IWbemClassObject:Get (in: This=0x69fb888, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4840\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.438] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4840\"") returned 0x5e
	[0255.438] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4840\"") returned 0x5e
	[0255.438] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.439] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.439] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.439] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.439] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b9738) returned 0x0
	[0255.440] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.440] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9738, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x6a095c8) returned 0x0
	[0255.440] WbemDefPath:IUnknown:Release (This=0x69b9738) returned 0x0
	[0255.440] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a095c8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x6a095c8) returned 0x0
	[0255.440] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a095c8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.440] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a095c8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.440] WbemDefPath:IUnknown:AddRef (This=0x6a095c8) returned 0x3
	[0255.440] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a095c8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.440] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a095c8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.440] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a095c8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fca00) returned 0x0
	[0255.442] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fca00, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.442] WbemDefPath:IUnknown:Release (This=0x69fca00) returned 0x3
	[0255.442] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.442] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.442] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a095c8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.444] WbemDefPath:IUnknown:Release (This=0x6a095c8) returned 0x2
	[0255.444] WbemDefPath:IUnknown:Release (This=0x6a095c8) returned 0x1
	[0255.445] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.445] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.445] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a095c8, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6a095c8) returned 0x0
	[0255.445] WbemDefPath:IUnknown:AddRef (This=0x6a095c8) returned 0x3
	[0255.445] WbemDefPath:IUnknown:Release (This=0x6a095c8) returned 0x2
	[0255.445] WbemDefPath:IWbemPath:SetText (This=0x6a095c8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"4840\"") returned 0x0
	[0255.445] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.445] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.445] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.445] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.445] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.445] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.446] IWbemClassObject:Get (in: This=0x69fb888, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bcaad4*=0, plFlavor=0x2bcaad8*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="backgroundTaskHost.exe", varVal2=0x0), pType=0x2bcaad4*=8, plFlavor=0x2bcaad8*=0) returned 0x0
	[0255.446] SysStringByteLen (bstr="backgroundTaskHost.exe") returned 0x2c
	[0255.446] SysStringByteLen (bstr="backgroundTaskHost.exe") returned 0x2c
	[0255.446] IWbemClassObject:Get (in: This=0x69fb888, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bcaad4*=8, plFlavor=0x2bcaad8*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="backgroundTaskHost.exe", varVal2=0x0), pType=0x2bcaad4*=8, plFlavor=0x2bcaad8*=0) returned 0x0
	[0255.446] SysStringByteLen (bstr="backgroundTaskHost.exe") returned 0x2c
	[0255.446] SysStringByteLen (bstr="backgroundTaskHost.exe") returned 0x2c
	[0255.446] CoTaskMemAlloc (cb=0x4) returned 0x69b98c8
	[0255.447] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b98c8, puReturned=0x2b9e144 | out: apObjects=0x69b98c8*=0x6a0cc60, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.449] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x6a0cc60) returned 0x0
	[0255.449] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.449] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.449] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.449] IUnknown:AddRef (This=0x6a0cc60) returned 0x3
	[0255.449] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.450] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.450] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x6a0cc64) returned 0x0
	[0255.450] IMarshal:GetUnmarshalClass (in: This=0x6a0cc64, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.450] IUnknown:Release (This=0x6a0cc64) returned 0x3
	[0255.450] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.450] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.450] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.450] IUnknown:Release (This=0x6a0cc60) returned 0x2
	[0255.450] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.450] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.450] IUnknown:QueryInterface (in: This=0x6a0cc60, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x6a0cc60) returned 0x0
	[0255.450] IUnknown:AddRef (This=0x6a0cc60) returned 0x4
	[0255.450] IUnknown:Release (This=0x6a0cc60) returned 0x3
	[0255.450] IUnknown:Release (This=0x6a0cc60) returned 0x2
	[0255.450] CoTaskMemFree (pv=0x69b98c8) 
	[0255.450] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.450] IUnknown:AddRef (This=0x6a0cc60) returned 0x3
	[0255.451] IWbemClassObject:Get (in: This=0x6a0cc60, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.451] IWbemClassObject:Get (in: This=0x6a0cc60, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3080\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.451] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3080\"") returned 0x5e
	[0255.451] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3080\"") returned 0x5e
	[0255.451] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.451] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.451] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.451] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.452] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b98a8) returned 0x0
	[0255.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.453] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98a8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x6a09328) returned 0x0
	[0255.453] WbemDefPath:IUnknown:Release (This=0x69b98a8) returned 0x0
	[0255.453] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09328, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x6a09328) returned 0x0
	[0255.455] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09328, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.455] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09328, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.456] WbemDefPath:IUnknown:AddRef (This=0x6a09328) returned 0x3
	[0255.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09328, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09328, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09328, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fce50) returned 0x0
	[0255.456] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fce50, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.456] WbemDefPath:IUnknown:Release (This=0x69fce50) returned 0x3
	[0255.456] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.456] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09328, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.456] WbemDefPath:IUnknown:Release (This=0x6a09328) returned 0x2
	[0255.456] WbemDefPath:IUnknown:Release (This=0x6a09328) returned 0x1
	[0255.456] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.456] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.456] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09328, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6a09328) returned 0x0
	[0255.456] WbemDefPath:IUnknown:AddRef (This=0x6a09328) returned 0x3
	[0255.457] WbemDefPath:IUnknown:Release (This=0x6a09328) returned 0x2
	[0255.457] WbemDefPath:IWbemPath:SetText (This=0x6a09328, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"3080\"") returned 0x0
	[0255.457] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.457] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.457] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.457] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.457] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.457] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.457] IWbemClassObject:Get (in: This=0x6a0cc60, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bcb390*=0, plFlavor=0x2bcb394*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="msfeedssync.exe", varVal2=0x0), pType=0x2bcb390*=8, plFlavor=0x2bcb394*=0) returned 0x0
	[0255.457] SysStringByteLen (bstr="msfeedssync.exe") returned 0x1e
	[0255.457] SysStringByteLen (bstr="msfeedssync.exe") returned 0x1e
	[0255.457] IWbemClassObject:Get (in: This=0x6a0cc60, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bcb390*=8, plFlavor=0x2bcb394*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="msfeedssync.exe", varVal2=0x0), pType=0x2bcb390*=8, plFlavor=0x2bcb394*=0) returned 0x0
	[0255.458] SysStringByteLen (bstr="msfeedssync.exe") returned 0x1e
	[0255.458] SysStringByteLen (bstr="msfeedssync.exe") returned 0x1e
	[0255.458] CoTaskMemAlloc (cb=0x4) returned 0x69b97e8
	[0255.458] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b97e8, puReturned=0x2b9e144 | out: apObjects=0x69b97e8*=0x6a0b7a8, puReturned=0x2b9e144*=0x1) returned 0x0
	[0255.459] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e830 | out: ppvObject=0x19e830*=0x6a0b7a8) returned 0x0
	[0255.459] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0255.459] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e60c | out: ppvObject=0x19e60c*=0x0) returned 0x80004002
	[0255.459] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e3e4 | out: ppvObject=0x19e3e4*=0x0) returned 0x80004002
	[0255.459] IUnknown:AddRef (This=0x6a0b7a8) returned 0x3
	[0255.459] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e14c | out: ppvObject=0x19e14c*=0x0) returned 0x80004002
	[0255.460] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e0fc | out: ppvObject=0x19e0fc*=0x0) returned 0x80004002
	[0255.460] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e108 | out: ppvObject=0x19e108*=0x6a0b7ac) returned 0x0
	[0255.460] IMarshal:GetUnmarshalClass (in: This=0x6a0b7ac, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e110 | out: pCid=0x19e110*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0255.460] IUnknown:Release (This=0x6a0b7ac) returned 0x3
	[0255.460] CoGetContextToken (in: pToken=0x19e168 | out: pToken=0x19e168) returned 0x0
	[0255.460] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0255.460] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e600 | out: ppvObject=0x19e600*=0x0) returned 0x80004002
	[0255.460] IUnknown:Release (This=0x6a0b7a8) returned 0x2
	[0255.460] CoGetContextToken (in: pToken=0x19eb40 | out: pToken=0x19eb40) returned 0x0
	[0255.460] CoGetContextToken (in: pToken=0x19eaa0 | out: pToken=0x19eaa0) returned 0x0
	[0255.460] IUnknown:QueryInterface (in: This=0x6a0b7a8, riid=0x19eb70*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19eb6c | out: ppvObject=0x19eb6c*=0x6a0b7a8) returned 0x0
	[0255.460] IUnknown:AddRef (This=0x6a0b7a8) returned 0x4
	[0255.460] IUnknown:Release (This=0x6a0b7a8) returned 0x3
	[0255.460] IUnknown:Release (This=0x6a0b7a8) returned 0x2
	[0255.461] CoTaskMemFree (pv=0x69b97e8) 
	[0255.461] CoGetContextToken (in: pToken=0x19eeb0 | out: pToken=0x19eeb0) returned 0x0
	[0255.461] IUnknown:AddRef (This=0x6a0b7a8) returned 0x3
	[0255.461] IWbemClassObject:Get (in: This=0x6a0b7a8, wszName="__GENUS", lFlags=0, pVal=0x19f1c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f240*=0, plFlavor=0x19f23c*=0 | out: pVal=0x19f1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f240*=3, plFlavor=0x19f23c*=64) returned 0x0
	[0255.461] IWbemClassObject:Get (in: This=0x6a0b7a8, wszName="__PATH", lFlags=0, pVal=0x19f1a4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f228*=0, plFlavor=0x19f224*=0 | out: pVal=0x19f1a4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1428\"", varVal2=0x0), pType=0x19f228*=8, plFlavor=0x19f224*=64) returned 0x0
	[0255.461] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1428\"") returned 0x5e
	[0255.461] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1428\"") returned 0x5e
	[0255.461] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1d0 | out: ppv=0x19f1d0*=0x66b664) returned 0x0
	[0255.462] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1c8 | out: pAptType=0x19f1c8*=1) returned 0x0
	[0255.462] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1cc | out: ppvObject=0x19f1cc*=0x0) returned 0x80004002
	[0255.462] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.462] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb38 | out: ppv=0x19eb38*=0x69b97d8) returned 0x0
	[0255.463] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b97d8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ed50 | out: ppvObject=0x19ed50*=0x0) returned 0x80004002
	[0255.463] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b97d8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed64 | out: ppvObject=0x19ed64*=0x6a097f8) returned 0x0
	[0255.463] WbemDefPath:IUnknown:Release (This=0x69b97d8) returned 0x0
	[0255.463] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a097f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e984 | out: ppvObject=0x19e984*=0x6a097f8) returned 0x0
	[0255.463] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a097f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e940 | out: ppvObject=0x19e940*=0x0) returned 0x80004002
	[0255.463] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a097f8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0255.463] WbemDefPath:IUnknown:AddRef (This=0x6a097f8) returned 0x3
	[0255.463] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a097f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0255.463] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a097f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002
	[0255.463] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a097f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e258 | out: ppvObject=0x19e258*=0x69fcce8) returned 0x0
	[0255.463] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x69fcce8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e260 | out: pCid=0x19e260*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.463] WbemDefPath:IUnknown:Release (This=0x69fcce8) returned 0x3
	[0255.463] CoGetContextToken (in: pToken=0x19e2b8 | out: pToken=0x19e2b8) returned 0x0
	[0255.463] CoGetContextToken (in: pToken=0x19e6c0 | out: pToken=0x19e6c0) returned 0x0
	[0255.464] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a097f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e750 | out: ppvObject=0x19e750*=0x0) returned 0x80004002
	[0255.464] WbemDefPath:IUnknown:Release (This=0x6a097f8) returned 0x2
	[0255.464] WbemDefPath:IUnknown:Release (This=0x6a097f8) returned 0x1
	[0255.464] CoGetContextToken (in: pToken=0x19f048 | out: pToken=0x19f048) returned 0x0
	[0255.464] CoGetContextToken (in: pToken=0x19efa8 | out: pToken=0x19efa8) returned 0x0
	[0255.464] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a097f8, riid=0x19f078*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6a097f8) returned 0x0
	[0255.467] WbemDefPath:IUnknown:AddRef (This=0x6a097f8) returned 0x3
	[0255.467] WbemDefPath:IUnknown:Release (This=0x6a097f8) returned 0x2
	[0255.467] WbemDefPath:IWbemPath:SetText (This=0x6a097f8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Process.Handle=\"1428\"") returned 0x0
	[0255.468] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1fc | out: puCount=0x19f1fc*=0x2) returned 0x0
	[0255.468] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f1f8*=0xf, pszText=0x0) returned 0x0
	[0255.468] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.468] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c8 | out: puCount=0x19f1c8*=0x2) returned 0x0
	[0255.468] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1c4*=0xf, pszText=0x0) returned 0x0
	[0255.468] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f1c4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1c4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0255.468] IWbemClassObject:Get (in: This=0x6a0b7a8, wszName="Name", lFlags=0, pVal=0x19f1c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bcbc2c*=0, plFlavor=0x2bcbc30*=0 | out: pVal=0x19f1c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe", varVal2=0x0), pType=0x2bcbc2c*=8, plFlavor=0x2bcbc30*=0) returned 0x0
	[0255.468] SysStringByteLen (bstr="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe") returned 0x88
	[0255.468] SysStringByteLen (bstr="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe") returned 0x88
	[0255.468] IWbemClassObject:Get (in: This=0x6a0b7a8, wszName="Name", lFlags=0, pVal=0x19f1cc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bcbc2c*=8, plFlavor=0x2bcbc30*=0 | out: pVal=0x19f1cc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe", varVal2=0x0), pType=0x2bcbc2c*=8, plFlavor=0x2bcbc30*=0) returned 0x0
	[0255.468] SysStringByteLen (bstr="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe") returned 0x88
	[0255.468] SysStringByteLen (bstr="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe") returned 0x88
	[0255.468] CoTaskMemAlloc (cb=0x4) returned 0x69b9828
	[0255.468] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9828, puReturned=0x2b9e144 | out: apObjects=0x69b9828*=0x0, puReturned=0x2b9e144*=0x0) returned 0x1
	[0255.469] CoTaskMemFree (pv=0x69b9828) 
	[0255.472] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0255.472] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x1
	[0255.472] IUnknown:Release (This=0x6f3d28) returned 0x0
	[0255.474] CoGetContextToken (in: pToken=0x19f0f8 | out: pToken=0x19f0f8) returned 0x0
	[0255.474] WbemLocator:IUnknown:Release (This=0x704bf8) returned 0x1
	[0255.474] IUnknown:Release (This=0x6f3b98) returned 0x0
	[0255.495] CoTaskMemAlloc (cb=0x20c) returned 0x7185d0
	[0255.495] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7185d0 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0255.495] CoTaskMemFree (pv=0x7185d0) 
	[0255.495] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ece4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0255.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f250) returned 1
	[0255.512] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", nBufferLength=0x105, lpBuffer=0x19ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", lpFilePart=0x0) returned 0x3c
	[0255.512] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\", nBufferLength=0x105, lpBuffer=0x19ed2c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\", lpFilePart=0x0) returned 0x3d
	[0255.512] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\telegram desktop\\tdata\\*"), lpFindFileData=0x19ef78 | out: lpFindFileData=0x19ef78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0255.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f214) returned 1
	[0255.529] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", nBufferLength=0x105, lpBuffer=0x19edd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", lpFilePart=0x0) returned 0x3c
	[0255.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f28c) returned 1
	[0255.535] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", nBufferLength=0x105, lpBuffer=0x19ed94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", lpFilePart=0x0) returned 0x3c
	[0255.535] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\", nBufferLength=0x105, lpBuffer=0x19ed68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\", lpFilePart=0x0) returned 0x3d
	[0255.535] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\telegram desktop\\tdata\\*"), lpFindFileData=0x19efb4 | out: lpFindFileData=0x19efb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0255.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f250) returned 1
	[0255.659] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f284 | out: ppv=0x19f284*=0x66b664) returned 0x0
	[0255.659] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f27c | out: pAptType=0x19f27c*=1) returned 0x0
	[0255.659] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f280 | out: ppvObject=0x19f280*=0x0) returned 0x80004002
	[0255.659] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.660] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebf0 | out: ppv=0x19ebf0*=0x69b9888) returned 0x0
	[0255.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee08 | out: ppvObject=0x19ee08*=0x0) returned 0x80004002
	[0255.664] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9888, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee1c | out: ppvObject=0x19ee1c*=0x6a09398) returned 0x0
	[0255.665] WbemDefPath:IUnknown:Release (This=0x69b9888) returned 0x0
	[0255.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09398, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x6a09398) returned 0x0
	[0255.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09398, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9f8 | out: ppvObject=0x19e9f8*=0x0) returned 0x80004002
	[0255.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09398, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5ec | out: ppvObject=0x19e5ec*=0x0) returned 0x80004002
	[0255.665] WbemDefPath:IUnknown:AddRef (This=0x6a09398) returned 0x3
	[0255.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09398, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e354 | out: ppvObject=0x19e354*=0x0) returned 0x80004002
	[0255.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09398, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e304 | out: ppvObject=0x19e304*=0x0) returned 0x80004002
	[0255.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09398, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e310 | out: ppvObject=0x19e310*=0x6a0e020) returned 0x0
	[0255.665] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0e020, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e318 | out: pCid=0x19e318*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.665] WbemDefPath:IUnknown:Release (This=0x6a0e020) returned 0x3
	[0255.665] CoGetContextToken (in: pToken=0x19e370 | out: pToken=0x19e370) returned 0x0
	[0255.665] CoGetContextToken (in: pToken=0x19e778 | out: pToken=0x19e778) returned 0x0
	[0255.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09398, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e808 | out: ppvObject=0x19e808*=0x0) returned 0x80004002
	[0255.666] WbemDefPath:IUnknown:Release (This=0x6a09398) returned 0x2
	[0255.666] WbemDefPath:IUnknown:Release (This=0x6a09398) returned 0x1
	[0255.666] CoGetContextToken (in: pToken=0x19f100 | out: pToken=0x19f100) returned 0x0
	[0255.666] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0255.666] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09398, riid=0x19f130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6a09398) returned 0x0
	[0255.666] WbemDefPath:IUnknown:AddRef (This=0x6a09398) returned 0x3
	[0255.666] WbemDefPath:IUnknown:Release (This=0x6a09398) returned 0x2
	[0255.666] WbemDefPath:IWbemPath:SetText (This=0x6a09398, uMode=0x4, pszPath="ROOT\\SecurityCenter") returned 0x0
	[0255.666] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09398, puCount=0x19f2ac | out: puCount=0x19f2ac*=0x2) returned 0x0
	[0255.666] WbemDefPath:IWbemPath:GetText (in: This=0x6a09398, lFlags=4, puBuffLength=0x19f2a8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2a8*=0x18, pszText=0x0) returned 0x0
	[0255.666] WbemDefPath:IWbemPath:GetText (in: This=0x6a09398, lFlags=4, puBuffLength=0x19f2a8*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2a8*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.666] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09398, puCount=0x19f298 | out: puCount=0x19f298*=0x2) returned 0x0
	[0255.666] WbemDefPath:IWbemPath:GetText (in: This=0x6a09398, lFlags=4, puBuffLength=0x19f294*=0x0, pszText=0x0 | out: puBuffLength=0x19f294*=0x18, pszText=0x0) returned 0x0
	[0255.666] WbemDefPath:IWbemPath:GetText (in: This=0x6a09398, lFlags=4, puBuffLength=0x19f294*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f294*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.666] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f22c | out: ppv=0x19f22c*=0x66b664) returned 0x0
	[0255.666] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f224 | out: pAptType=0x19f224*=1) returned 0x0
	[0255.666] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f228 | out: ppvObject=0x19f228*=0x0) returned 0x80004002
	[0255.666] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.667] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee48 | out: ppv=0x19ee48*=0x6a0e0e0) returned 0x0
	[0255.667] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0e0e0, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x0) returned 0x80004002
	[0255.668] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0e0e0, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69b9888) returned 0x0
	[0255.668] WbemLocator:IUnknown:Release (This=0x6a0e0e0) returned 0x0
	[0255.668] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec94 | out: ppvObject=0x19ec94*=0x69b9888) returned 0x0
	[0255.668] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec50 | out: ppvObject=0x19ec50*=0x0) returned 0x80004002
	[0255.668] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0255.668] WbemLocator:IUnknown:AddRef (This=0x69b9888) returned 0x3
	[0255.668] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0255.668] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0255.668] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x0) returned 0x80004002
	[0255.668] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0255.668] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0255.668] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x0) returned 0x80004002
	[0255.668] WbemLocator:IUnknown:Release (This=0x69b9888) returned 0x2
	[0255.668] WbemLocator:IUnknown:Release (This=0x69b9888) returned 0x1
	[0255.668] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0255.668] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0255.668] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9888, riid=0x19f070*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f06c | out: ppvObject=0x19f06c*=0x69b9888) returned 0x0
	[0255.669] WbemLocator:IUnknown:AddRef (This=0x69b9888) returned 0x3
	[0255.669] WbemLocator:IUnknown:Release (This=0x69b9888) returned 0x2
	[0255.669] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09398, puCount=0x19f208 | out: puCount=0x19f208*=0x2) returned 0x0
	[0255.669] WbemDefPath:IWbemPath:GetText (in: This=0x6a09398, lFlags=8, puBuffLength=0x19f204*=0x0, pszText=0x0 | out: puBuffLength=0x19f204*=0x18, pszText=0x0) returned 0x0
	[0255.669] WbemDefPath:IWbemPath:GetText (in: This=0x6a09398, lFlags=8, puBuffLength=0x19f204*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f204*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.669] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0cc | out: ppv=0x19f0cc*=0x69b9748) returned 0x0
	[0255.669] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b9748, strNetworkResource="\\\\.\\ROOT\\SecurityCenter", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f174 | out: ppNamespace=0x19f174*=0x6a02d18) returned 0x0
	[0255.698] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02d18, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19effc | out: ppvObject=0x19effc*=0x704bd4) returned 0x0
	[0255.698] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x704bd4, pProxy=0x6a02d18, pAuthnSvc=0x19f04c, pAuthzSvc=0x19f048, pServerPrincName=0x19f040, pAuthnLevel=0x19f044, pImpLevel=0x19f034, pAuthInfo=0x19f038, pCapabilites=0x19f03c | out: pAuthnSvc=0x19f04c*=0xa, pAuthzSvc=0x19f048*=0x0, pServerPrincName=0x19f040, pAuthnLevel=0x19f044*=0x6, pImpLevel=0x19f034*=0x2, pAuthInfo=0x19f038, pCapabilites=0x19f03c*=0x1) returned 0x0
	[0255.698] WbemLocator:IUnknown:Release (This=0x704bd4) returned 0x1
	[0255.698] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02d18, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eff0 | out: ppvObject=0x19eff0*=0x704bf8) returned 0x0
	[0255.698] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02d18, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efec | out: ppvObject=0x19efec*=0x704bd4) returned 0x0
	[0255.698] WbemLocator:IClientSecurity:SetBlanket (This=0x704bd4, pProxy=0x6a02d18, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.698] WbemLocator:IUnknown:Release (This=0x704bd4) returned 0x2
	[0255.698] WbemLocator:IUnknown:Release (This=0x704bf8) returned 0x1
	[0255.699] CoTaskMemFree (pv=0x69ae1c8) 
	[0255.699] WbemLocator:IUnknown:Release (This=0x69b9748) returned 0x0
	[0255.699] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02d18, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebec | out: ppvObject=0x19ebec*=0x704bf8) returned 0x0
	[0255.699] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eba8 | out: ppvObject=0x19eba8*=0x0) returned 0x80004002
	[0255.701] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x0) returned 0x80004002
	[0255.716] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02d18, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e79c | out: ppvObject=0x19e79c*=0x0) returned 0x80004002
	[0255.720] WbemLocator:IUnknown:AddRef (This=0x704bf8) returned 0x3
	[0255.720] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x0) returned 0x80004002
	[0255.720] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4b4 | out: ppvObject=0x19e4b4*=0x0) returned 0x80004002
	[0255.720] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4c0 | out: ppvObject=0x19e4c0*=0x704b54) returned 0x0
	[0255.721] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x704b54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4c8 | out: pCid=0x19e4c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.721] WbemLocator:IUnknown:Release (This=0x704b54) returned 0x3
	[0255.721] CoGetContextToken (in: pToken=0x19e520 | out: pToken=0x19e520) returned 0x0
	[0255.721] CoGetContextToken (in: pToken=0x19e928 | out: pToken=0x19e928) returned 0x0
	[0255.721] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9b8 | out: ppvObject=0x19e9b8*=0x704bdc) returned 0x0
	[0255.721] WbemLocator:IRpcOptions:Query (in: This=0x704bdc, pPrx=0x704bf8, dwProperty=2, pdwValue=0x19e9e0 | out: pdwValue=0x19e9e0) returned 0x80004002
	[0255.721] WbemLocator:IUnknown:Release (This=0x704bdc) returned 0x3
	[0255.721] WbemLocator:IUnknown:Release (This=0x704bf8) returned 0x2
	[0255.722] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0255.722] CoGetContextToken (in: pToken=0x19ee60 | out: pToken=0x19ee60) returned 0x0
	[0255.722] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x19ef30*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef2c | out: ppvObject=0x19ef2c*=0x6a02d18) returned 0x0
	[0255.722] WbemLocator:IUnknown:AddRef (This=0x6a02d18) returned 0x4
	[0255.722] WbemLocator:IUnknown:Release (This=0x6a02d18) returned 0x3
	[0255.722] WbemLocator:IUnknown:Release (This=0x6a02d18) returned 0x2
	[0255.722] SysStringLen (param_1=0x0) returned 0x0
	[0255.724] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0255.724] WbemLocator:IUnknown:AddRef (This=0x704bf8) returned 0x3
	[0255.724] WbemLocator:IUnknown:QueryInterface (in: This=0x704bf8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed9c | out: ppvObject=0x19ed9c*=0x704bf8) returned 0x0
	[0255.725] WbemLocator:IUnknown:Release (This=0x704bf8) returned 0x3
	[0255.725] WbemLocator:IUnknown:Release (This=0x704bf8) returned 0x2
	[0255.725] CoGetContextToken (in: pToken=0x19f000 | out: pToken=0x19f000) returned 0x0
	[0255.725] WbemLocator:IUnknown:AddRef (This=0x6a02d18) returned 0x3
	[0255.725] IWbemServices:ExecQuery (in: This=0x6a02d18, strQueryLanguage="WQL", strQuery="SELECT * FROM AntivirusProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f210 | out: ppEnum=0x19f210*=0x6f3940) returned 0x0
	[0255.761] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6f3944) returned 0x0
	[0255.762] IClientSecurity:QueryBlanket (in: This=0x6f3944, pProxy=0x6f3940, pAuthnSvc=0x19f0c4, pAuthzSvc=0x19f0c0, pServerPrincName=0x19f0b8, pAuthnLevel=0x19f0bc, pImpLevel=0x19f0ac, pAuthInfo=0x19f0b0, pCapabilites=0x19f0b4 | out: pAuthnSvc=0x19f0c4*=0xa, pAuthzSvc=0x19f0c0*=0x0, pServerPrincName=0x19f0b8, pAuthnLevel=0x19f0bc*=0x6, pImpLevel=0x19f0ac*=0x2, pAuthInfo=0x19f0b0, pCapabilites=0x19f0b4*=0x1) returned 0x0
	[0255.762] IUnknown:Release (This=0x6f3944) returned 0x1
	[0255.762] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f068 | out: ppvObject=0x19f068*=0x7057f8) returned 0x0
	[0255.762] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f064 | out: ppvObject=0x19f064*=0x6f3944) returned 0x0
	[0255.762] IClientSecurity:SetBlanket (This=0x6f3944, pProxy=0x6f3940, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.764] IUnknown:Release (This=0x6f3944) returned 0x2
	[0255.764] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0255.764] CoTaskMemFree (pv=0x69ae1f8) 
	[0255.764] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec60 | out: ppvObject=0x19ec60*=0x7057f8) returned 0x0
	[0255.764] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x0) returned 0x80004002
	[0255.765] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x0) returned 0x80004002
	[0255.765] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e814 | out: ppvObject=0x19e814*=0x0) returned 0x80004002
	[0255.766] WbemLocator:IUnknown:AddRef (This=0x7057f8) returned 0x3
	[0255.766] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0255.766] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e52c | out: ppvObject=0x19e52c*=0x0) returned 0x80004002
	[0255.766] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e538 | out: ppvObject=0x19e538*=0x705754) returned 0x0
	[0255.766] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705754, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e540 | out: pCid=0x19e540*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.766] WbemLocator:IUnknown:Release (This=0x705754) returned 0x3
	[0255.766] CoGetContextToken (in: pToken=0x19e598 | out: pToken=0x19e598) returned 0x0
	[0255.766] CoGetContextToken (in: pToken=0x19e9a0 | out: pToken=0x19e9a0) returned 0x0
	[0255.766] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea30 | out: ppvObject=0x19ea30*=0x7057dc) returned 0x0
	[0255.767] WbemLocator:IRpcOptions:Query (in: This=0x7057dc, pPrx=0x7057f8, dwProperty=2, pdwValue=0x19ea58 | out: pdwValue=0x19ea58) returned 0x80004002
	[0255.767] WbemLocator:IUnknown:Release (This=0x7057dc) returned 0x3
	[0255.767] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x2
	[0255.767] CoGetContextToken (in: pToken=0x19ef70 | out: pToken=0x19ef70) returned 0x0
	[0255.767] CoGetContextToken (in: pToken=0x19eed0 | out: pToken=0x19eed0) returned 0x0
	[0255.767] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x19efa0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef9c | out: ppvObject=0x19ef9c*=0x6f3940) returned 0x0
	[0255.767] IUnknown:AddRef (This=0x6f3940) returned 0x4
	[0255.767] IUnknown:Release (This=0x6f3940) returned 0x3
	[0255.767] IUnknown:Release (This=0x6f3940) returned 0x2
	[0255.767] WbemLocator:IUnknown:Release (This=0x6a02d18) returned 0x2
	[0255.767] SysStringLen (param_1=0x0) returned 0x0
	[0255.767] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09398, puCount=0x19f25c | out: puCount=0x19f25c*=0x2) returned 0x0
	[0255.767] WbemDefPath:IWbemPath:GetText (in: This=0x6a09398, lFlags=4, puBuffLength=0x19f258*=0x0, pszText=0x0 | out: puBuffLength=0x19f258*=0x18, pszText=0x0) returned 0x0
	[0255.767] WbemDefPath:IWbemPath:GetText (in: This=0x6a09398, lFlags=4, puBuffLength=0x19f258*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f258*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.768] CoGetContextToken (in: pToken=0x19f0a8 | out: pToken=0x19f0a8) returned 0x0
	[0255.768] IUnknown:AddRef (This=0x6f3940) returned 0x3
	[0255.768] IEnumWbemClassObject:Clone (in: This=0x6f3940, ppEnum=0x19f268 | out: ppEnum=0x19f268*=0x6f3b98) returned 0x0
	[0255.769] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6f3b9c) returned 0x0
	[0255.769] IClientSecurity:QueryBlanket (in: This=0x6f3b9c, pProxy=0x6f3b98, pAuthnSvc=0x19f17c, pAuthzSvc=0x19f178, pServerPrincName=0x19f170, pAuthnLevel=0x19f174, pImpLevel=0x19f164, pAuthInfo=0x19f168, pCapabilites=0x19f16c | out: pAuthnSvc=0x19f17c*=0xa, pAuthzSvc=0x19f178*=0x0, pServerPrincName=0x19f170, pAuthnLevel=0x19f174*=0x6, pImpLevel=0x19f164*=0x2, pAuthInfo=0x19f168, pCapabilites=0x19f16c*=0x1) returned 0x0
	[0255.769] IUnknown:Release (This=0x6f3b9c) returned 0x1
	[0255.769] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f120 | out: ppvObject=0x19f120*=0x705af8) returned 0x0
	[0255.769] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f11c | out: ppvObject=0x19f11c*=0x6f3b9c) returned 0x0
	[0255.769] IClientSecurity:SetBlanket (This=0x6f3b9c, pProxy=0x6f3b98, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.775] IUnknown:Release (This=0x6f3b9c) returned 0x2
	[0255.775] WbemLocator:IUnknown:Release (This=0x705af8) returned 0x1
	[0255.775] CoTaskMemFree (pv=0x683438) 
	[0255.781] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed08 | out: ppvObject=0x19ed08*=0x705af8) returned 0x0
	[0255.781] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x0) returned 0x80004002
	[0255.782] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eae4 | out: ppvObject=0x19eae4*=0x0) returned 0x80004002
	[0255.782] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8bc | out: ppvObject=0x19e8bc*=0x0) returned 0x80004002
	[0255.786] WbemLocator:IUnknown:AddRef (This=0x705af8) returned 0x3
	[0255.786] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e624 | out: ppvObject=0x19e624*=0x0) returned 0x80004002
	[0255.786] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5d4 | out: ppvObject=0x19e5d4*=0x0) returned 0x80004002
	[0255.786] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5e0 | out: ppvObject=0x19e5e0*=0x705a54) returned 0x0
	[0255.787] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705a54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5e8 | out: pCid=0x19e5e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.787] WbemLocator:IUnknown:Release (This=0x705a54) returned 0x3
	[0255.787] CoGetContextToken (in: pToken=0x19e640 | out: pToken=0x19e640) returned 0x0
	[0255.787] CoGetContextToken (in: pToken=0x19ea48 | out: pToken=0x19ea48) returned 0x0
	[0255.787] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ead8 | out: ppvObject=0x19ead8*=0x705adc) returned 0x0
	[0255.787] WbemLocator:IRpcOptions:Query (in: This=0x705adc, pPrx=0x705af8, dwProperty=2, pdwValue=0x19eb00 | out: pdwValue=0x19eb00) returned 0x80004002
	[0255.787] WbemLocator:IUnknown:Release (This=0x705adc) returned 0x3
	[0255.787] WbemLocator:IUnknown:Release (This=0x705af8) returned 0x2
	[0255.787] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0255.787] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0255.787] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x19f048*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x6f3b98) returned 0x0
	[0255.788] IUnknown:AddRef (This=0x6f3b98) returned 0x4
	[0255.788] IUnknown:Release (This=0x6f3b98) returned 0x3
	[0255.788] IUnknown:Release (This=0x6f3b98) returned 0x2
	[0255.788] IUnknown:Release (This=0x6f3940) returned 0x2
	[0255.788] SysStringLen (param_1=0x0) returned 0x0
	[0255.788] IEnumWbemClassObject:Reset (This=0x6f3b98) returned 0x0
	[0255.789] CoTaskMemAlloc (cb=0x4) returned 0x69b9928
	[0255.789] IEnumWbemClassObject:Next (in: This=0x6f3b98, lTimeout=-1, uCount=0x1, apObjects=0x69b9928, puReturned=0x2bcf8a8 | out: apObjects=0x69b9928*=0x0, puReturned=0x2bcf8a8*=0x0) returned 0x1
	[0255.790] CoTaskMemFree (pv=0x69b9928) 
	[0255.790] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0255.790] WbemLocator:IUnknown:Release (This=0x705af8) returned 0x1
	[0255.790] IUnknown:Release (This=0x6f3b98) returned 0x0
	[0255.791] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0255.791] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0255.791] IUnknown:Release (This=0x6f3940) returned 0x0
	[0255.793] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f284 | out: ppv=0x19f284*=0x66b664) returned 0x0
	[0255.793] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f27c | out: pAptType=0x19f27c*=1) returned 0x0
	[0255.793] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f280 | out: ppvObject=0x19f280*=0x0) returned 0x80004002
	[0255.793] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.797] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebf0 | out: ppv=0x19ebf0*=0x69b9848) returned 0x0
	[0255.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9848, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee08 | out: ppvObject=0x19ee08*=0x0) returned 0x80004002
	[0255.797] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9848, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee1c | out: ppvObject=0x19ee1c*=0x6a08e58) returned 0x0
	[0255.797] WbemDefPath:IUnknown:Release (This=0x69b9848) returned 0x0
	[0255.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08e58, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x6a08e58) returned 0x0
	[0255.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08e58, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9f8 | out: ppvObject=0x19e9f8*=0x0) returned 0x80004002
	[0255.797] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08e58, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5ec | out: ppvObject=0x19e5ec*=0x0) returned 0x80004002
	[0255.798] WbemDefPath:IUnknown:AddRef (This=0x6a08e58) returned 0x3
	[0255.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08e58, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e354 | out: ppvObject=0x19e354*=0x0) returned 0x80004002
	[0255.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08e58, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e304 | out: ppvObject=0x19e304*=0x0) returned 0x80004002
	[0255.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08e58, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e310 | out: ppvObject=0x19e310*=0x6a0e128) returned 0x0
	[0255.798] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0e128, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e318 | out: pCid=0x19e318*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.798] WbemDefPath:IUnknown:Release (This=0x6a0e128) returned 0x3
	[0255.798] CoGetContextToken (in: pToken=0x19e370 | out: pToken=0x19e370) returned 0x0
	[0255.798] CoGetContextToken (in: pToken=0x19e778 | out: pToken=0x19e778) returned 0x0
	[0255.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08e58, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e808 | out: ppvObject=0x19e808*=0x0) returned 0x80004002
	[0255.798] WbemDefPath:IUnknown:Release (This=0x6a08e58) returned 0x2
	[0255.798] WbemDefPath:IUnknown:Release (This=0x6a08e58) returned 0x1
	[0255.798] CoGetContextToken (in: pToken=0x19f100 | out: pToken=0x19f100) returned 0x0
	[0255.798] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0255.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08e58, riid=0x19f130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6a08e58) returned 0x0
	[0255.799] WbemDefPath:IUnknown:AddRef (This=0x6a08e58) returned 0x3
	[0255.799] WbemDefPath:IUnknown:Release (This=0x6a08e58) returned 0x2
	[0255.799] WbemDefPath:IWbemPath:SetText (This=0x6a08e58, uMode=0x4, pszPath="ROOT\\SecurityCenter") returned 0x0
	[0255.799] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a08e58, puCount=0x19f2ac | out: puCount=0x19f2ac*=0x2) returned 0x0
	[0255.799] WbemDefPath:IWbemPath:GetText (in: This=0x6a08e58, lFlags=4, puBuffLength=0x19f2a8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2a8*=0x18, pszText=0x0) returned 0x0
	[0255.799] WbemDefPath:IWbemPath:GetText (in: This=0x6a08e58, lFlags=4, puBuffLength=0x19f2a8*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2a8*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.799] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a08e58, puCount=0x19f298 | out: puCount=0x19f298*=0x2) returned 0x0
	[0255.799] WbemDefPath:IWbemPath:GetText (in: This=0x6a08e58, lFlags=4, puBuffLength=0x19f294*=0x0, pszText=0x0 | out: puBuffLength=0x19f294*=0x18, pszText=0x0) returned 0x0
	[0255.799] WbemDefPath:IWbemPath:GetText (in: This=0x6a08e58, lFlags=4, puBuffLength=0x19f294*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f294*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.799] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f22c | out: ppv=0x19f22c*=0x66b664) returned 0x0
	[0255.799] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f224 | out: pAptType=0x19f224*=1) returned 0x0
	[0255.800] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f228 | out: ppvObject=0x19f228*=0x0) returned 0x80004002
	[0255.800] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.800] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee48 | out: ppv=0x19ee48*=0x6a0e428) returned 0x0
	[0255.800] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0e428, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x0) returned 0x80004002
	[0255.801] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0e428, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69b98a8) returned 0x0
	[0255.801] WbemLocator:IUnknown:Release (This=0x6a0e428) returned 0x0
	[0255.801] WbemLocator:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec94 | out: ppvObject=0x19ec94*=0x69b98a8) returned 0x0
	[0255.801] WbemLocator:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec50 | out: ppvObject=0x19ec50*=0x0) returned 0x80004002
	[0255.801] WbemLocator:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0255.802] WbemLocator:IUnknown:AddRef (This=0x69b98a8) returned 0x3
	[0255.802] WbemLocator:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0255.802] WbemLocator:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0255.802] WbemLocator:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x0) returned 0x80004002
	[0255.802] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0255.802] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0255.803] WbemLocator:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x0) returned 0x80004002
	[0255.803] WbemLocator:IUnknown:Release (This=0x69b98a8) returned 0x2
	[0255.803] WbemLocator:IUnknown:Release (This=0x69b98a8) returned 0x1
	[0255.803] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0255.803] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0255.803] WbemLocator:IUnknown:QueryInterface (in: This=0x69b98a8, riid=0x19f070*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f06c | out: ppvObject=0x19f06c*=0x69b98a8) returned 0x0
	[0255.803] WbemLocator:IUnknown:AddRef (This=0x69b98a8) returned 0x3
	[0255.803] WbemLocator:IUnknown:Release (This=0x69b98a8) returned 0x2
	[0255.803] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a08e58, puCount=0x19f208 | out: puCount=0x19f208*=0x2) returned 0x0
	[0255.803] WbemDefPath:IWbemPath:GetText (in: This=0x6a08e58, lFlags=8, puBuffLength=0x19f204*=0x0, pszText=0x0 | out: puBuffLength=0x19f204*=0x18, pszText=0x0) returned 0x0
	[0255.803] WbemDefPath:IWbemPath:GetText (in: This=0x6a08e58, lFlags=8, puBuffLength=0x19f204*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f204*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.803] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0cc | out: ppv=0x19f0cc*=0x69b97d8) returned 0x0
	[0255.803] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b97d8, strNetworkResource="\\\\.\\ROOT\\SecurityCenter", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f174 | out: ppNamespace=0x19f174*=0x6a02ef8) returned 0x0
	[0255.844] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02ef8, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19effc | out: ppvObject=0x19effc*=0x704cd4) returned 0x0
	[0255.844] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x704cd4, pProxy=0x6a02ef8, pAuthnSvc=0x19f04c, pAuthzSvc=0x19f048, pServerPrincName=0x19f040, pAuthnLevel=0x19f044, pImpLevel=0x19f034, pAuthInfo=0x19f038, pCapabilites=0x19f03c | out: pAuthnSvc=0x19f04c*=0xa, pAuthzSvc=0x19f048*=0x0, pServerPrincName=0x19f040, pAuthnLevel=0x19f044*=0x6, pImpLevel=0x19f034*=0x2, pAuthInfo=0x19f038, pCapabilites=0x19f03c*=0x1) returned 0x0
	[0255.844] WbemLocator:IUnknown:Release (This=0x704cd4) returned 0x1
	[0255.844] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02ef8, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eff0 | out: ppvObject=0x19eff0*=0x704cf8) returned 0x0
	[0255.844] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02ef8, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efec | out: ppvObject=0x19efec*=0x704cd4) returned 0x0
	[0255.844] WbemLocator:IClientSecurity:SetBlanket (This=0x704cd4, pProxy=0x6a02ef8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.844] WbemLocator:IUnknown:Release (This=0x704cd4) returned 0x2
	[0255.844] WbemLocator:IUnknown:Release (This=0x704cf8) returned 0x1
	[0255.844] CoTaskMemFree (pv=0x683438) 
	[0255.844] WbemLocator:IUnknown:Release (This=0x69b97d8) returned 0x0
	[0255.845] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02ef8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebec | out: ppvObject=0x19ebec*=0x704cf8) returned 0x0
	[0255.845] WbemLocator:IUnknown:QueryInterface (in: This=0x704cf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eba8 | out: ppvObject=0x19eba8*=0x0) returned 0x80004002
	[0255.847] WbemLocator:IUnknown:QueryInterface (in: This=0x704cf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x0) returned 0x80004002
	[0255.848] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02ef8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e79c | out: ppvObject=0x19e79c*=0x0) returned 0x80004002
	[0255.849] WbemLocator:IUnknown:AddRef (This=0x704cf8) returned 0x3
	[0255.849] WbemLocator:IUnknown:QueryInterface (in: This=0x704cf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x0) returned 0x80004002
	[0255.849] WbemLocator:IUnknown:QueryInterface (in: This=0x704cf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4b4 | out: ppvObject=0x19e4b4*=0x0) returned 0x80004002
	[0255.849] WbemLocator:IUnknown:QueryInterface (in: This=0x704cf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4c0 | out: ppvObject=0x19e4c0*=0x704c54) returned 0x0
	[0255.849] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x704c54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4c8 | out: pCid=0x19e4c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.849] WbemLocator:IUnknown:Release (This=0x704c54) returned 0x3
	[0255.849] CoGetContextToken (in: pToken=0x19e520 | out: pToken=0x19e520) returned 0x0
	[0255.850] CoGetContextToken (in: pToken=0x19e928 | out: pToken=0x19e928) returned 0x0
	[0255.850] WbemLocator:IUnknown:QueryInterface (in: This=0x704cf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9b8 | out: ppvObject=0x19e9b8*=0x704cdc) returned 0x0
	[0255.850] WbemLocator:IRpcOptions:Query (in: This=0x704cdc, pPrx=0x704cf8, dwProperty=2, pdwValue=0x19e9e0 | out: pdwValue=0x19e9e0) returned 0x80004002
	[0255.850] WbemLocator:IUnknown:Release (This=0x704cdc) returned 0x3
	[0255.850] WbemLocator:IUnknown:Release (This=0x704cf8) returned 0x2
	[0255.850] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0255.850] CoGetContextToken (in: pToken=0x19ee60 | out: pToken=0x19ee60) returned 0x0
	[0255.850] WbemLocator:IUnknown:QueryInterface (in: This=0x704cf8, riid=0x19ef30*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef2c | out: ppvObject=0x19ef2c*=0x6a02ef8) returned 0x0
	[0255.850] WbemLocator:IUnknown:AddRef (This=0x6a02ef8) returned 0x4
	[0255.850] WbemLocator:IUnknown:Release (This=0x6a02ef8) returned 0x3
	[0255.850] WbemLocator:IUnknown:Release (This=0x6a02ef8) returned 0x2
	[0255.850] SysStringLen (param_1=0x0) returned 0x0
	[0255.850] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0255.850] WbemLocator:IUnknown:AddRef (This=0x704cf8) returned 0x3
	[0255.850] WbemLocator:IUnknown:QueryInterface (in: This=0x704cf8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed9c | out: ppvObject=0x19ed9c*=0x704cf8) returned 0x0
	[0255.851] WbemLocator:IUnknown:Release (This=0x704cf8) returned 0x3
	[0255.851] WbemLocator:IUnknown:Release (This=0x704cf8) returned 0x2
	[0255.851] CoGetContextToken (in: pToken=0x19f000 | out: pToken=0x19f000) returned 0x0
	[0255.851] WbemLocator:IUnknown:AddRef (This=0x6a02ef8) returned 0x3
	[0255.851] IWbemServices:ExecQuery (in: This=0x6a02ef8, strQueryLanguage="WQL", strQuery="SELECT * FROM AntiSpyWareProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f210 | out: ppEnum=0x19f210*=0x6f3c60) returned 0x0
	[0255.862] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f070 | out: ppvObject=0x19f070*=0x6f3c64) returned 0x0
	[0255.862] IClientSecurity:QueryBlanket (in: This=0x6f3c64, pProxy=0x6f3c60, pAuthnSvc=0x19f0c0, pAuthzSvc=0x19f0bc, pServerPrincName=0x19f0b4, pAuthnLevel=0x19f0b8, pImpLevel=0x19f0a8, pAuthInfo=0x19f0ac, pCapabilites=0x19f0b0 | out: pAuthnSvc=0x19f0c0*=0xa, pAuthzSvc=0x19f0bc*=0x0, pServerPrincName=0x19f0b4, pAuthnLevel=0x19f0b8*=0x6, pImpLevel=0x19f0a8*=0x2, pAuthInfo=0x19f0ac, pCapabilites=0x19f0b0*=0x1) returned 0x0
	[0255.862] IUnknown:Release (This=0x6f3c64) returned 0x1
	[0255.862] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f064 | out: ppvObject=0x19f064*=0x705cf8) returned 0x0
	[0255.862] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x6f3c64) returned 0x0
	[0255.862] IClientSecurity:SetBlanket (This=0x6f3c64, pProxy=0x6f3c60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.863] IUnknown:Release (This=0x6f3c64) returned 0x2
	[0255.863] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x1
	[0255.863] CoTaskMemFree (pv=0x711220) 
	[0255.864] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec5c | out: ppvObject=0x19ec5c*=0x705cf8) returned 0x0
	[0255.864] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec18 | out: ppvObject=0x19ec18*=0x0) returned 0x80004002
	[0255.864] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0255.865] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e80c | out: ppvObject=0x19e80c*=0x0) returned 0x80004002
	[0255.865] WbemLocator:IUnknown:AddRef (This=0x705cf8) returned 0x3
	[0255.865] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e574 | out: ppvObject=0x19e574*=0x0) returned 0x80004002
	[0255.865] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e524 | out: ppvObject=0x19e524*=0x0) returned 0x80004002
	[0255.865] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e530 | out: ppvObject=0x19e530*=0x705c54) returned 0x0
	[0255.865] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705c54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e538 | out: pCid=0x19e538*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.865] WbemLocator:IUnknown:Release (This=0x705c54) returned 0x3
	[0255.865] CoGetContextToken (in: pToken=0x19e590 | out: pToken=0x19e590) returned 0x0
	[0255.866] CoGetContextToken (in: pToken=0x19e998 | out: pToken=0x19e998) returned 0x0
	[0255.866] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x705cdc) returned 0x0
	[0255.866] WbemLocator:IRpcOptions:Query (in: This=0x705cdc, pPrx=0x705cf8, dwProperty=2, pdwValue=0x19ea50 | out: pdwValue=0x19ea50) returned 0x80004002
	[0255.866] WbemLocator:IUnknown:Release (This=0x705cdc) returned 0x3
	[0255.866] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x2
	[0255.866] CoGetContextToken (in: pToken=0x19ef70 | out: pToken=0x19ef70) returned 0x0
	[0255.866] CoGetContextToken (in: pToken=0x19eed0 | out: pToken=0x19eed0) returned 0x0
	[0255.866] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x19efa0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef9c | out: ppvObject=0x19ef9c*=0x6f3c60) returned 0x0
	[0255.866] IUnknown:AddRef (This=0x6f3c60) returned 0x4
	[0255.866] IUnknown:Release (This=0x6f3c60) returned 0x3
	[0255.866] IUnknown:Release (This=0x6f3c60) returned 0x2
	[0255.866] WbemLocator:IUnknown:Release (This=0x6a02ef8) returned 0x2
	[0255.866] SysStringLen (param_1=0x0) returned 0x0
	[0255.866] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a08e58, puCount=0x19f25c | out: puCount=0x19f25c*=0x2) returned 0x0
	[0255.866] WbemDefPath:IWbemPath:GetText (in: This=0x6a08e58, lFlags=4, puBuffLength=0x19f258*=0x0, pszText=0x0 | out: puBuffLength=0x19f258*=0x18, pszText=0x0) returned 0x0
	[0255.866] WbemDefPath:IWbemPath:GetText (in: This=0x6a08e58, lFlags=4, puBuffLength=0x19f258*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f258*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.866] CoGetContextToken (in: pToken=0x19f0a8 | out: pToken=0x19f0a8) returned 0x0
	[0255.866] IUnknown:AddRef (This=0x6f3c60) returned 0x3
	[0255.866] IEnumWbemClassObject:Clone (in: This=0x6f3c60, ppEnum=0x19f268 | out: ppEnum=0x19f268*=0x6f3b98) returned 0x0
	[0255.867] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6f3b9c) returned 0x0
	[0255.868] IClientSecurity:QueryBlanket (in: This=0x6f3b9c, pProxy=0x6f3b98, pAuthnSvc=0x19f17c, pAuthzSvc=0x19f178, pServerPrincName=0x19f170, pAuthnLevel=0x19f174, pImpLevel=0x19f164, pAuthInfo=0x19f168, pCapabilites=0x19f16c | out: pAuthnSvc=0x19f17c*=0xa, pAuthzSvc=0x19f178*=0x0, pServerPrincName=0x19f170, pAuthnLevel=0x19f174*=0x6, pImpLevel=0x19f164*=0x2, pAuthInfo=0x19f168, pCapabilites=0x19f16c*=0x1) returned 0x0
	[0255.868] IUnknown:Release (This=0x6f3b9c) returned 0x1
	[0255.868] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f120 | out: ppvObject=0x19f120*=0x704ff8) returned 0x0
	[0255.868] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f11c | out: ppvObject=0x19f11c*=0x6f3b9c) returned 0x0
	[0255.868] IClientSecurity:SetBlanket (This=0x6f3b9c, pProxy=0x6f3b98, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.874] IUnknown:Release (This=0x6f3b9c) returned 0x2
	[0255.874] WbemLocator:IUnknown:Release (This=0x704ff8) returned 0x1
	[0255.874] CoTaskMemFree (pv=0x6a11f88) 
	[0255.874] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed08 | out: ppvObject=0x19ed08*=0x704ff8) returned 0x0
	[0255.874] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x0) returned 0x80004002
	[0255.875] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eae4 | out: ppvObject=0x19eae4*=0x0) returned 0x80004002
	[0255.875] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8bc | out: ppvObject=0x19e8bc*=0x0) returned 0x80004002
	[0255.875] WbemLocator:IUnknown:AddRef (This=0x704ff8) returned 0x3
	[0255.875] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e624 | out: ppvObject=0x19e624*=0x0) returned 0x80004002
	[0255.875] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5d4 | out: ppvObject=0x19e5d4*=0x0) returned 0x80004002
	[0255.875] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5e0 | out: ppvObject=0x19e5e0*=0x704f54) returned 0x0
	[0255.876] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x704f54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5e8 | out: pCid=0x19e5e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.876] WbemLocator:IUnknown:Release (This=0x704f54) returned 0x3
	[0255.876] CoGetContextToken (in: pToken=0x19e640 | out: pToken=0x19e640) returned 0x0
	[0255.876] CoGetContextToken (in: pToken=0x19ea48 | out: pToken=0x19ea48) returned 0x0
	[0255.876] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ead8 | out: ppvObject=0x19ead8*=0x704fdc) returned 0x0
	[0255.876] WbemLocator:IRpcOptions:Query (in: This=0x704fdc, pPrx=0x704ff8, dwProperty=2, pdwValue=0x19eb00 | out: pdwValue=0x19eb00) returned 0x80004002
	[0255.876] WbemLocator:IUnknown:Release (This=0x704fdc) returned 0x3
	[0255.876] WbemLocator:IUnknown:Release (This=0x704ff8) returned 0x2
	[0255.876] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0255.876] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0255.876] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x19f048*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x6f3b98) returned 0x0
	[0255.876] IUnknown:AddRef (This=0x6f3b98) returned 0x4
	[0255.876] IUnknown:Release (This=0x6f3b98) returned 0x3
	[0255.876] IUnknown:Release (This=0x6f3b98) returned 0x2
	[0255.876] IUnknown:Release (This=0x6f3c60) returned 0x2
	[0255.876] SysStringLen (param_1=0x0) returned 0x0
	[0255.876] IEnumWbemClassObject:Reset (This=0x6f3b98) returned 0x0
	[0255.877] CoTaskMemAlloc (cb=0x4) returned 0x69b9768
	[0255.877] IEnumWbemClassObject:Next (in: This=0x6f3b98, lTimeout=-1, uCount=0x1, apObjects=0x69b9768, puReturned=0x2bd095c | out: apObjects=0x69b9768*=0x0, puReturned=0x2bd095c*=0x0) returned 0x1
	[0255.878] CoTaskMemFree (pv=0x69b9768) 
	[0255.878] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0255.878] WbemLocator:IUnknown:Release (This=0x704ff8) returned 0x1
	[0255.878] IUnknown:Release (This=0x6f3b98) returned 0x0
	[0255.879] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0255.879] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x1
	[0255.879] IUnknown:Release (This=0x6f3c60) returned 0x0
	[0255.881] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f284 | out: ppv=0x19f284*=0x66b664) returned 0x0
	[0255.881] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f27c | out: pAptType=0x19f27c*=1) returned 0x0
	[0255.881] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f280 | out: ppvObject=0x19f280*=0x0) returned 0x80004002
	[0255.881] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.882] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebf0 | out: ppv=0x19ebf0*=0x69b98c8) returned 0x0
	[0255.882] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b98c8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee08 | out: ppvObject=0x19ee08*=0x0) returned 0x80004002
	[0255.882] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b98c8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee1c | out: ppvObject=0x19ee1c*=0x6a09478) returned 0x0
	[0255.882] WbemDefPath:IUnknown:Release (This=0x69b98c8) returned 0x0
	[0255.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09478, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x6a09478) returned 0x0
	[0255.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09478, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9f8 | out: ppvObject=0x19e9f8*=0x0) returned 0x80004002
	[0255.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09478, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5ec | out: ppvObject=0x19e5ec*=0x0) returned 0x80004002
	[0255.883] WbemDefPath:IUnknown:AddRef (This=0x6a09478) returned 0x3
	[0255.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09478, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e354 | out: ppvObject=0x19e354*=0x0) returned 0x80004002
	[0255.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09478, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e304 | out: ppvObject=0x19e304*=0x0) returned 0x80004002
	[0255.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09478, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e310 | out: ppvObject=0x19e310*=0x6a0e308) returned 0x0
	[0255.883] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0e308, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e318 | out: pCid=0x19e318*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.883] WbemDefPath:IUnknown:Release (This=0x6a0e308) returned 0x3
	[0255.883] CoGetContextToken (in: pToken=0x19e370 | out: pToken=0x19e370) returned 0x0
	[0255.884] CoGetContextToken (in: pToken=0x19e778 | out: pToken=0x19e778) returned 0x0
	[0255.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09478, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e808 | out: ppvObject=0x19e808*=0x0) returned 0x80004002
	[0255.884] WbemDefPath:IUnknown:Release (This=0x6a09478) returned 0x2
	[0255.884] WbemDefPath:IUnknown:Release (This=0x6a09478) returned 0x1
	[0255.884] CoGetContextToken (in: pToken=0x19f100 | out: pToken=0x19f100) returned 0x0
	[0255.884] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0255.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09478, riid=0x19f130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6a09478) returned 0x0
	[0255.884] WbemDefPath:IUnknown:AddRef (This=0x6a09478) returned 0x3
	[0255.884] WbemDefPath:IUnknown:Release (This=0x6a09478) returned 0x2
	[0255.884] WbemDefPath:IWbemPath:SetText (This=0x6a09478, uMode=0x4, pszPath="ROOT\\SecurityCenter") returned 0x0
	[0255.884] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09478, puCount=0x19f2ac | out: puCount=0x19f2ac*=0x2) returned 0x0
	[0255.884] WbemDefPath:IWbemPath:GetText (in: This=0x6a09478, lFlags=4, puBuffLength=0x19f2a8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2a8*=0x18, pszText=0x0) returned 0x0
	[0255.884] WbemDefPath:IWbemPath:GetText (in: This=0x6a09478, lFlags=4, puBuffLength=0x19f2a8*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f2a8*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.884] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09478, puCount=0x19f298 | out: puCount=0x19f298*=0x2) returned 0x0
	[0255.884] WbemDefPath:IWbemPath:GetText (in: This=0x6a09478, lFlags=4, puBuffLength=0x19f294*=0x0, pszText=0x0 | out: puBuffLength=0x19f294*=0x18, pszText=0x0) returned 0x0
	[0255.884] WbemDefPath:IWbemPath:GetText (in: This=0x6a09478, lFlags=4, puBuffLength=0x19f294*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f294*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.884] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f22c | out: ppv=0x19f22c*=0x66b664) returned 0x0
	[0255.884] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f224 | out: pAptType=0x19f224*=1) returned 0x0
	[0255.884] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f228 | out: ppvObject=0x19f228*=0x0) returned 0x80004002
	[0255.885] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.885] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee48 | out: ppv=0x19ee48*=0x6a0e2c0) returned 0x0
	[0255.885] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0e2c0, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x0) returned 0x80004002
	[0255.885] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0e2c0, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69b9868) returned 0x0
	[0255.885] WbemLocator:IUnknown:Release (This=0x6a0e2c0) returned 0x0
	[0255.885] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec94 | out: ppvObject=0x19ec94*=0x69b9868) returned 0x0
	[0255.886] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec50 | out: ppvObject=0x19ec50*=0x0) returned 0x80004002
	[0255.886] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0255.886] WbemLocator:IUnknown:AddRef (This=0x69b9868) returned 0x3
	[0255.886] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0255.886] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0255.886] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x0) returned 0x80004002
	[0255.886] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0255.886] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0255.886] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x0) returned 0x80004002
	[0255.886] WbemLocator:IUnknown:Release (This=0x69b9868) returned 0x2
	[0255.886] WbemLocator:IUnknown:Release (This=0x69b9868) returned 0x1
	[0255.886] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0255.886] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0255.886] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9868, riid=0x19f070*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f06c | out: ppvObject=0x19f06c*=0x69b9868) returned 0x0
	[0255.886] WbemLocator:IUnknown:AddRef (This=0x69b9868) returned 0x3
	[0255.886] WbemLocator:IUnknown:Release (This=0x69b9868) returned 0x2
	[0255.886] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09478, puCount=0x19f208 | out: puCount=0x19f208*=0x2) returned 0x0
	[0255.886] WbemDefPath:IWbemPath:GetText (in: This=0x6a09478, lFlags=8, puBuffLength=0x19f204*=0x0, pszText=0x0 | out: puBuffLength=0x19f204*=0x18, pszText=0x0) returned 0x0
	[0255.887] WbemDefPath:IWbemPath:GetText (in: This=0x6a09478, lFlags=8, puBuffLength=0x19f204*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f204*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.887] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0cc | out: ppv=0x19f0cc*=0x69b97e8) returned 0x0
	[0255.887] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b97e8, strNetworkResource="\\\\.\\ROOT\\SecurityCenter", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f174 | out: ppNamespace=0x19f174*=0x6a02f48) returned 0x0
	[0255.903] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02f48, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19effc | out: ppvObject=0x19effc*=0x704fd4) returned 0x0
	[0255.903] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x704fd4, pProxy=0x6a02f48, pAuthnSvc=0x19f04c, pAuthzSvc=0x19f048, pServerPrincName=0x19f040, pAuthnLevel=0x19f044, pImpLevel=0x19f034, pAuthInfo=0x19f038, pCapabilites=0x19f03c | out: pAuthnSvc=0x19f04c*=0xa, pAuthzSvc=0x19f048*=0x0, pServerPrincName=0x19f040, pAuthnLevel=0x19f044*=0x6, pImpLevel=0x19f034*=0x2, pAuthInfo=0x19f038, pCapabilites=0x19f03c*=0x1) returned 0x0
	[0255.903] WbemLocator:IUnknown:Release (This=0x704fd4) returned 0x1
	[0255.903] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02f48, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eff0 | out: ppvObject=0x19eff0*=0x704ff8) returned 0x0
	[0255.903] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02f48, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efec | out: ppvObject=0x19efec*=0x704fd4) returned 0x0
	[0255.903] WbemLocator:IClientSecurity:SetBlanket (This=0x704fd4, pProxy=0x6a02f48, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.906] WbemLocator:IUnknown:Release (This=0x704fd4) returned 0x2
	[0255.906] WbemLocator:IUnknown:Release (This=0x704ff8) returned 0x1
	[0255.906] CoTaskMemFree (pv=0x6a11f58) 
	[0255.906] WbemLocator:IUnknown:Release (This=0x69b97e8) returned 0x0
	[0255.906] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02f48, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebec | out: ppvObject=0x19ebec*=0x704ff8) returned 0x0
	[0255.906] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eba8 | out: ppvObject=0x19eba8*=0x0) returned 0x80004002
	[0255.907] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x0) returned 0x80004002
	[0255.907] WbemLocator:IUnknown:QueryInterface (in: This=0x6a02f48, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e79c | out: ppvObject=0x19e79c*=0x0) returned 0x80004002
	[0255.908] WbemLocator:IUnknown:AddRef (This=0x704ff8) returned 0x3
	[0255.908] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x0) returned 0x80004002
	[0255.908] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4b4 | out: ppvObject=0x19e4b4*=0x0) returned 0x80004002
	[0255.908] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4c0 | out: ppvObject=0x19e4c0*=0x704f54) returned 0x0
	[0255.908] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x704f54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4c8 | out: pCid=0x19e4c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.908] WbemLocator:IUnknown:Release (This=0x704f54) returned 0x3
	[0255.908] CoGetContextToken (in: pToken=0x19e520 | out: pToken=0x19e520) returned 0x0
	[0255.908] CoGetContextToken (in: pToken=0x19e928 | out: pToken=0x19e928) returned 0x0
	[0255.908] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9b8 | out: ppvObject=0x19e9b8*=0x704fdc) returned 0x0
	[0255.908] WbemLocator:IRpcOptions:Query (in: This=0x704fdc, pPrx=0x704ff8, dwProperty=2, pdwValue=0x19e9e0 | out: pdwValue=0x19e9e0) returned 0x80004002
	[0255.909] WbemLocator:IUnknown:Release (This=0x704fdc) returned 0x3
	[0255.909] WbemLocator:IUnknown:Release (This=0x704ff8) returned 0x2
	[0255.909] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0255.909] CoGetContextToken (in: pToken=0x19ee60 | out: pToken=0x19ee60) returned 0x0
	[0255.909] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x19ef30*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef2c | out: ppvObject=0x19ef2c*=0x6a02f48) returned 0x0
	[0255.909] WbemLocator:IUnknown:AddRef (This=0x6a02f48) returned 0x4
	[0255.909] WbemLocator:IUnknown:Release (This=0x6a02f48) returned 0x3
	[0255.909] WbemLocator:IUnknown:Release (This=0x6a02f48) returned 0x2
	[0255.909] SysStringLen (param_1=0x0) returned 0x0
	[0255.909] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0255.909] WbemLocator:IUnknown:AddRef (This=0x704ff8) returned 0x3
	[0255.909] WbemLocator:IUnknown:QueryInterface (in: This=0x704ff8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed9c | out: ppvObject=0x19ed9c*=0x704ff8) returned 0x0
	[0255.909] WbemLocator:IUnknown:Release (This=0x704ff8) returned 0x3
	[0255.909] WbemLocator:IUnknown:Release (This=0x704ff8) returned 0x2
	[0255.909] CoGetContextToken (in: pToken=0x19f000 | out: pToken=0x19f000) returned 0x0
	[0255.909] WbemLocator:IUnknown:AddRef (This=0x6a02f48) returned 0x3
	[0255.909] IWbemServices:ExecQuery (in: This=0x6a02f48, strQueryLanguage="WQL", strQuery="SELECT * FROM FirewallProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f210 | out: ppEnum=0x19f210*=0x6f3ad0) returned 0x0
	[0255.920] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6f3ad4) returned 0x0
	[0255.920] IClientSecurity:QueryBlanket (in: This=0x6f3ad4, pProxy=0x6f3ad0, pAuthnSvc=0x19f0c4, pAuthzSvc=0x19f0c0, pServerPrincName=0x19f0b8, pAuthnLevel=0x19f0bc, pImpLevel=0x19f0ac, pAuthInfo=0x19f0b0, pCapabilites=0x19f0b4 | out: pAuthnSvc=0x19f0c4*=0xa, pAuthzSvc=0x19f0c0*=0x0, pServerPrincName=0x19f0b8, pAuthnLevel=0x19f0bc*=0x6, pImpLevel=0x19f0ac*=0x2, pAuthInfo=0x19f0b0, pCapabilites=0x19f0b4*=0x1) returned 0x0
	[0255.920] IUnknown:Release (This=0x6f3ad4) returned 0x1
	[0255.920] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f068 | out: ppvObject=0x19f068*=0x7057f8) returned 0x0
	[0255.920] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f064 | out: ppvObject=0x19f064*=0x6f3ad4) returned 0x0
	[0255.920] IClientSecurity:SetBlanket (This=0x6f3ad4, pProxy=0x6f3ad0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.922] IUnknown:Release (This=0x6f3ad4) returned 0x2
	[0255.922] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0255.922] CoTaskMemFree (pv=0x6a11bf8) 
	[0255.922] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec60 | out: ppvObject=0x19ec60*=0x7057f8) returned 0x0
	[0255.924] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x0) returned 0x80004002
	[0255.924] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x0) returned 0x80004002
	[0255.925] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e814 | out: ppvObject=0x19e814*=0x0) returned 0x80004002
	[0255.925] WbemLocator:IUnknown:AddRef (This=0x7057f8) returned 0x3
	[0255.925] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0255.925] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e52c | out: ppvObject=0x19e52c*=0x0) returned 0x80004002
	[0255.925] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e538 | out: ppvObject=0x19e538*=0x705754) returned 0x0
	[0255.926] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705754, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e540 | out: pCid=0x19e540*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.926] WbemLocator:IUnknown:Release (This=0x705754) returned 0x3
	[0255.926] CoGetContextToken (in: pToken=0x19e598 | out: pToken=0x19e598) returned 0x0
	[0255.926] CoGetContextToken (in: pToken=0x19e9a0 | out: pToken=0x19e9a0) returned 0x0
	[0255.926] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea30 | out: ppvObject=0x19ea30*=0x7057dc) returned 0x0
	[0255.926] WbemLocator:IRpcOptions:Query (in: This=0x7057dc, pPrx=0x7057f8, dwProperty=2, pdwValue=0x19ea58 | out: pdwValue=0x19ea58) returned 0x80004002
	[0255.926] WbemLocator:IUnknown:Release (This=0x7057dc) returned 0x3
	[0255.926] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x2
	[0255.926] CoGetContextToken (in: pToken=0x19ef70 | out: pToken=0x19ef70) returned 0x0
	[0255.926] CoGetContextToken (in: pToken=0x19eed0 | out: pToken=0x19eed0) returned 0x0
	[0255.926] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x19efa0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef9c | out: ppvObject=0x19ef9c*=0x6f3ad0) returned 0x0
	[0255.926] IUnknown:AddRef (This=0x6f3ad0) returned 0x4
	[0255.926] IUnknown:Release (This=0x6f3ad0) returned 0x3
	[0255.926] IUnknown:Release (This=0x6f3ad0) returned 0x2
	[0255.926] WbemLocator:IUnknown:Release (This=0x6a02f48) returned 0x2
	[0255.926] SysStringLen (param_1=0x0) returned 0x0
	[0255.926] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09478, puCount=0x19f25c | out: puCount=0x19f25c*=0x2) returned 0x0
	[0255.926] WbemDefPath:IWbemPath:GetText (in: This=0x6a09478, lFlags=4, puBuffLength=0x19f258*=0x0, pszText=0x0 | out: puBuffLength=0x19f258*=0x18, pszText=0x0) returned 0x0
	[0255.926] WbemDefPath:IWbemPath:GetText (in: This=0x6a09478, lFlags=4, puBuffLength=0x19f258*=0x18, pszText="00000000000000000000000" | out: puBuffLength=0x19f258*=0x18, pszText="\\\\.\\ROOT\\SecurityCenter") returned 0x0
	[0255.927] CoGetContextToken (in: pToken=0x19f0a8 | out: pToken=0x19f0a8) returned 0x0
	[0255.927] IUnknown:AddRef (This=0x6f3ad0) returned 0x3
	[0255.927] IEnumWbemClassObject:Clone (in: This=0x6f3ad0, ppEnum=0x19f268 | out: ppEnum=0x19f268*=0x6f37b0) returned 0x0
	[0255.928] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6f37b4) returned 0x0
	[0255.928] IClientSecurity:QueryBlanket (in: This=0x6f37b4, pProxy=0x6f37b0, pAuthnSvc=0x19f17c, pAuthzSvc=0x19f178, pServerPrincName=0x19f170, pAuthnLevel=0x19f174, pImpLevel=0x19f164, pAuthInfo=0x19f168, pCapabilites=0x19f16c | out: pAuthnSvc=0x19f17c*=0xa, pAuthzSvc=0x19f178*=0x0, pServerPrincName=0x19f170, pAuthnLevel=0x19f174*=0x6, pImpLevel=0x19f164*=0x2, pAuthInfo=0x19f168, pCapabilites=0x19f16c*=0x1) returned 0x0
	[0255.928] IUnknown:Release (This=0x6f37b4) returned 0x1
	[0255.928] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f120 | out: ppvObject=0x19f120*=0x7061f8) returned 0x0
	[0255.928] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f11c | out: ppvObject=0x19f11c*=0x6f37b4) returned 0x0
	[0255.928] IClientSecurity:SetBlanket (This=0x6f37b4, pProxy=0x6f37b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.929] IUnknown:Release (This=0x6f37b4) returned 0x2
	[0255.930] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x1
	[0255.930] CoTaskMemFree (pv=0x6a11ef8) 
	[0255.930] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed08 | out: ppvObject=0x19ed08*=0x7061f8) returned 0x0
	[0255.930] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x0) returned 0x80004002
	[0255.930] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eae4 | out: ppvObject=0x19eae4*=0x0) returned 0x80004002
	[0255.931] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8bc | out: ppvObject=0x19e8bc*=0x0) returned 0x80004002
	[0255.931] WbemLocator:IUnknown:AddRef (This=0x7061f8) returned 0x3
	[0255.931] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e624 | out: ppvObject=0x19e624*=0x0) returned 0x80004002
	[0255.931] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5d4 | out: ppvObject=0x19e5d4*=0x0) returned 0x80004002
	[0255.931] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5e0 | out: ppvObject=0x19e5e0*=0x706154) returned 0x0
	[0255.931] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706154, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5e8 | out: pCid=0x19e5e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.931] WbemLocator:IUnknown:Release (This=0x706154) returned 0x3
	[0255.931] CoGetContextToken (in: pToken=0x19e640 | out: pToken=0x19e640) returned 0x0
	[0255.931] CoGetContextToken (in: pToken=0x19ea48 | out: pToken=0x19ea48) returned 0x0
	[0255.931] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ead8 | out: ppvObject=0x19ead8*=0x7061dc) returned 0x0
	[0255.931] WbemLocator:IRpcOptions:Query (in: This=0x7061dc, pPrx=0x7061f8, dwProperty=2, pdwValue=0x19eb00 | out: pdwValue=0x19eb00) returned 0x80004002
	[0255.932] WbemLocator:IUnknown:Release (This=0x7061dc) returned 0x3
	[0255.932] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x2
	[0255.932] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0255.932] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0255.932] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x19f048*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x6f37b0) returned 0x0
	[0255.932] IUnknown:AddRef (This=0x6f37b0) returned 0x4
	[0255.932] IUnknown:Release (This=0x6f37b0) returned 0x3
	[0255.932] IUnknown:Release (This=0x6f37b0) returned 0x2
	[0255.932] IUnknown:Release (This=0x6f3ad0) returned 0x2
	[0255.932] SysStringLen (param_1=0x0) returned 0x0
	[0255.932] IEnumWbemClassObject:Reset (This=0x6f37b0) returned 0x0
	[0255.932] CoTaskMemAlloc (cb=0x4) returned 0x69b9928
	[0255.933] IEnumWbemClassObject:Next (in: This=0x6f37b0, lTimeout=-1, uCount=0x1, apObjects=0x69b9928, puReturned=0x2bd1a08 | out: apObjects=0x69b9928*=0x0, puReturned=0x2bd1a08*=0x0) returned 0x1
	[0255.933] CoTaskMemFree (pv=0x69b9928) 
	[0255.933] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0255.933] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x1
	[0255.933] IUnknown:Release (This=0x6f37b0) returned 0x0
	[0255.935] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0255.935] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0255.935] IUnknown:Release (This=0x6f3ad0) returned 0x0
	[0255.941] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f284 | out: ppv=0x19f284*=0x66b664) returned 0x0
	[0255.941] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f27c | out: pAptType=0x19f27c*=1) returned 0x0
	[0255.941] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f280 | out: ppvObject=0x19f280*=0x0) returned 0x80004002
	[0255.941] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.942] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebf0 | out: ppv=0x19ebf0*=0x69b9928) returned 0x0
	[0255.942] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee08 | out: ppvObject=0x19ee08*=0x0) returned 0x80004002
	[0255.942] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9928, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee1c | out: ppvObject=0x19ee1c*=0x6a094e8) returned 0x0
	[0255.943] WbemDefPath:IUnknown:Release (This=0x69b9928) returned 0x0
	[0255.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a094e8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x6a094e8) returned 0x0
	[0255.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a094e8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9f8 | out: ppvObject=0x19e9f8*=0x0) returned 0x80004002
	[0255.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a094e8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5ec | out: ppvObject=0x19e5ec*=0x0) returned 0x80004002
	[0255.943] WbemDefPath:IUnknown:AddRef (This=0x6a094e8) returned 0x3
	[0255.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a094e8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e354 | out: ppvObject=0x19e354*=0x0) returned 0x80004002
	[0255.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a094e8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e304 | out: ppvObject=0x19e304*=0x0) returned 0x80004002
	[0255.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a094e8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e310 | out: ppvObject=0x19e310*=0x6a0e428) returned 0x0
	[0255.950] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0e428, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e318 | out: pCid=0x19e318*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.950] WbemDefPath:IUnknown:Release (This=0x6a0e428) returned 0x3
	[0255.950] CoGetContextToken (in: pToken=0x19e370 | out: pToken=0x19e370) returned 0x0
	[0255.950] CoGetContextToken (in: pToken=0x19e778 | out: pToken=0x19e778) returned 0x0
	[0255.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a094e8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e808 | out: ppvObject=0x19e808*=0x0) returned 0x80004002
	[0255.950] WbemDefPath:IUnknown:Release (This=0x6a094e8) returned 0x2
	[0255.950] WbemDefPath:IUnknown:Release (This=0x6a094e8) returned 0x1
	[0255.950] CoGetContextToken (in: pToken=0x19f100 | out: pToken=0x19f100) returned 0x0
	[0255.950] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0255.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a094e8, riid=0x19f130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6a094e8) returned 0x0
	[0255.950] WbemDefPath:IUnknown:AddRef (This=0x6a094e8) returned 0x3
	[0255.950] WbemDefPath:IUnknown:Release (This=0x6a094e8) returned 0x2
	[0255.950] WbemDefPath:IWbemPath:SetText (This=0x6a094e8, uMode=0x4, pszPath="ROOT\\SecurityCenter2") returned 0x0
	[0255.950] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a094e8, puCount=0x19f2ac | out: puCount=0x19f2ac*=0x2) returned 0x0
	[0255.951] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f2a8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2a8*=0x19, pszText=0x0) returned 0x0
	[0255.951] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f2a8*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2a8*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0255.951] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a094e8, puCount=0x19f298 | out: puCount=0x19f298*=0x2) returned 0x0
	[0255.951] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f294*=0x0, pszText=0x0 | out: puBuffLength=0x19f294*=0x19, pszText=0x0) returned 0x0
	[0255.951] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f294*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f294*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0255.951] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f22c | out: ppv=0x19f22c*=0x66b664) returned 0x0
	[0255.951] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f224 | out: pAptType=0x19f224*=1) returned 0x0
	[0255.951] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f228 | out: ppvObject=0x19f228*=0x0) returned 0x80004002
	[0255.951] IUnknown:Release (This=0x66b664) returned 0x1
	[0255.952] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee48 | out: ppv=0x19ee48*=0x6a0e770) returned 0x0
	[0255.952] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0e770, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x0) returned 0x80004002
	[0255.952] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0e770, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69b9928) returned 0x0
	[0255.952] WbemLocator:IUnknown:Release (This=0x6a0e770) returned 0x0
	[0255.952] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec94 | out: ppvObject=0x19ec94*=0x69b9928) returned 0x0
	[0255.952] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec50 | out: ppvObject=0x19ec50*=0x0) returned 0x80004002
	[0255.952] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0255.952] WbemLocator:IUnknown:AddRef (This=0x69b9928) returned 0x3
	[0255.952] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0255.952] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0255.952] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x0) returned 0x80004002
	[0255.952] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0255.952] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0255.952] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x0) returned 0x80004002
	[0255.953] WbemLocator:IUnknown:Release (This=0x69b9928) returned 0x2
	[0255.953] WbemLocator:IUnknown:Release (This=0x69b9928) returned 0x1
	[0255.953] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0255.953] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0255.953] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9928, riid=0x19f070*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f06c | out: ppvObject=0x19f06c*=0x69b9928) returned 0x0
	[0255.953] WbemLocator:IUnknown:AddRef (This=0x69b9928) returned 0x3
	[0255.953] WbemLocator:IUnknown:Release (This=0x69b9928) returned 0x2
	[0255.953] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a094e8, puCount=0x19f208 | out: puCount=0x19f208*=0x2) returned 0x0
	[0255.953] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=8, puBuffLength=0x19f204*=0x0, pszText=0x0 | out: puBuffLength=0x19f204*=0x19, pszText=0x0) returned 0x0
	[0255.953] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=8, puBuffLength=0x19f204*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f204*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0255.953] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0cc | out: ppv=0x19f0cc*=0x69b9798) returned 0x0
	[0255.953] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b9798, strNetworkResource="\\\\.\\ROOT\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f174 | out: ppNamespace=0x19f174*=0x709c58) returned 0x0
	[0255.990] WbemLocator:IUnknown:QueryInterface (in: This=0x709c58, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19effc | out: ppvObject=0x19effc*=0x705ad4) returned 0x0
	[0255.990] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x705ad4, pProxy=0x709c58, pAuthnSvc=0x19f04c, pAuthzSvc=0x19f048, pServerPrincName=0x19f040, pAuthnLevel=0x19f044, pImpLevel=0x19f034, pAuthInfo=0x19f038, pCapabilites=0x19f03c | out: pAuthnSvc=0x19f04c*=0xa, pAuthzSvc=0x19f048*=0x0, pServerPrincName=0x19f040, pAuthnLevel=0x19f044*=0x6, pImpLevel=0x19f034*=0x2, pAuthInfo=0x19f038, pCapabilites=0x19f03c*=0x1) returned 0x0
	[0255.990] WbemLocator:IUnknown:Release (This=0x705ad4) returned 0x1
	[0255.990] WbemLocator:IUnknown:QueryInterface (in: This=0x709c58, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eff0 | out: ppvObject=0x19eff0*=0x705af8) returned 0x0
	[0255.990] WbemLocator:IUnknown:QueryInterface (in: This=0x709c58, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efec | out: ppvObject=0x19efec*=0x705ad4) returned 0x0
	[0255.990] WbemLocator:IClientSecurity:SetBlanket (This=0x705ad4, pProxy=0x709c58, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0255.991] WbemLocator:IUnknown:Release (This=0x705ad4) returned 0x2
	[0255.991] WbemLocator:IUnknown:Release (This=0x705af8) returned 0x1
	[0255.991] CoTaskMemFree (pv=0x6a11f58) 
	[0255.991] WbemLocator:IUnknown:Release (This=0x69b9798) returned 0x0
	[0255.991] WbemLocator:IUnknown:QueryInterface (in: This=0x709c58, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebec | out: ppvObject=0x19ebec*=0x705af8) returned 0x0
	[0255.991] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eba8 | out: ppvObject=0x19eba8*=0x0) returned 0x80004002
	[0255.991] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x0) returned 0x80004002
	[0255.994] WbemLocator:IUnknown:QueryInterface (in: This=0x709c58, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e79c | out: ppvObject=0x19e79c*=0x0) returned 0x80004002
	[0255.994] WbemLocator:IUnknown:AddRef (This=0x705af8) returned 0x3
	[0255.994] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x0) returned 0x80004002
	[0255.994] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4b4 | out: ppvObject=0x19e4b4*=0x0) returned 0x80004002
	[0255.994] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4c0 | out: ppvObject=0x19e4c0*=0x705a54) returned 0x0
	[0255.994] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705a54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4c8 | out: pCid=0x19e4c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0255.994] WbemLocator:IUnknown:Release (This=0x705a54) returned 0x3
	[0255.994] CoGetContextToken (in: pToken=0x19e520 | out: pToken=0x19e520) returned 0x0
	[0255.995] CoGetContextToken (in: pToken=0x19e928 | out: pToken=0x19e928) returned 0x0
	[0255.995] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9b8 | out: ppvObject=0x19e9b8*=0x705adc) returned 0x0
	[0255.995] WbemLocator:IRpcOptions:Query (in: This=0x705adc, pPrx=0x705af8, dwProperty=2, pdwValue=0x19e9e0 | out: pdwValue=0x19e9e0) returned 0x80004002
	[0255.995] WbemLocator:IUnknown:Release (This=0x705adc) returned 0x3
	[0255.995] WbemLocator:IUnknown:Release (This=0x705af8) returned 0x2
	[0255.995] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0255.995] CoGetContextToken (in: pToken=0x19ee60 | out: pToken=0x19ee60) returned 0x0
	[0255.995] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x19ef30*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef2c | out: ppvObject=0x19ef2c*=0x709c58) returned 0x0
	[0255.995] WbemLocator:IUnknown:AddRef (This=0x709c58) returned 0x4
	[0255.995] WbemLocator:IUnknown:Release (This=0x709c58) returned 0x3
	[0255.995] WbemLocator:IUnknown:Release (This=0x709c58) returned 0x2
	[0255.995] SysStringLen (param_1=0x0) returned 0x0
	[0255.995] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0255.995] WbemLocator:IUnknown:AddRef (This=0x705af8) returned 0x3
	[0255.995] WbemLocator:IUnknown:QueryInterface (in: This=0x705af8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed9c | out: ppvObject=0x19ed9c*=0x705af8) returned 0x0
	[0255.995] WbemLocator:IUnknown:Release (This=0x705af8) returned 0x3
	[0255.995] WbemLocator:IUnknown:Release (This=0x705af8) returned 0x2
	[0255.995] CoGetContextToken (in: pToken=0x19f000 | out: pToken=0x19f000) returned 0x0
	[0255.995] WbemLocator:IUnknown:AddRef (This=0x709c58) returned 0x3
	[0255.995] IWbemServices:ExecQuery (in: This=0x709c58, strQueryLanguage="WQL", strQuery="SELECT * FROM AntivirusProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f210 | out: ppEnum=0x19f210*=0x6f3b98) returned 0x0
	[0255.998] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6f3b9c) returned 0x0
	[0255.998] IClientSecurity:QueryBlanket (in: This=0x6f3b9c, pProxy=0x6f3b98, pAuthnSvc=0x19f0c4, pAuthzSvc=0x19f0c0, pServerPrincName=0x19f0b8, pAuthnLevel=0x19f0bc, pImpLevel=0x19f0ac, pAuthInfo=0x19f0b0, pCapabilites=0x19f0b4 | out: pAuthnSvc=0x19f0c4*=0xa, pAuthzSvc=0x19f0c0*=0x0, pServerPrincName=0x19f0b8, pAuthnLevel=0x19f0bc*=0x6, pImpLevel=0x19f0ac*=0x2, pAuthInfo=0x19f0b0, pCapabilites=0x19f0b4*=0x1) returned 0x0
	[0255.998] IUnknown:Release (This=0x6f3b9c) returned 0x1
	[0255.998] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f068 | out: ppvObject=0x19f068*=0x705cf8) returned 0x0
	[0255.998] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f064 | out: ppvObject=0x19f064*=0x6f3b9c) returned 0x0
	[0255.998] IClientSecurity:SetBlanket (This=0x6f3b9c, pProxy=0x6f3b98, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.073] IUnknown:Release (This=0x6f3b9c) returned 0x2
	[0256.073] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x1
	[0256.073] CoTaskMemFree (pv=0x6a11ef8) 
	[0256.074] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec60 | out: ppvObject=0x19ec60*=0x705cf8) returned 0x0
	[0256.074] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x0) returned 0x80004002
	[0256.075] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x0) returned 0x80004002
	[0256.075] IUnknown:QueryInterface (in: This=0x6f3b98, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e814 | out: ppvObject=0x19e814*=0x0) returned 0x80004002
	[0256.076] WbemLocator:IUnknown:AddRef (This=0x705cf8) returned 0x3
	[0256.076] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0256.076] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e52c | out: ppvObject=0x19e52c*=0x0) returned 0x80004002
	[0256.076] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e538 | out: ppvObject=0x19e538*=0x705c54) returned 0x0
	[0256.076] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705c54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e540 | out: pCid=0x19e540*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.076] WbemLocator:IUnknown:Release (This=0x705c54) returned 0x3
	[0256.076] CoGetContextToken (in: pToken=0x19e598 | out: pToken=0x19e598) returned 0x0
	[0256.076] CoGetContextToken (in: pToken=0x19e9a0 | out: pToken=0x19e9a0) returned 0x0
	[0256.076] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea30 | out: ppvObject=0x19ea30*=0x705cdc) returned 0x0
	[0256.076] WbemLocator:IRpcOptions:Query (in: This=0x705cdc, pPrx=0x705cf8, dwProperty=2, pdwValue=0x19ea58 | out: pdwValue=0x19ea58) returned 0x80004002
	[0256.076] WbemLocator:IUnknown:Release (This=0x705cdc) returned 0x3
	[0256.076] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x2
	[0256.076] CoGetContextToken (in: pToken=0x19ef70 | out: pToken=0x19ef70) returned 0x0
	[0256.076] CoGetContextToken (in: pToken=0x19eed0 | out: pToken=0x19eed0) returned 0x0
	[0256.077] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x19efa0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef9c | out: ppvObject=0x19ef9c*=0x6f3b98) returned 0x0
	[0256.077] IUnknown:AddRef (This=0x6f3b98) returned 0x4
	[0256.077] IUnknown:Release (This=0x6f3b98) returned 0x3
	[0256.077] IUnknown:Release (This=0x6f3b98) returned 0x2
	[0256.077] WbemLocator:IUnknown:Release (This=0x709c58) returned 0x2
	[0256.077] SysStringLen (param_1=0x0) returned 0x0
	[0256.077] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a094e8, puCount=0x19f25c | out: puCount=0x19f25c*=0x2) returned 0x0
	[0256.077] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f258*=0x0, pszText=0x0 | out: puBuffLength=0x19f258*=0x19, pszText=0x0) returned 0x0
	[0256.077] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f258*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f258*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.077] CoGetContextToken (in: pToken=0x19f0a8 | out: pToken=0x19f0a8) returned 0x0
	[0256.077] IUnknown:AddRef (This=0x6f3b98) returned 0x3
	[0256.077] IEnumWbemClassObject:Clone (in: This=0x6f3b98, ppEnum=0x19f268 | out: ppEnum=0x19f268*=0x6f3c60) returned 0x0
	[0256.079] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6f3c64) returned 0x0
	[0256.079] IClientSecurity:QueryBlanket (in: This=0x6f3c64, pProxy=0x6f3c60, pAuthnSvc=0x19f17c, pAuthzSvc=0x19f178, pServerPrincName=0x19f170, pAuthnLevel=0x19f174, pImpLevel=0x19f164, pAuthInfo=0x19f168, pCapabilites=0x19f16c | out: pAuthnSvc=0x19f17c*=0xa, pAuthzSvc=0x19f178*=0x0, pServerPrincName=0x19f170, pAuthnLevel=0x19f174*=0x6, pImpLevel=0x19f164*=0x2, pAuthInfo=0x19f168, pCapabilites=0x19f16c*=0x1) returned 0x0
	[0256.079] IUnknown:Release (This=0x6f3c64) returned 0x1
	[0256.079] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f120 | out: ppvObject=0x19f120*=0x7062f8) returned 0x0
	[0256.079] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f11c | out: ppvObject=0x19f11c*=0x6f3c64) returned 0x0
	[0256.080] IClientSecurity:SetBlanket (This=0x6f3c64, pProxy=0x6f3c60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.085] IUnknown:Release (This=0x6f3c64) returned 0x2
	[0256.085] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x1
	[0256.085] CoTaskMemFree (pv=0x6a11e68) 
	[0256.085] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed08 | out: ppvObject=0x19ed08*=0x7062f8) returned 0x0
	[0256.086] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x0) returned 0x80004002
	[0256.086] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eae4 | out: ppvObject=0x19eae4*=0x0) returned 0x80004002
	[0256.086] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8bc | out: ppvObject=0x19e8bc*=0x0) returned 0x80004002
	[0256.087] WbemLocator:IUnknown:AddRef (This=0x7062f8) returned 0x3
	[0256.087] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e624 | out: ppvObject=0x19e624*=0x0) returned 0x80004002
	[0256.087] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5d4 | out: ppvObject=0x19e5d4*=0x0) returned 0x80004002
	[0256.087] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5e0 | out: ppvObject=0x19e5e0*=0x706254) returned 0x0
	[0256.087] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706254, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5e8 | out: pCid=0x19e5e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.087] WbemLocator:IUnknown:Release (This=0x706254) returned 0x3
	[0256.087] CoGetContextToken (in: pToken=0x19e640 | out: pToken=0x19e640) returned 0x0
	[0256.087] CoGetContextToken (in: pToken=0x19ea48 | out: pToken=0x19ea48) returned 0x0
	[0256.087] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ead8 | out: ppvObject=0x19ead8*=0x7062dc) returned 0x0
	[0256.087] WbemLocator:IRpcOptions:Query (in: This=0x7062dc, pPrx=0x7062f8, dwProperty=2, pdwValue=0x19eb00 | out: pdwValue=0x19eb00) returned 0x80004002
	[0256.087] WbemLocator:IUnknown:Release (This=0x7062dc) returned 0x3
	[0256.088] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x2
	[0256.088] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0256.088] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0256.088] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x19f048*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x6f3c60) returned 0x0
	[0256.088] IUnknown:AddRef (This=0x6f3c60) returned 0x4
	[0256.088] IUnknown:Release (This=0x6f3c60) returned 0x3
	[0256.088] IUnknown:Release (This=0x6f3c60) returned 0x2
	[0256.088] IUnknown:Release (This=0x6f3b98) returned 0x2
	[0256.088] SysStringLen (param_1=0x0) returned 0x0
	[0256.088] IEnumWbemClassObject:Reset (This=0x6f3c60) returned 0x0
	[0256.088] CoTaskMemAlloc (cb=0x4) returned 0x69b9798
	[0256.089] IEnumWbemClassObject:Next (in: This=0x6f3c60, lTimeout=-1, uCount=0x1, apObjects=0x69b9798, puReturned=0x2bd2f44 | out: apObjects=0x69b9798*=0x6a0cdf8, puReturned=0x2bd2f44*=0x1) returned 0x0
	[0256.090] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e8c8 | out: ppvObject=0x19e8c8*=0x6a0cdf8) returned 0x0
	[0256.090] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e884 | out: ppvObject=0x19e884*=0x0) returned 0x80004002
	[0256.090] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6a4 | out: ppvObject=0x19e6a4*=0x0) returned 0x80004002
	[0256.090] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e47c | out: ppvObject=0x19e47c*=0x0) returned 0x80004002
	[0256.090] IUnknown:AddRef (This=0x6a0cdf8) returned 0x3
	[0256.090] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e1e4 | out: ppvObject=0x19e1e4*=0x0) returned 0x80004002
	[0256.090] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0256.090] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1a0 | out: ppvObject=0x19e1a0*=0x6a0cdfc) returned 0x0
	[0256.090] IMarshal:GetUnmarshalClass (in: This=0x6a0cdfc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e1a8 | out: pCid=0x19e1a8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0256.090] IUnknown:Release (This=0x6a0cdfc) returned 0x3
	[0256.090] CoGetContextToken (in: pToken=0x19e200 | out: pToken=0x19e200) returned 0x0
	[0256.091] CoGetContextToken (in: pToken=0x19e608 | out: pToken=0x19e608) returned 0x0
	[0256.091] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e698 | out: ppvObject=0x19e698*=0x0) returned 0x80004002
	[0256.091] IUnknown:Release (This=0x6a0cdf8) returned 0x2
	[0256.091] CoGetContextToken (in: pToken=0x19ebd8 | out: pToken=0x19ebd8) returned 0x0
	[0256.091] CoGetContextToken (in: pToken=0x19eb38 | out: pToken=0x19eb38) returned 0x0
	[0256.091] IUnknown:QueryInterface (in: This=0x6a0cdf8, riid=0x19ec08*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec04 | out: ppvObject=0x19ec04*=0x6a0cdf8) returned 0x0
	[0256.091] IUnknown:AddRef (This=0x6a0cdf8) returned 0x4
	[0256.091] IUnknown:Release (This=0x6a0cdf8) returned 0x3
	[0256.091] IUnknown:Release (This=0x6a0cdf8) returned 0x2
	[0256.091] CoTaskMemFree (pv=0x69b9798) 
	[0256.091] CoGetContextToken (in: pToken=0x19ef48 | out: pToken=0x19ef48) returned 0x0
	[0256.091] IUnknown:AddRef (This=0x6a0cdf8) returned 0x3
	[0256.092] IWbemClassObject:Get (in: This=0x6a0cdf8, wszName="__GENUS", lFlags=0, pVal=0x19f258*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2d8*=0, plFlavor=0x19f2d4*=0 | out: pVal=0x19f258*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f2d8*=3, plFlavor=0x19f2d4*=64) returned 0x0
	[0256.092] IWbemClassObject:Get (in: This=0x6a0cdf8, wszName="__PATH", lFlags=0, pVal=0x19f23c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2c0*=0, plFlavor=0x19f2bc*=0 | out: pVal=0x19f23c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"", varVal2=0x0), pType=0x19f2c0*=8, plFlavor=0x19f2bc*=64) returned 0x0
	[0256.092] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xc8
	[0256.092] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xc8
	[0256.092] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f268 | out: ppv=0x19f268*=0x66b664) returned 0x0
	[0256.092] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f260 | out: pAptType=0x19f260*=1) returned 0x0
	[0256.092] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f264 | out: ppvObject=0x19f264*=0x0) returned 0x80004002
	[0256.092] IUnknown:Release (This=0x66b664) returned 0x1
	[0256.094] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebd0 | out: ppv=0x19ebd0*=0x69b9798) returned 0x0
	[0256.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9798, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ede8 | out: ppvObject=0x19ede8*=0x0) returned 0x80004002
	[0256.095] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9798, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edfc | out: ppvObject=0x19edfc*=0x6a09558) returned 0x0
	[0256.095] WbemDefPath:IUnknown:Release (This=0x69b9798) returned 0x0
	[0256.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09558, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea1c | out: ppvObject=0x19ea1c*=0x6a09558) returned 0x0
	[0256.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09558, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9d8 | out: ppvObject=0x19e9d8*=0x0) returned 0x80004002
	[0256.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09558, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5cc | out: ppvObject=0x19e5cc*=0x0) returned 0x80004002
	[0256.095] WbemDefPath:IUnknown:AddRef (This=0x6a09558) returned 0x3
	[0256.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09558, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e334 | out: ppvObject=0x19e334*=0x0) returned 0x80004002
	[0256.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09558, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0256.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09558, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2f0 | out: ppvObject=0x19e2f0*=0x6a0e6e0) returned 0x0
	[0256.095] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0e6e0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2f8 | out: pCid=0x19e2f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.095] WbemDefPath:IUnknown:Release (This=0x6a0e6e0) returned 0x3
	[0256.095] CoGetContextToken (in: pToken=0x19e350 | out: pToken=0x19e350) returned 0x0
	[0256.096] CoGetContextToken (in: pToken=0x19e758 | out: pToken=0x19e758) returned 0x0
	[0256.096] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09558, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7e8 | out: ppvObject=0x19e7e8*=0x0) returned 0x80004002
	[0256.096] WbemDefPath:IUnknown:Release (This=0x6a09558) returned 0x2
	[0256.096] WbemDefPath:IUnknown:Release (This=0x6a09558) returned 0x1
	[0256.096] CoGetContextToken (in: pToken=0x19f0e0 | out: pToken=0x19f0e0) returned 0x0
	[0256.096] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0256.096] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09558, riid=0x19f110*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f10c | out: ppvObject=0x19f10c*=0x6a09558) returned 0x0
	[0256.096] WbemDefPath:IUnknown:AddRef (This=0x6a09558) returned 0x3
	[0256.096] WbemDefPath:IUnknown:Release (This=0x6a09558) returned 0x2
	[0256.096] WbemDefPath:IWbemPath:SetText (This=0x6a09558, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0x0
	[0256.096] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a094e8, puCount=0x19f294 | out: puCount=0x19f294*=0x2) returned 0x0
	[0256.096] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f290*=0x0, pszText=0x0 | out: puBuffLength=0x19f290*=0x19, pszText=0x0) returned 0x0
	[0256.096] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f290*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f290*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.096] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a094e8, puCount=0x19f260 | out: puCount=0x19f260*=0x2) returned 0x0
	[0256.096] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f25c*=0x0, pszText=0x0 | out: puBuffLength=0x19f25c*=0x19, pszText=0x0) returned 0x0
	[0256.097] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f25c*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f25c*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.097] IWbemClassObject:Get (in: This=0x6a0cdf8, wszName="displayName", lFlags=0, pVal=0x19f25c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd3824*=0, plFlavor=0x2bd3828*=0 | out: pVal=0x19f25c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2bd3824*=8, plFlavor=0x2bd3828*=0) returned 0x0
	[0256.097] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.097] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.097] IWbemClassObject:Get (in: This=0x6a0cdf8, wszName="displayName", lFlags=0, pVal=0x19f264*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd3824*=8, plFlavor=0x2bd3828*=0 | out: pVal=0x19f264*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2bd3824*=8, plFlavor=0x2bd3828*=0) returned 0x0
	[0256.097] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.097] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.097] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a094e8, puCount=0x19f260 | out: puCount=0x19f260*=0x2) returned 0x0
	[0256.097] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f25c*=0x0, pszText=0x0 | out: puBuffLength=0x19f25c*=0x19, pszText=0x0) returned 0x0
	[0256.098] WbemDefPath:IWbemPath:GetText (in: This=0x6a094e8, lFlags=4, puBuffLength=0x19f25c*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f25c*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.098] IWbemClassObject:Get (in: This=0x6a0cdf8, wszName="displayName", lFlags=0, pVal=0x19f25c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd3934*=0, plFlavor=0x2bd3938*=0 | out: pVal=0x19f25c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2bd3934*=8, plFlavor=0x2bd3938*=0) returned 0x0
	[0256.098] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.098] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.098] IWbemClassObject:Get (in: This=0x6a0cdf8, wszName="displayName", lFlags=0, pVal=0x19f264*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd3934*=8, plFlavor=0x2bd3938*=0 | out: pVal=0x19f264*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2bd3934*=8, plFlavor=0x2bd3938*=0) returned 0x0
	[0256.098] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.098] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.098] CoTaskMemAlloc (cb=0x4) returned 0x69b9798
	[0256.098] IEnumWbemClassObject:Next (in: This=0x6f3c60, lTimeout=-1, uCount=0x1, apObjects=0x69b9798, puReturned=0x2bd2f44 | out: apObjects=0x69b9798*=0x0, puReturned=0x2bd2f44*=0x0) returned 0x1
	[0256.099] CoTaskMemFree (pv=0x69b9798) 
	[0256.099] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0256.099] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x1
	[0256.099] IUnknown:Release (This=0x6f3c60) returned 0x0
	[0256.104] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0256.104] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x1
	[0256.104] IUnknown:Release (This=0x6f3b98) returned 0x0
	[0256.105] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f284 | out: ppv=0x19f284*=0x66b664) returned 0x0
	[0256.106] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f27c | out: pAptType=0x19f27c*=1) returned 0x0
	[0256.106] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f280 | out: ppvObject=0x19f280*=0x0) returned 0x80004002
	[0256.106] IUnknown:Release (This=0x66b664) returned 0x1
	[0256.107] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebf0 | out: ppv=0x19ebf0*=0x69b9898) returned 0x0
	[0256.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9898, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee08 | out: ppvObject=0x19ee08*=0x0) returned 0x80004002
	[0256.107] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9898, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee1c | out: ppvObject=0x19ee1c*=0x6a09868) returned 0x0
	[0256.107] WbemDefPath:IUnknown:Release (This=0x69b9898) returned 0x0
	[0256.107] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09868, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x6a09868) returned 0x0
	[0256.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09868, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9f8 | out: ppvObject=0x19e9f8*=0x0) returned 0x80004002
	[0256.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09868, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5ec | out: ppvObject=0x19e5ec*=0x0) returned 0x80004002
	[0256.108] WbemDefPath:IUnknown:AddRef (This=0x6a09868) returned 0x3
	[0256.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09868, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e354 | out: ppvObject=0x19e354*=0x0) returned 0x80004002
	[0256.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09868, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e304 | out: ppvObject=0x19e304*=0x0) returned 0x80004002
	[0256.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09868, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e310 | out: ppvObject=0x19e310*=0x6a0e860) returned 0x0
	[0256.108] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0e860, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e318 | out: pCid=0x19e318*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.108] WbemDefPath:IUnknown:Release (This=0x6a0e860) returned 0x3
	[0256.108] CoGetContextToken (in: pToken=0x19e370 | out: pToken=0x19e370) returned 0x0
	[0256.108] CoGetContextToken (in: pToken=0x19e778 | out: pToken=0x19e778) returned 0x0
	[0256.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09868, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e808 | out: ppvObject=0x19e808*=0x0) returned 0x80004002
	[0256.108] WbemDefPath:IUnknown:Release (This=0x6a09868) returned 0x2
	[0256.108] WbemDefPath:IUnknown:Release (This=0x6a09868) returned 0x1
	[0256.109] CoGetContextToken (in: pToken=0x19f100 | out: pToken=0x19f100) returned 0x0
	[0256.109] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0256.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09868, riid=0x19f130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6a09868) returned 0x0
	[0256.109] WbemDefPath:IUnknown:AddRef (This=0x6a09868) returned 0x3
	[0256.109] WbemDefPath:IUnknown:Release (This=0x6a09868) returned 0x2
	[0256.109] WbemDefPath:IWbemPath:SetText (This=0x6a09868, uMode=0x4, pszPath="ROOT\\SecurityCenter2") returned 0x0
	[0256.109] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09868, puCount=0x19f2ac | out: puCount=0x19f2ac*=0x2) returned 0x0
	[0256.109] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f2a8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2a8*=0x19, pszText=0x0) returned 0x0
	[0256.109] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f2a8*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2a8*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.109] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09868, puCount=0x19f298 | out: puCount=0x19f298*=0x2) returned 0x0
	[0256.109] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f294*=0x0, pszText=0x0 | out: puBuffLength=0x19f294*=0x19, pszText=0x0) returned 0x0
	[0256.109] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f294*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f294*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.110] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f22c | out: ppv=0x19f22c*=0x66b664) returned 0x0
	[0256.110] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f224 | out: pAptType=0x19f224*=1) returned 0x0
	[0256.110] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f228 | out: ppvObject=0x19f228*=0x0) returned 0x80004002
	[0256.110] IUnknown:Release (This=0x66b664) returned 0x1
	[0256.110] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee48 | out: ppv=0x19ee48*=0x6a0e9e0) returned 0x0
	[0256.111] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0e9e0, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x0) returned 0x80004002
	[0256.111] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0e9e0, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69b9738) returned 0x0
	[0256.111] WbemLocator:IUnknown:Release (This=0x6a0e9e0) returned 0x0
	[0256.111] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec94 | out: ppvObject=0x19ec94*=0x69b9738) returned 0x0
	[0256.111] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec50 | out: ppvObject=0x19ec50*=0x0) returned 0x80004002
	[0256.111] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0256.111] WbemLocator:IUnknown:AddRef (This=0x69b9738) returned 0x3
	[0256.111] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0256.111] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0256.111] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x0) returned 0x80004002
	[0256.111] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0256.115] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0256.115] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x0) returned 0x80004002
	[0256.115] WbemLocator:IUnknown:Release (This=0x69b9738) returned 0x2
	[0256.115] WbemLocator:IUnknown:Release (This=0x69b9738) returned 0x1
	[0256.115] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0256.115] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0256.115] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9738, riid=0x19f070*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f06c | out: ppvObject=0x19f06c*=0x69b9738) returned 0x0
	[0256.115] WbemLocator:IUnknown:AddRef (This=0x69b9738) returned 0x3
	[0256.115] WbemLocator:IUnknown:Release (This=0x69b9738) returned 0x2
	[0256.115] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09868, puCount=0x19f208 | out: puCount=0x19f208*=0x2) returned 0x0
	[0256.115] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=8, puBuffLength=0x19f204*=0x0, pszText=0x0 | out: puBuffLength=0x19f204*=0x19, pszText=0x0) returned 0x0
	[0256.115] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=8, puBuffLength=0x19f204*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f204*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.115] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0cc | out: ppv=0x19f0cc*=0x69b9768) returned 0x0
	[0256.115] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b9768, strNetworkResource="\\\\.\\ROOT\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f174 | out: ppNamespace=0x19f174*=0x6f90c8) returned 0x0
	[0256.136] WbemLocator:IUnknown:QueryInterface (in: This=0x6f90c8, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19effc | out: ppvObject=0x19effc*=0x704dd4) returned 0x0
	[0256.136] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x704dd4, pProxy=0x6f90c8, pAuthnSvc=0x19f04c, pAuthzSvc=0x19f048, pServerPrincName=0x19f040, pAuthnLevel=0x19f044, pImpLevel=0x19f034, pAuthInfo=0x19f038, pCapabilites=0x19f03c | out: pAuthnSvc=0x19f04c*=0xa, pAuthzSvc=0x19f048*=0x0, pServerPrincName=0x19f040, pAuthnLevel=0x19f044*=0x6, pImpLevel=0x19f034*=0x2, pAuthInfo=0x19f038, pCapabilites=0x19f03c*=0x1) returned 0x0
	[0256.136] WbemLocator:IUnknown:Release (This=0x704dd4) returned 0x1
	[0256.136] WbemLocator:IUnknown:QueryInterface (in: This=0x6f90c8, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eff0 | out: ppvObject=0x19eff0*=0x704df8) returned 0x0
	[0256.136] WbemLocator:IUnknown:QueryInterface (in: This=0x6f90c8, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efec | out: ppvObject=0x19efec*=0x704dd4) returned 0x0
	[0256.136] WbemLocator:IClientSecurity:SetBlanket (This=0x704dd4, pProxy=0x6f90c8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.136] WbemLocator:IUnknown:Release (This=0x704dd4) returned 0x2
	[0256.137] WbemLocator:IUnknown:Release (This=0x704df8) returned 0x1
	[0256.137] CoTaskMemFree (pv=0x6a11b68) 
	[0256.137] WbemLocator:IUnknown:Release (This=0x69b9768) returned 0x0
	[0256.137] WbemLocator:IUnknown:QueryInterface (in: This=0x6f90c8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebec | out: ppvObject=0x19ebec*=0x704df8) returned 0x0
	[0256.137] WbemLocator:IUnknown:QueryInterface (in: This=0x704df8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eba8 | out: ppvObject=0x19eba8*=0x0) returned 0x80004002
	[0256.138] WbemLocator:IUnknown:QueryInterface (in: This=0x704df8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x0) returned 0x80004002
	[0256.140] WbemLocator:IUnknown:QueryInterface (in: This=0x6f90c8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e79c | out: ppvObject=0x19e79c*=0x0) returned 0x80004002
	[0256.141] WbemLocator:IUnknown:AddRef (This=0x704df8) returned 0x3
	[0256.141] WbemLocator:IUnknown:QueryInterface (in: This=0x704df8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x0) returned 0x80004002
	[0256.141] WbemLocator:IUnknown:QueryInterface (in: This=0x704df8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4b4 | out: ppvObject=0x19e4b4*=0x0) returned 0x80004002
	[0256.141] WbemLocator:IUnknown:QueryInterface (in: This=0x704df8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4c0 | out: ppvObject=0x19e4c0*=0x704d54) returned 0x0
	[0256.141] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x704d54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4c8 | out: pCid=0x19e4c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.141] WbemLocator:IUnknown:Release (This=0x704d54) returned 0x3
	[0256.141] CoGetContextToken (in: pToken=0x19e520 | out: pToken=0x19e520) returned 0x0
	[0256.141] CoGetContextToken (in: pToken=0x19e928 | out: pToken=0x19e928) returned 0x0
	[0256.141] WbemLocator:IUnknown:QueryInterface (in: This=0x704df8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9b8 | out: ppvObject=0x19e9b8*=0x704ddc) returned 0x0
	[0256.141] WbemLocator:IRpcOptions:Query (in: This=0x704ddc, pPrx=0x704df8, dwProperty=2, pdwValue=0x19e9e0 | out: pdwValue=0x19e9e0) returned 0x80004002
	[0256.141] WbemLocator:IUnknown:Release (This=0x704ddc) returned 0x3
	[0256.142] WbemLocator:IUnknown:Release (This=0x704df8) returned 0x2
	[0256.142] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0256.142] CoGetContextToken (in: pToken=0x19ee60 | out: pToken=0x19ee60) returned 0x0
	[0256.142] WbemLocator:IUnknown:QueryInterface (in: This=0x704df8, riid=0x19ef30*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef2c | out: ppvObject=0x19ef2c*=0x6f90c8) returned 0x0
	[0256.142] WbemLocator:IUnknown:AddRef (This=0x6f90c8) returned 0x4
	[0256.142] WbemLocator:IUnknown:Release (This=0x6f90c8) returned 0x3
	[0256.142] WbemLocator:IUnknown:Release (This=0x6f90c8) returned 0x2
	[0256.142] SysStringLen (param_1=0x0) returned 0x0
	[0256.142] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0256.142] WbemLocator:IUnknown:AddRef (This=0x704df8) returned 0x3
	[0256.142] WbemLocator:IUnknown:QueryInterface (in: This=0x704df8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed9c | out: ppvObject=0x19ed9c*=0x704df8) returned 0x0
	[0256.142] WbemLocator:IUnknown:Release (This=0x704df8) returned 0x3
	[0256.142] WbemLocator:IUnknown:Release (This=0x704df8) returned 0x2
	[0256.142] CoGetContextToken (in: pToken=0x19f000 | out: pToken=0x19f000) returned 0x0
	[0256.142] WbemLocator:IUnknown:AddRef (This=0x6f90c8) returned 0x3
	[0256.142] IWbemServices:ExecQuery (in: This=0x6f90c8, strQueryLanguage="WQL", strQuery="SELECT * FROM AntiSpyWareProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f210 | out: ppEnum=0x19f210*=0x6f37b0) returned 0x0
	[0256.153] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f070 | out: ppvObject=0x19f070*=0x6f37b4) returned 0x0
	[0256.153] IClientSecurity:QueryBlanket (in: This=0x6f37b4, pProxy=0x6f37b0, pAuthnSvc=0x19f0c0, pAuthzSvc=0x19f0bc, pServerPrincName=0x19f0b4, pAuthnLevel=0x19f0b8, pImpLevel=0x19f0a8, pAuthInfo=0x19f0ac, pCapabilites=0x19f0b0 | out: pAuthnSvc=0x19f0c0*=0xa, pAuthzSvc=0x19f0bc*=0x0, pServerPrincName=0x19f0b4, pAuthnLevel=0x19f0b8*=0x6, pImpLevel=0x19f0a8*=0x2, pAuthInfo=0x19f0ac, pCapabilites=0x19f0b0*=0x1) returned 0x0
	[0256.153] IUnknown:Release (This=0x6f37b4) returned 0x1
	[0256.153] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f064 | out: ppvObject=0x19f064*=0x7063f8) returned 0x0
	[0256.153] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x6f37b4) returned 0x0
	[0256.153] IClientSecurity:SetBlanket (This=0x6f37b4, pProxy=0x6f37b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.161] IUnknown:Release (This=0x6f37b4) returned 0x2
	[0256.161] WbemLocator:IUnknown:Release (This=0x7063f8) returned 0x1
	[0256.161] CoTaskMemFree (pv=0x6a11ce8) 
	[0256.162] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec5c | out: ppvObject=0x19ec5c*=0x7063f8) returned 0x0
	[0256.162] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec18 | out: ppvObject=0x19ec18*=0x0) returned 0x80004002
	[0256.163] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea34 | out: ppvObject=0x19ea34*=0x0) returned 0x80004002
	[0256.164] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e80c | out: ppvObject=0x19e80c*=0x0) returned 0x80004002
	[0256.165] WbemLocator:IUnknown:AddRef (This=0x7063f8) returned 0x3
	[0256.165] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e574 | out: ppvObject=0x19e574*=0x0) returned 0x80004002
	[0256.165] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e524 | out: ppvObject=0x19e524*=0x0) returned 0x80004002
	[0256.165] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e530 | out: ppvObject=0x19e530*=0x706354) returned 0x0
	[0256.165] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706354, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e538 | out: pCid=0x19e538*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.165] WbemLocator:IUnknown:Release (This=0x706354) returned 0x3
	[0256.166] CoGetContextToken (in: pToken=0x19e590 | out: pToken=0x19e590) returned 0x0
	[0256.166] CoGetContextToken (in: pToken=0x19e998 | out: pToken=0x19e998) returned 0x0
	[0256.166] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea28 | out: ppvObject=0x19ea28*=0x7063dc) returned 0x0
	[0256.166] WbemLocator:IRpcOptions:Query (in: This=0x7063dc, pPrx=0x7063f8, dwProperty=2, pdwValue=0x19ea50 | out: pdwValue=0x19ea50) returned 0x80004002
	[0256.166] WbemLocator:IUnknown:Release (This=0x7063dc) returned 0x3
	[0256.166] WbemLocator:IUnknown:Release (This=0x7063f8) returned 0x2
	[0256.166] CoGetContextToken (in: pToken=0x19ef70 | out: pToken=0x19ef70) returned 0x0
	[0256.166] CoGetContextToken (in: pToken=0x19eed0 | out: pToken=0x19eed0) returned 0x0
	[0256.166] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x19efa0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef9c | out: ppvObject=0x19ef9c*=0x6f37b0) returned 0x0
	[0256.167] IUnknown:AddRef (This=0x6f37b0) returned 0x4
	[0256.167] IUnknown:Release (This=0x6f37b0) returned 0x3
	[0256.167] IUnknown:Release (This=0x6f37b0) returned 0x2
	[0256.167] WbemLocator:IUnknown:Release (This=0x6f90c8) returned 0x2
	[0256.167] SysStringLen (param_1=0x0) returned 0x0
	[0256.167] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09868, puCount=0x19f25c | out: puCount=0x19f25c*=0x2) returned 0x0
	[0256.167] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f258*=0x0, pszText=0x0 | out: puBuffLength=0x19f258*=0x19, pszText=0x0) returned 0x0
	[0256.167] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f258*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f258*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.167] CoGetContextToken (in: pToken=0x19f0a8 | out: pToken=0x19f0a8) returned 0x0
	[0256.168] IUnknown:AddRef (This=0x6f37b0) returned 0x3
	[0256.168] IEnumWbemClassObject:Clone (in: This=0x6f37b0, ppEnum=0x19f268 | out: ppEnum=0x19f268*=0x6f3940) returned 0x0
	[0256.170] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6f3944) returned 0x0
	[0256.170] IClientSecurity:QueryBlanket (in: This=0x6f3944, pProxy=0x6f3940, pAuthnSvc=0x19f17c, pAuthzSvc=0x19f178, pServerPrincName=0x19f170, pAuthnLevel=0x19f174, pImpLevel=0x19f164, pAuthInfo=0x19f168, pCapabilites=0x19f16c | out: pAuthnSvc=0x19f17c*=0xa, pAuthzSvc=0x19f178*=0x0, pServerPrincName=0x19f170, pAuthnLevel=0x19f174*=0x6, pImpLevel=0x19f164*=0x2, pAuthInfo=0x19f168, pCapabilites=0x19f16c*=0x1) returned 0x0
	[0256.170] IUnknown:Release (This=0x6f3944) returned 0x1
	[0256.170] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f120 | out: ppvObject=0x19f120*=0x7057f8) returned 0x0
	[0256.171] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f11c | out: ppvObject=0x19f11c*=0x6f3944) returned 0x0
	[0256.171] IClientSecurity:SetBlanket (This=0x6f3944, pProxy=0x6f3940, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.174] IUnknown:Release (This=0x6f3944) returned 0x2
	[0256.174] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0256.174] CoTaskMemFree (pv=0x6a11bf8) 
	[0256.174] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed08 | out: ppvObject=0x19ed08*=0x7057f8) returned 0x0
	[0256.174] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x0) returned 0x80004002
	[0256.175] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eae4 | out: ppvObject=0x19eae4*=0x0) returned 0x80004002
	[0256.176] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8bc | out: ppvObject=0x19e8bc*=0x0) returned 0x80004002
	[0256.176] WbemLocator:IUnknown:AddRef (This=0x7057f8) returned 0x3
	[0256.177] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e624 | out: ppvObject=0x19e624*=0x0) returned 0x80004002
	[0256.177] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5d4 | out: ppvObject=0x19e5d4*=0x0) returned 0x80004002
	[0256.177] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5e0 | out: ppvObject=0x19e5e0*=0x705754) returned 0x0
	[0256.177] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705754, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5e8 | out: pCid=0x19e5e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.177] WbemLocator:IUnknown:Release (This=0x705754) returned 0x3
	[0256.177] CoGetContextToken (in: pToken=0x19e640 | out: pToken=0x19e640) returned 0x0
	[0256.177] CoGetContextToken (in: pToken=0x19ea48 | out: pToken=0x19ea48) returned 0x0
	[0256.177] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ead8 | out: ppvObject=0x19ead8*=0x7057dc) returned 0x0
	[0256.178] WbemLocator:IRpcOptions:Query (in: This=0x7057dc, pPrx=0x7057f8, dwProperty=2, pdwValue=0x19eb00 | out: pdwValue=0x19eb00) returned 0x80004002
	[0256.178] WbemLocator:IUnknown:Release (This=0x7057dc) returned 0x3
	[0256.178] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x2
	[0256.178] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0256.178] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0256.178] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x19f048*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x6f3940) returned 0x0
	[0256.178] IUnknown:AddRef (This=0x6f3940) returned 0x4
	[0256.178] IUnknown:Release (This=0x6f3940) returned 0x3
	[0256.178] IUnknown:Release (This=0x6f3940) returned 0x2
	[0256.178] IUnknown:Release (This=0x6f37b0) returned 0x2
	[0256.178] SysStringLen (param_1=0x0) returned 0x0
	[0256.190] IEnumWbemClassObject:Reset (This=0x6f3940) returned 0x0
	[0256.199] CoTaskMemAlloc (cb=0x4) returned 0x69b9aa8
	[0256.199] IEnumWbemClassObject:Next (in: This=0x6f3940, lTimeout=-1, uCount=0x1, apObjects=0x69b9aa8, puReturned=0x2bd4a64 | out: apObjects=0x69b9aa8*=0x6a0c600, puReturned=0x2bd4a64*=0x1) returned 0x0
	[0256.209] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e8c8 | out: ppvObject=0x19e8c8*=0x6a0c600) returned 0x0
	[0256.210] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e884 | out: ppvObject=0x19e884*=0x0) returned 0x80004002
	[0256.210] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e6a4 | out: ppvObject=0x19e6a4*=0x0) returned 0x80004002
	[0256.210] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e47c | out: ppvObject=0x19e47c*=0x0) returned 0x80004002
	[0256.211] IUnknown:AddRef (This=0x6a0c600) returned 0x3
	[0256.211] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e1e4 | out: ppvObject=0x19e1e4*=0x0) returned 0x80004002
	[0256.211] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e194 | out: ppvObject=0x19e194*=0x0) returned 0x80004002
	[0256.211] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e1a0 | out: ppvObject=0x19e1a0*=0x6a0c604) returned 0x0
	[0256.212] IMarshal:GetUnmarshalClass (in: This=0x6a0c604, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e1a8 | out: pCid=0x19e1a8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0256.212] IUnknown:Release (This=0x6a0c604) returned 0x3
	[0256.212] CoGetContextToken (in: pToken=0x19e200 | out: pToken=0x19e200) returned 0x0
	[0256.213] CoGetContextToken (in: pToken=0x19e608 | out: pToken=0x19e608) returned 0x0
	[0256.213] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e698 | out: ppvObject=0x19e698*=0x0) returned 0x80004002
	[0256.221] IUnknown:Release (This=0x6a0c600) returned 0x2
	[0256.221] CoGetContextToken (in: pToken=0x19ebd8 | out: pToken=0x19ebd8) returned 0x0
	[0256.221] CoGetContextToken (in: pToken=0x19eb38 | out: pToken=0x19eb38) returned 0x0
	[0256.222] IUnknown:QueryInterface (in: This=0x6a0c600, riid=0x19ec08*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ec04 | out: ppvObject=0x19ec04*=0x6a0c600) returned 0x0
	[0256.222] IUnknown:AddRef (This=0x6a0c600) returned 0x4
	[0256.228] IUnknown:Release (This=0x6a0c600) returned 0x3
	[0256.228] IUnknown:Release (This=0x6a0c600) returned 0x2
	[0256.228] CoTaskMemFree (pv=0x69b9aa8) 
	[0256.229] CoGetContextToken (in: pToken=0x19ef48 | out: pToken=0x19ef48) returned 0x0
	[0256.229] IUnknown:AddRef (This=0x6a0c600) returned 0x3
	[0256.229] IWbemClassObject:Get (in: This=0x6a0c600, wszName="__GENUS", lFlags=0, pVal=0x19f258*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2d8*=0, plFlavor=0x19f2d4*=0 | out: pVal=0x19f258*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f2d8*=3, plFlavor=0x19f2d4*=64) returned 0x0
	[0256.229] IWbemClassObject:Get (in: This=0x6a0c600, wszName="__PATH", lFlags=0, pVal=0x19f23c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2c0*=0, plFlavor=0x19f2bc*=0 | out: pVal=0x19f23c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiSpywareProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"", varVal2=0x0), pType=0x19f2c0*=8, plFlavor=0x19f2bc*=64) returned 0x0
	[0256.230] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiSpywareProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xcc
	[0256.231] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiSpywareProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xcc
	[0256.231] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f268 | out: ppv=0x19f268*=0x66b664) returned 0x0
	[0256.232] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f260 | out: pAptType=0x19f260*=1) returned 0x0
	[0256.232] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f264 | out: ppvObject=0x19f264*=0x0) returned 0x80004002
	[0256.232] IUnknown:Release (This=0x66b664) returned 0x1
	[0256.241] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebd0 | out: ppv=0x19ebd0*=0x69b9a18) returned 0x0
	[0256.242] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9a18, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ede8 | out: ppvObject=0x19ede8*=0x0) returned 0x80004002
	[0256.243] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9a18, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edfc | out: ppvObject=0x19edfc*=0x6a09638) returned 0x0
	[0256.252] WbemDefPath:IUnknown:Release (This=0x69b9a18) returned 0x0
	[0256.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09638, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea1c | out: ppvObject=0x19ea1c*=0x6a09638) returned 0x0
	[0256.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09638, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9d8 | out: ppvObject=0x19e9d8*=0x0) returned 0x80004002
	[0256.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09638, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5cc | out: ppvObject=0x19e5cc*=0x0) returned 0x80004002
	[0256.254] WbemDefPath:IUnknown:AddRef (This=0x6a09638) returned 0x3
	[0256.255] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09638, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e334 | out: ppvObject=0x19e334*=0x0) returned 0x80004002
	[0256.255] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09638, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e2e4 | out: ppvObject=0x19e2e4*=0x0) returned 0x80004002
	[0256.255] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09638, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2f0 | out: ppvObject=0x19e2f0*=0x6a0eb30) returned 0x0
	[0256.255] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0eb30, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2f8 | out: pCid=0x19e2f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.256] WbemDefPath:IUnknown:Release (This=0x6a0eb30) returned 0x3
	[0256.256] CoGetContextToken (in: pToken=0x19e350 | out: pToken=0x19e350) returned 0x0
	[0256.256] CoGetContextToken (in: pToken=0x19e758 | out: pToken=0x19e758) returned 0x0
	[0256.257] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09638, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7e8 | out: ppvObject=0x19e7e8*=0x0) returned 0x80004002
	[0256.257] WbemDefPath:IUnknown:Release (This=0x6a09638) returned 0x2
	[0256.257] WbemDefPath:IUnknown:Release (This=0x6a09638) returned 0x1
	[0256.257] CoGetContextToken (in: pToken=0x19f0e0 | out: pToken=0x19f0e0) returned 0x0
	[0256.258] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0256.258] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09638, riid=0x19f110*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f10c | out: ppvObject=0x19f10c*=0x6a09638) returned 0x0
	[0256.258] WbemDefPath:IUnknown:AddRef (This=0x6a09638) returned 0x3
	[0256.258] WbemDefPath:IUnknown:Release (This=0x6a09638) returned 0x2
	[0256.259] WbemDefPath:IWbemPath:SetText (This=0x6a09638, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiSpywareProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0x0
	[0256.259] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09868, puCount=0x19f294 | out: puCount=0x19f294*=0x2) returned 0x0
	[0256.259] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f290*=0x0, pszText=0x0 | out: puBuffLength=0x19f290*=0x19, pszText=0x0) returned 0x0
	[0256.259] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f290*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f290*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.260] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09868, puCount=0x19f260 | out: puCount=0x19f260*=0x2) returned 0x0
	[0256.260] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f25c*=0x0, pszText=0x0 | out: puBuffLength=0x19f25c*=0x19, pszText=0x0) returned 0x0
	[0256.260] WbemDefPath:IWbemPath:GetText (in: This=0x6a09868, lFlags=4, puBuffLength=0x19f25c*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f25c*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.260] IWbemClassObject:Get (in: This=0x6a0c600, wszName="displayName", lFlags=0, pVal=0x19f25c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd5348*=0, plFlavor=0x2bd534c*=0 | out: pVal=0x19f25c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2bd5348*=8, plFlavor=0x2bd534c*=0) returned 0x0
	[0256.261] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.261] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.261] IWbemClassObject:Get (in: This=0x6a0c600, wszName="displayName", lFlags=0, pVal=0x19f264*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd5348*=8, plFlavor=0x2bd534c*=0 | out: pVal=0x19f264*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2bd5348*=8, plFlavor=0x2bd534c*=0) returned 0x0
	[0256.262] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.263] SysStringByteLen (bstr="Windows Defender") returned 0x20
	[0256.263] CoTaskMemAlloc (cb=0x4) returned 0x69b9998
	[0256.263] IEnumWbemClassObject:Next (in: This=0x6f3940, lTimeout=-1, uCount=0x1, apObjects=0x69b9998, puReturned=0x2bd4a64 | out: apObjects=0x69b9998*=0x0, puReturned=0x2bd4a64*=0x0) returned 0x1
	[0256.271] CoTaskMemFree (pv=0x69b9998) 
	[0256.271] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0256.271] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0256.271] IUnknown:Release (This=0x6f3940) returned 0x0
	[0256.272] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0256.272] WbemLocator:IUnknown:Release (This=0x7063f8) returned 0x1
	[0256.272] IUnknown:Release (This=0x6f37b0) returned 0x0
	[0256.273] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f284 | out: ppv=0x19f284*=0x66b664) returned 0x0
	[0256.273] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f27c | out: pAptType=0x19f27c*=1) returned 0x0
	[0256.273] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f280 | out: ppvObject=0x19f280*=0x0) returned 0x80004002
	[0256.273] IUnknown:Release (This=0x66b664) returned 0x1
	[0256.274] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebf0 | out: ppv=0x19ebf0*=0x69b9a58) returned 0x0
	[0256.275] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9a58, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ee08 | out: ppvObject=0x19ee08*=0x0) returned 0x80004002
	[0256.275] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9a58, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ee1c | out: ppvObject=0x19ee1c*=0x6a09088) returned 0x0
	[0256.275] WbemDefPath:IUnknown:Release (This=0x69b9a58) returned 0x0
	[0256.275] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09088, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x6a09088) returned 0x0
	[0256.275] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09088, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9f8 | out: ppvObject=0x19e9f8*=0x0) returned 0x80004002
	[0256.275] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09088, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5ec | out: ppvObject=0x19e5ec*=0x0) returned 0x80004002
	[0256.275] WbemDefPath:IUnknown:AddRef (This=0x6a09088) returned 0x3
	[0256.275] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09088, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e354 | out: ppvObject=0x19e354*=0x0) returned 0x80004002
	[0256.275] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09088, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e304 | out: ppvObject=0x19e304*=0x0) returned 0x80004002
	[0256.275] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09088, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e310 | out: ppvObject=0x19e310*=0x6a0eb00) returned 0x0
	[0256.275] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0eb00, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e318 | out: pCid=0x19e318*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.275] WbemDefPath:IUnknown:Release (This=0x6a0eb00) returned 0x3
	[0256.275] CoGetContextToken (in: pToken=0x19e370 | out: pToken=0x19e370) returned 0x0
	[0256.276] CoGetContextToken (in: pToken=0x19e778 | out: pToken=0x19e778) returned 0x0
	[0256.276] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09088, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e808 | out: ppvObject=0x19e808*=0x0) returned 0x80004002
	[0256.276] WbemDefPath:IUnknown:Release (This=0x6a09088) returned 0x2
	[0256.276] WbemDefPath:IUnknown:Release (This=0x6a09088) returned 0x1
	[0256.276] CoGetContextToken (in: pToken=0x19f100 | out: pToken=0x19f100) returned 0x0
	[0256.276] CoGetContextToken (in: pToken=0x19f060 | out: pToken=0x19f060) returned 0x0
	[0256.276] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09088, riid=0x19f130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6a09088) returned 0x0
	[0256.276] WbemDefPath:IUnknown:AddRef (This=0x6a09088) returned 0x3
	[0256.276] WbemDefPath:IUnknown:Release (This=0x6a09088) returned 0x2
	[0256.276] WbemDefPath:IWbemPath:SetText (This=0x6a09088, uMode=0x4, pszPath="ROOT\\SecurityCenter2") returned 0x0
	[0256.276] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09088, puCount=0x19f2ac | out: puCount=0x19f2ac*=0x2) returned 0x0
	[0256.276] WbemDefPath:IWbemPath:GetText (in: This=0x6a09088, lFlags=4, puBuffLength=0x19f2a8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2a8*=0x19, pszText=0x0) returned 0x0
	[0256.276] WbemDefPath:IWbemPath:GetText (in: This=0x6a09088, lFlags=4, puBuffLength=0x19f2a8*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f2a8*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.276] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09088, puCount=0x19f298 | out: puCount=0x19f298*=0x2) returned 0x0
	[0256.276] WbemDefPath:IWbemPath:GetText (in: This=0x6a09088, lFlags=4, puBuffLength=0x19f294*=0x0, pszText=0x0 | out: puBuffLength=0x19f294*=0x19, pszText=0x0) returned 0x0
	[0256.276] WbemDefPath:IWbemPath:GetText (in: This=0x6a09088, lFlags=4, puBuffLength=0x19f294*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f294*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.276] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f22c | out: ppv=0x19f22c*=0x66b664) returned 0x0
	[0256.282] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f224 | out: pAptType=0x19f224*=1) returned 0x0
	[0256.283] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f228 | out: ppvObject=0x19f228*=0x0) returned 0x80004002
	[0256.283] IUnknown:Release (This=0x66b664) returned 0x1
	[0256.283] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee48 | out: ppv=0x19ee48*=0x6a0ed28) returned 0x0
	[0256.283] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0ed28, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x0) returned 0x80004002
	[0256.284] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0ed28, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x69b9a48) returned 0x0
	[0256.284] WbemLocator:IUnknown:Release (This=0x6a0ed28) returned 0x0
	[0256.284] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a48, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec94 | out: ppvObject=0x19ec94*=0x69b9a48) returned 0x0
	[0256.284] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a48, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec50 | out: ppvObject=0x19ec50*=0x0) returned 0x80004002
	[0256.284] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a48, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0256.284] WbemLocator:IUnknown:AddRef (This=0x69b9a48) returned 0x3
	[0256.284] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a48, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0256.284] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a48, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e55c | out: ppvObject=0x19e55c*=0x0) returned 0x80004002
	[0256.284] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a48, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e568 | out: ppvObject=0x19e568*=0x0) returned 0x80004002
	[0256.284] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0256.284] CoGetContextToken (in: pToken=0x19e9d0 | out: pToken=0x19e9d0) returned 0x0
	[0256.284] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a48, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea60 | out: ppvObject=0x19ea60*=0x0) returned 0x80004002
	[0256.284] WbemLocator:IUnknown:Release (This=0x69b9a48) returned 0x2
	[0256.284] WbemLocator:IUnknown:Release (This=0x69b9a48) returned 0x1
	[0256.284] CoGetContextToken (in: pToken=0x19f040 | out: pToken=0x19f040) returned 0x0
	[0256.285] CoGetContextToken (in: pToken=0x19efa0 | out: pToken=0x19efa0) returned 0x0
	[0256.285] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a48, riid=0x19f070*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f06c | out: ppvObject=0x19f06c*=0x69b9a48) returned 0x0
	[0256.285] WbemLocator:IUnknown:AddRef (This=0x69b9a48) returned 0x3
	[0256.285] WbemLocator:IUnknown:Release (This=0x69b9a48) returned 0x2
	[0256.285] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09088, puCount=0x19f208 | out: puCount=0x19f208*=0x2) returned 0x0
	[0256.285] WbemDefPath:IWbemPath:GetText (in: This=0x6a09088, lFlags=8, puBuffLength=0x19f204*=0x0, pszText=0x0 | out: puBuffLength=0x19f204*=0x19, pszText=0x0) returned 0x0
	[0256.285] WbemDefPath:IWbemPath:GetText (in: This=0x6a09088, lFlags=8, puBuffLength=0x19f204*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f204*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.285] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0cc | out: ppv=0x19f0cc*=0x69b9948) returned 0x0
	[0256.285] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b9948, strNetworkResource="\\\\.\\ROOT\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f174 | out: ppNamespace=0x19f174*=0x6f8e98) returned 0x0
	[0256.304] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8e98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19effc | out: ppvObject=0x19effc*=0x705cd4) returned 0x0
	[0256.304] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x705cd4, pProxy=0x6f8e98, pAuthnSvc=0x19f04c, pAuthzSvc=0x19f048, pServerPrincName=0x19f040, pAuthnLevel=0x19f044, pImpLevel=0x19f034, pAuthInfo=0x19f038, pCapabilites=0x19f03c | out: pAuthnSvc=0x19f04c*=0xa, pAuthzSvc=0x19f048*=0x0, pServerPrincName=0x19f040, pAuthnLevel=0x19f044*=0x6, pImpLevel=0x19f034*=0x2, pAuthInfo=0x19f038, pCapabilites=0x19f03c*=0x1) returned 0x0
	[0256.304] WbemLocator:IUnknown:Release (This=0x705cd4) returned 0x1
	[0256.304] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8e98, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eff0 | out: ppvObject=0x19eff0*=0x705cf8) returned 0x0
	[0256.304] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8e98, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efec | out: ppvObject=0x19efec*=0x705cd4) returned 0x0
	[0256.304] WbemLocator:IClientSecurity:SetBlanket (This=0x705cd4, pProxy=0x6f8e98, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.304] WbemLocator:IUnknown:Release (This=0x705cd4) returned 0x2
	[0256.304] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x1
	[0256.304] CoTaskMemFree (pv=0x6a11b08) 
	[0256.304] WbemLocator:IUnknown:Release (This=0x69b9948) returned 0x0
	[0256.305] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8e98, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebec | out: ppvObject=0x19ebec*=0x705cf8) returned 0x0
	[0256.305] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eba8 | out: ppvObject=0x19eba8*=0x0) returned 0x80004002
	[0256.305] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x0) returned 0x80004002
	[0256.306] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8e98, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e79c | out: ppvObject=0x19e79c*=0x0) returned 0x80004002
	[0256.306] WbemLocator:IUnknown:AddRef (This=0x705cf8) returned 0x3
	[0256.306] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x0) returned 0x80004002
	[0256.306] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4b4 | out: ppvObject=0x19e4b4*=0x0) returned 0x80004002
	[0256.306] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4c0 | out: ppvObject=0x19e4c0*=0x705c54) returned 0x0
	[0256.306] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705c54, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4c8 | out: pCid=0x19e4c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.306] WbemLocator:IUnknown:Release (This=0x705c54) returned 0x3
	[0256.306] CoGetContextToken (in: pToken=0x19e520 | out: pToken=0x19e520) returned 0x0
	[0256.307] CoGetContextToken (in: pToken=0x19e928 | out: pToken=0x19e928) returned 0x0
	[0256.307] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9b8 | out: ppvObject=0x19e9b8*=0x705cdc) returned 0x0
	[0256.307] WbemLocator:IRpcOptions:Query (in: This=0x705cdc, pPrx=0x705cf8, dwProperty=2, pdwValue=0x19e9e0 | out: pdwValue=0x19e9e0) returned 0x80004002
	[0256.307] WbemLocator:IUnknown:Release (This=0x705cdc) returned 0x3
	[0256.307] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x2
	[0256.307] CoGetContextToken (in: pToken=0x19ef00 | out: pToken=0x19ef00) returned 0x0
	[0256.307] CoGetContextToken (in: pToken=0x19ee60 | out: pToken=0x19ee60) returned 0x0
	[0256.307] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x19ef30*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef2c | out: ppvObject=0x19ef2c*=0x6f8e98) returned 0x0
	[0256.307] WbemLocator:IUnknown:AddRef (This=0x6f8e98) returned 0x4
	[0256.307] WbemLocator:IUnknown:Release (This=0x6f8e98) returned 0x3
	[0256.307] WbemLocator:IUnknown:Release (This=0x6f8e98) returned 0x2
	[0256.307] SysStringLen (param_1=0x0) returned 0x0
	[0256.307] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0256.307] WbemLocator:IUnknown:AddRef (This=0x705cf8) returned 0x3
	[0256.307] WbemLocator:IUnknown:QueryInterface (in: This=0x705cf8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed9c | out: ppvObject=0x19ed9c*=0x705cf8) returned 0x0
	[0256.307] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x3
	[0256.308] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x2
	[0256.308] CoGetContextToken (in: pToken=0x19f000 | out: pToken=0x19f000) returned 0x0
	[0256.308] WbemLocator:IUnknown:AddRef (This=0x6f8e98) returned 0x3
	[0256.308] IWbemServices:ExecQuery (in: This=0x6f8e98, strQueryLanguage="WQL", strQuery="SELECT * FROM FirewallProduct", lFlags=16, pCtx=0x0, ppEnum=0x19f210 | out: ppEnum=0x19f210*=0x6f37b0) returned 0x0
	[0256.317] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f074 | out: ppvObject=0x19f074*=0x6f37b4) returned 0x0
	[0256.318] IClientSecurity:QueryBlanket (in: This=0x6f37b4, pProxy=0x6f37b0, pAuthnSvc=0x19f0c4, pAuthzSvc=0x19f0c0, pServerPrincName=0x19f0b8, pAuthnLevel=0x19f0bc, pImpLevel=0x19f0ac, pAuthInfo=0x19f0b0, pCapabilites=0x19f0b4 | out: pAuthnSvc=0x19f0c4*=0xa, pAuthzSvc=0x19f0c0*=0x0, pServerPrincName=0x19f0b8, pAuthnLevel=0x19f0bc*=0x6, pImpLevel=0x19f0ac*=0x2, pAuthInfo=0x19f0b0, pCapabilites=0x19f0b4*=0x1) returned 0x0
	[0256.318] IUnknown:Release (This=0x6f37b4) returned 0x1
	[0256.318] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f068 | out: ppvObject=0x19f068*=0x7061f8) returned 0x0
	[0256.318] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f064 | out: ppvObject=0x19f064*=0x6f37b4) returned 0x0
	[0256.318] IClientSecurity:SetBlanket (This=0x6f37b4, pProxy=0x6f37b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.319] IUnknown:Release (This=0x6f37b4) returned 0x2
	[0256.319] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x1
	[0256.319] CoTaskMemFree (pv=0x6a11bc8) 
	[0256.320] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec60 | out: ppvObject=0x19ec60*=0x7061f8) returned 0x0
	[0256.320] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec1c | out: ppvObject=0x19ec1c*=0x0) returned 0x80004002
	[0256.320] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea3c | out: ppvObject=0x19ea3c*=0x0) returned 0x80004002
	[0256.323] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e814 | out: ppvObject=0x19e814*=0x0) returned 0x80004002
	[0256.324] WbemLocator:IUnknown:AddRef (This=0x7061f8) returned 0x3
	[0256.324] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0256.324] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e52c | out: ppvObject=0x19e52c*=0x0) returned 0x80004002
	[0256.324] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e538 | out: ppvObject=0x19e538*=0x706154) returned 0x0
	[0256.325] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706154, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e540 | out: pCid=0x19e540*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.325] WbemLocator:IUnknown:Release (This=0x706154) returned 0x3
	[0256.325] CoGetContextToken (in: pToken=0x19e598 | out: pToken=0x19e598) returned 0x0
	[0256.325] CoGetContextToken (in: pToken=0x19e9a0 | out: pToken=0x19e9a0) returned 0x0
	[0256.325] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea30 | out: ppvObject=0x19ea30*=0x7061dc) returned 0x0
	[0256.325] WbemLocator:IRpcOptions:Query (in: This=0x7061dc, pPrx=0x7061f8, dwProperty=2, pdwValue=0x19ea58 | out: pdwValue=0x19ea58) returned 0x80004002
	[0256.325] WbemLocator:IUnknown:Release (This=0x7061dc) returned 0x3
	[0256.325] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x2
	[0256.325] CoGetContextToken (in: pToken=0x19ef70 | out: pToken=0x19ef70) returned 0x0
	[0256.325] CoGetContextToken (in: pToken=0x19eed0 | out: pToken=0x19eed0) returned 0x0
	[0256.325] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x19efa0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef9c | out: ppvObject=0x19ef9c*=0x6f37b0) returned 0x0
	[0256.325] IUnknown:AddRef (This=0x6f37b0) returned 0x4
	[0256.325] IUnknown:Release (This=0x6f37b0) returned 0x3
	[0256.325] IUnknown:Release (This=0x6f37b0) returned 0x2
	[0256.325] WbemLocator:IUnknown:Release (This=0x6f8e98) returned 0x2
	[0256.325] SysStringLen (param_1=0x0) returned 0x0
	[0256.325] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09088, puCount=0x19f25c | out: puCount=0x19f25c*=0x2) returned 0x0
	[0256.325] WbemDefPath:IWbemPath:GetText (in: This=0x6a09088, lFlags=4, puBuffLength=0x19f258*=0x0, pszText=0x0 | out: puBuffLength=0x19f258*=0x19, pszText=0x0) returned 0x0
	[0256.326] WbemDefPath:IWbemPath:GetText (in: This=0x6a09088, lFlags=4, puBuffLength=0x19f258*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x19f258*=0x19, pszText="\\\\.\\ROOT\\SecurityCenter2") returned 0x0
	[0256.326] CoGetContextToken (in: pToken=0x19f0a8 | out: pToken=0x19f0a8) returned 0x0
	[0256.326] IUnknown:AddRef (This=0x6f37b0) returned 0x3
	[0256.326] IEnumWbemClassObject:Clone (in: This=0x6f37b0, ppEnum=0x19f268 | out: ppEnum=0x19f268*=0x6f3c60) returned 0x0
	[0256.327] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f12c | out: ppvObject=0x19f12c*=0x6f3c64) returned 0x0
	[0256.327] IClientSecurity:QueryBlanket (in: This=0x6f3c64, pProxy=0x6f3c60, pAuthnSvc=0x19f17c, pAuthzSvc=0x19f178, pServerPrincName=0x19f170, pAuthnLevel=0x19f174, pImpLevel=0x19f164, pAuthInfo=0x19f168, pCapabilites=0x19f16c | out: pAuthnSvc=0x19f17c*=0xa, pAuthzSvc=0x19f178*=0x0, pServerPrincName=0x19f170, pAuthnLevel=0x19f174*=0x6, pImpLevel=0x19f164*=0x2, pAuthInfo=0x19f168, pCapabilites=0x19f16c*=0x1) returned 0x0
	[0256.327] IUnknown:Release (This=0x6f3c64) returned 0x1
	[0256.327] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f120 | out: ppvObject=0x19f120*=0x7057f8) returned 0x0
	[0256.327] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f11c | out: ppvObject=0x19f11c*=0x6f3c64) returned 0x0
	[0256.327] IClientSecurity:SetBlanket (This=0x6f3c64, pProxy=0x6f3c60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.330] IUnknown:Release (This=0x6f3c64) returned 0x2
	[0256.330] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0256.331] CoTaskMemFree (pv=0x6a11f28) 
	[0256.331] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed08 | out: ppvObject=0x19ed08*=0x7057f8) returned 0x0
	[0256.331] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ecc4 | out: ppvObject=0x19ecc4*=0x0) returned 0x80004002
	[0256.332] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eae4 | out: ppvObject=0x19eae4*=0x0) returned 0x80004002
	[0256.332] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e8bc | out: ppvObject=0x19e8bc*=0x0) returned 0x80004002
	[0256.333] WbemLocator:IUnknown:AddRef (This=0x7057f8) returned 0x3
	[0256.333] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e624 | out: ppvObject=0x19e624*=0x0) returned 0x80004002
	[0256.333] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5d4 | out: ppvObject=0x19e5d4*=0x0) returned 0x80004002
	[0256.333] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5e0 | out: ppvObject=0x19e5e0*=0x705754) returned 0x0
	[0256.333] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705754, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5e8 | out: pCid=0x19e5e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.333] WbemLocator:IUnknown:Release (This=0x705754) returned 0x3
	[0256.333] CoGetContextToken (in: pToken=0x19e640 | out: pToken=0x19e640) returned 0x0
	[0256.333] CoGetContextToken (in: pToken=0x19ea48 | out: pToken=0x19ea48) returned 0x0
	[0256.333] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ead8 | out: ppvObject=0x19ead8*=0x7057dc) returned 0x0
	[0256.333] WbemLocator:IRpcOptions:Query (in: This=0x7057dc, pPrx=0x7057f8, dwProperty=2, pdwValue=0x19eb00 | out: pdwValue=0x19eb00) returned 0x80004002
	[0256.333] WbemLocator:IUnknown:Release (This=0x7057dc) returned 0x3
	[0256.333] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x2
	[0256.334] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0256.334] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0256.334] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x19f048*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x6f3c60) returned 0x0
	[0256.334] IUnknown:AddRef (This=0x6f3c60) returned 0x4
	[0256.334] IUnknown:Release (This=0x6f3c60) returned 0x3
	[0256.334] IUnknown:Release (This=0x6f3c60) returned 0x2
	[0256.334] IUnknown:Release (This=0x6f37b0) returned 0x2
	[0256.334] SysStringLen (param_1=0x0) returned 0x0
	[0256.334] IEnumWbemClassObject:Reset (This=0x6f3c60) returned 0x0
	[0256.335] CoTaskMemAlloc (cb=0x4) returned 0x69b9ac8
	[0256.335] IEnumWbemClassObject:Next (in: This=0x6f3c60, lTimeout=-1, uCount=0x1, apObjects=0x69b9ac8, puReturned=0x2bd6454 | out: apObjects=0x69b9ac8*=0x0, puReturned=0x2bd6454*=0x0) returned 0x1
	[0256.336] CoTaskMemFree (pv=0x69b9ac8) 
	[0256.336] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0256.336] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0256.336] IUnknown:Release (This=0x6f3c60) returned 0x0
	[0256.337] CoGetContextToken (in: pToken=0x19f190 | out: pToken=0x19f190) returned 0x0
	[0256.337] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x1
	[0256.337] IUnknown:Release (This=0x6f37b0) returned 0x0
	[0256.561] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.561] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Battle.net", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net") returned 0x2f
	[0256.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.645] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net", lpFilePart=0x0) returned 0x2e
	[0256.646] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\", lpFilePart=0x0) returned 0x2f
	[0256.646] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\battle.net\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.666] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.666] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chromium\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data") returned 0x37
	[0256.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.666] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data", lpFilePart=0x0) returned 0x36
	[0256.667] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", lpFilePart=0x0) returned 0x37
	[0256.667] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chromium\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.670] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.670] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Google\\Chrome\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x3c
	[0256.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.671] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3b
	[0256.671] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0256.671] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\google\\chrome\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.673] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.673] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Google(x86)\\Chrome\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data") returned 0x41
	[0256.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.674] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data", lpFilePart=0x0) returned 0x40
	[0256.674] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x41
	[0256.674] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\google(x86)\\chrome\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.676] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.676] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Opera Software\\", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\") returned 0x36
	[0256.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.676] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35
	[0256.676] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35
	[0256.677] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\opera software\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.679] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.679] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data") returned 0x45
	[0256.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.679] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", lpFilePart=0x0) returned 0x44
	[0256.679] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", lpFilePart=0x0) returned 0x45
	[0256.679] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\maplestudio\\chromeplus\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.682] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.682] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Iridium\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data") returned 0x36
	[0256.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.682] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data", lpFilePart=0x0) returned 0x35
	[0256.683] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", lpFilePart=0x0) returned 0x36
	[0256.683] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iridium\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.685] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.685] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\7Star\\7Star\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data") returned 0x3a
	[0256.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.685] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data", lpFilePart=0x0) returned 0x39
	[0256.685] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", lpFilePart=0x0) returned 0x3a
	[0256.686] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\7star\\7star\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.688] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.688] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CentBrowser\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data") returned 0x3a
	[0256.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.688] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data", lpFilePart=0x0) returned 0x39
	[0256.688] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", lpFilePart=0x0) returned 0x3a
	[0256.688] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\centbrowser\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.690] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.690] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chedot\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data") returned 0x35
	[0256.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.691] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data", lpFilePart=0x0) returned 0x34
	[0256.691] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", lpFilePart=0x0) returned 0x35
	[0256.691] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chedot\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.695] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.696] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Vivaldi\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data") returned 0x36
	[0256.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.696] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data", lpFilePart=0x0) returned 0x35
	[0256.696] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", lpFilePart=0x0) returned 0x36
	[0256.696] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\vivaldi\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.698] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.698] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Kometa\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data") returned 0x35
	[0256.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.699] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data", lpFilePart=0x0) returned 0x34
	[0256.699] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", lpFilePart=0x0) returned 0x35
	[0256.699] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\kometa\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.710] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.710] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Elements Browser\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data") returned 0x3f
	[0256.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.710] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data", lpFilePart=0x0) returned 0x3e
	[0256.710] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", lpFilePart=0x0) returned 0x3f
	[0256.710] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\elements browser\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.713] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.713] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Epic Privacy Browser\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data") returned 0x43
	[0256.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.713] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", lpFilePart=0x0) returned 0x42
	[0256.713] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\", lpFilePart=0x0) returned 0x43
	[0256.713] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\epic privacy browser\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.715] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.716] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\uCozMedia\\Uran\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data") returned 0x3d
	[0256.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.716] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data", lpFilePart=0x0) returned 0x3c
	[0256.716] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0256.716] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\ucozmedia\\uran\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.718] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.718] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer") returned 0x58
	[0256.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.719] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", lpFilePart=0x0) returned 0x57
	[0256.719] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", lpFilePart=0x0) returned 0x58
	[0256.719] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\fenrir inc\\sleipnir5\\setting\\modules\\chromiumviewer\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.721] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.721] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data") returned 0x43
	[0256.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.721] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", lpFilePart=0x0) returned 0x42
	[0256.721] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", lpFilePart=0x0) returned 0x43
	[0256.722] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\catalinagroup\\citrio\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.724] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.724] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Coowon\\Coowon\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data") returned 0x3c
	[0256.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.724] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data", lpFilePart=0x0) returned 0x3b
	[0256.724] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0256.725] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\coowon\\coowon\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.727] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.727] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\liebao\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data") returned 0x35
	[0256.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.727] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data", lpFilePart=0x0) returned 0x34
	[0256.728] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", lpFilePart=0x0) returned 0x35
	[0256.728] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\liebao\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.730] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.730] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\QIP Surf\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data") returned 0x37
	[0256.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.730] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data", lpFilePart=0x0) returned 0x36
	[0256.731] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", lpFilePart=0x0) returned 0x37
	[0256.731] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\qip surf\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.733] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.733] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Orbitum\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data") returned 0x36
	[0256.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.734] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data", lpFilePart=0x0) returned 0x35
	[0256.734] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", lpFilePart=0x0) returned 0x36
	[0256.734] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\orbitum\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.736] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.736] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Comodo\\Dragon\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data") returned 0x3c
	[0256.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.736] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data", lpFilePart=0x0) returned 0x3b
	[0256.736] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0256.736] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comodo\\dragon\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.738] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.738] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Amigo\\User\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data") returned 0x39
	[0256.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.739] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data", lpFilePart=0x0) returned 0x38
	[0256.739] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", lpFilePart=0x0) returned 0x39
	[0256.739] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\amigo\\user\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.741] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.741] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Torch\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data") returned 0x34
	[0256.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.741] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data", lpFilePart=0x0) returned 0x33
	[0256.741] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", lpFilePart=0x0) returned 0x34
	[0256.743] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\torch\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.744] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.746] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data") returned 0x43
	[0256.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.746] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", lpFilePart=0x0) returned 0x42
	[0256.746] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", lpFilePart=0x0) returned 0x43
	[0256.747] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yandexbrowser\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.749] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.749] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Comodo\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data") returned 0x35
	[0256.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.749] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data", lpFilePart=0x0) returned 0x34
	[0256.749] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", lpFilePart=0x0) returned 0x35
	[0256.749] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comodo\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.751] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.751] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\360Browser\\Browser\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data") returned 0x41
	[0256.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.752] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data", lpFilePart=0x0) returned 0x40
	[0256.752] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", lpFilePart=0x0) returned 0x41
	[0256.752] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\360browser\\browser\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.754] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.754] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Maxthon3\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data") returned 0x37
	[0256.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.755] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data", lpFilePart=0x0) returned 0x36
	[0256.755] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", lpFilePart=0x0) returned 0x37
	[0256.755] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\maxthon3\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.757] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.757] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\K-Melon\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data") returned 0x36
	[0256.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.757] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data", lpFilePart=0x0) returned 0x35
	[0256.757] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", lpFilePart=0x0) returned 0x36
	[0256.757] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\k-melon\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.759] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.759] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Sputnik\\Sputnik\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data") returned 0x3e
	[0256.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.760] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data", lpFilePart=0x0) returned 0x3d
	[0256.760] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", lpFilePart=0x0) returned 0x3e
	[0256.760] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\sputnik\\sputnik\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.762] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.762] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Nichrome\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data") returned 0x37
	[0256.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.762] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data", lpFilePart=0x0) returned 0x36
	[0256.762] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\", lpFilePart=0x0) returned 0x37
	[0256.762] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\nichrome\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.764] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.764] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CocCoc\\Browser\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data") returned 0x3d
	[0256.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.765] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data", lpFilePart=0x0) returned 0x3c
	[0256.765] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0256.765] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\coccoc\\browser\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.767] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.767] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Uran\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data") returned 0x33
	[0256.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.767] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data", lpFilePart=0x0) returned 0x32
	[0256.767] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\", lpFilePart=0x0) returned 0x33
	[0256.767] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\uran\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.769] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.769] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chromodo\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data") returned 0x37
	[0256.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.769] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data", lpFilePart=0x0) returned 0x36
	[0256.769] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\", lpFilePart=0x0) returned 0x37
	[0256.769] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chromodo\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.772] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.772] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Mail.Ru\\Atom\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data") returned 0x3b
	[0256.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.772] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data", lpFilePart=0x0) returned 0x3a
	[0256.772] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\", lpFilePart=0x0) returned 0x3b
	[0256.772] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\mail.ru\\atom\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.774] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.774] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data") returned 0x4a
	[0256.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.774] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", lpFilePart=0x0) returned 0x49
	[0256.774] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\", lpFilePart=0x0) returned 0x4a
	[0256.774] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\bravesoftware\\brave-browser\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.776] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.776] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Microsoft\\Edge\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data") returned 0x3d
	[0256.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.776] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data", lpFilePart=0x0) returned 0x3c
	[0256.776] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0256.776] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\edge\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.778] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.778] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience") returned 0x51
	[0256.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.779] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", lpFilePart=0x0) returned 0x50
	[0256.779] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\", lpFilePart=0x0) returned 0x51
	[0256.779] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\nvidia corporation\\nvidia geforce experience\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.781] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.781] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Steam", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam") returned 0x2a
	[0256.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.784] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam", lpFilePart=0x0) returned 0x29
	[0256.784] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\", lpFilePart=0x0) returned 0x2a
	[0256.784] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\steam\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.786] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.786] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CryptoTab Browser\\User Data", lpDst=0x19f0bc, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data") returned 0x40
	[0256.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f164) returned 1
	[0256.786] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data", lpFilePart=0x0) returned 0x3f
	[0256.786] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\", lpFilePart=0x0) returned 0x40
	[0256.786] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\cryptotab browser\\user data\\*"), lpFindFileData=0x19ee8c | out: lpFindFileData=0x19ee8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f128) returned 1
	[0256.842] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.842] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Mozilla\\Firefox", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x36
	[0256.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f218) returned 1
	[0256.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x19ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x35
	[0256.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x36
	[0256.843] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mozilla\\firefox\\*"), lpFindFileData=0x19ef40 | out: lpFindFileData=0x19ef40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0256.845] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.845] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Waterfox", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox") returned 0x2f
	[0256.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f218) returned 1
	[0256.845] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox", nBufferLength=0x105, lpBuffer=0x19ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox", lpFilePart=0x0) returned 0x2e
	[0256.845] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\", lpFilePart=0x0) returned 0x2f
	[0256.845] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\waterfox\\*"), lpFindFileData=0x19ef40 | out: lpFindFileData=0x19ef40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0256.848] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.848] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\K-Meleon", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon") returned 0x2f
	[0256.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f218) returned 1
	[0256.848] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon", nBufferLength=0x105, lpBuffer=0x19ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon", lpFilePart=0x0) returned 0x2e
	[0256.848] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\", lpFilePart=0x0) returned 0x2f
	[0256.848] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\k-meleon\\*"), lpFindFileData=0x19ef40 | out: lpFindFileData=0x19ef40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0256.850] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.850] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Thunderbird", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird") returned 0x32
	[0256.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f218) returned 1
	[0256.850] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird", nBufferLength=0x105, lpBuffer=0x19ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird", lpFilePart=0x0) returned 0x31
	[0256.850] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\", lpFilePart=0x0) returned 0x32
	[0256.850] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\thunderbird\\*"), lpFindFileData=0x19ef40 | out: lpFindFileData=0x19ef40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0256.852] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.852] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Comodo\\IceDragon", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon") returned 0x37
	[0256.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f218) returned 1
	[0256.852] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon", nBufferLength=0x105, lpBuffer=0x19ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon", lpFilePart=0x0) returned 0x36
	[0256.852] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\", lpFilePart=0x0) returned 0x37
	[0256.852] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\comodo\\icedragon\\*"), lpFindFileData=0x19ef40 | out: lpFindFileData=0x19ef40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0256.855] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.855] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\8pecxstudios\\Cyberfox", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox") returned 0x3c
	[0256.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f218) returned 1
	[0256.855] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox", nBufferLength=0x105, lpBuffer=0x19ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox", lpFilePart=0x0) returned 0x3b
	[0256.855] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\", lpFilePart=0x0) returned 0x3c
	[0256.855] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\8pecxstudios\\cyberfox\\*"), lpFindFileData=0x19ef40 | out: lpFindFileData=0x19ef40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0256.858] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.858] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw") returned 0x44
	[0256.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f218) returned 1
	[0256.859] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw", nBufferLength=0x105, lpBuffer=0x19ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw", lpFilePart=0x0) returned 0x43
	[0256.859] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\", lpFilePart=0x0) returned 0x44
	[0256.859] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\netgate technologies\\blackhaw\\*"), lpFindFileData=0x19ef40 | out: lpFindFileData=0x19ef40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0256.861] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0256.861] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Moonchild Productions\\Pale Moon", lpDst=0x19f170, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon") returned 0x46
	[0256.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f218) returned 1
	[0256.861] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon", nBufferLength=0x105, lpBuffer=0x19ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon", lpFilePart=0x0) returned 0x45
	[0256.861] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\", nBufferLength=0x105, lpBuffer=0x19ecf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\", lpFilePart=0x0) returned 0x46
	[0256.861] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\moonchild productions\\pale moon\\*"), lpFindFileData=0x19ef40 | out: lpFindFileData=0x19ef40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0256.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1dc) returned 1
	[0256.895] CoTaskMemAlloc (cb=0x20c) returned 0x717f58
	[0256.895] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x717f58 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0256.896] CoTaskMemFree (pv=0x717f58) 
	[0256.896] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0256.896] CoTaskMemAlloc (cb=0x20c) returned 0x717d30
	[0256.896] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x717d30 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0256.896] CoTaskMemFree (pv=0x717d30) 
	[0256.896] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ed68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0256.896] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml", nBufferLength=0x105, lpBuffer=0x19ee04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpFilePart=0x0) returned 0x41
	[0256.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f264) returned 1
	[0256.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\filezilla\\recentservers.xml"), fInfoLevelId=0x0, lpFileInformation=0x19f2e0 | out: lpFileInformation=0x19f2e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0256.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f260) returned 1
	[0256.897] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml", nBufferLength=0x105, lpBuffer=0x19ee04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpFilePart=0x0) returned 0x3f
	[0256.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f264) returned 1
	[0256.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\filezilla\\sitemanager.xml"), fInfoLevelId=0x0, lpFileInformation=0x19f2e0 | out: lpFileInformation=0x19f2e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0256.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f260) returned 1
	[0256.916] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f27c | out: phkResult=0x19f27c*=0x0) returned 0x2
	[0256.943] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f278 | out: puCount=0x19f278*=0x2) returned 0x0
	[0256.943] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f274*=0x0, pszText=0x0 | out: puBuffLength=0x19f274*=0xf, pszText=0x0) returned 0x0
	[0256.943] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f274*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f274*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0256.943] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f204 | out: ppv=0x19f204*=0x66b664) returned 0x0
	[0256.943] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1fc | out: pAptType=0x19f1fc*=1) returned 0x0
	[0256.943] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f200 | out: ppvObject=0x19f200*=0x0) returned 0x80004002
	[0256.943] IUnknown:Release (This=0x66b664) returned 0x1
	[0256.944] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee20 | out: ppv=0x19ee20*=0x6a0ecb0) returned 0x0
	[0256.944] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0ecb0, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f038 | out: ppvObject=0x19f038*=0x0) returned 0x80004002
	[0256.944] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0ecb0, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f04c | out: ppvObject=0x19f04c*=0x69b99d8) returned 0x0
	[0256.944] WbemLocator:IUnknown:Release (This=0x6a0ecb0) returned 0x0
	[0256.944] WbemLocator:IUnknown:QueryInterface (in: This=0x69b99d8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec6c | out: ppvObject=0x19ec6c*=0x69b99d8) returned 0x0
	[0256.945] WbemLocator:IUnknown:QueryInterface (in: This=0x69b99d8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec28 | out: ppvObject=0x19ec28*=0x0) returned 0x80004002
	[0256.945] WbemLocator:IUnknown:QueryInterface (in: This=0x69b99d8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e81c | out: ppvObject=0x19e81c*=0x0) returned 0x80004002
	[0256.945] WbemLocator:IUnknown:AddRef (This=0x69b99d8) returned 0x3
	[0256.945] WbemLocator:IUnknown:QueryInterface (in: This=0x69b99d8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e584 | out: ppvObject=0x19e584*=0x0) returned 0x80004002
	[0256.945] WbemLocator:IUnknown:QueryInterface (in: This=0x69b99d8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e534 | out: ppvObject=0x19e534*=0x0) returned 0x80004002
	[0256.945] WbemLocator:IUnknown:QueryInterface (in: This=0x69b99d8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e540 | out: ppvObject=0x19e540*=0x0) returned 0x80004002
	[0256.945] CoGetContextToken (in: pToken=0x19e5a0 | out: pToken=0x19e5a0) returned 0x0
	[0256.945] CoGetContextToken (in: pToken=0x19e9a8 | out: pToken=0x19e9a8) returned 0x0
	[0256.945] WbemLocator:IUnknown:QueryInterface (in: This=0x69b99d8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea38 | out: ppvObject=0x19ea38*=0x0) returned 0x80004002
	[0256.945] WbemLocator:IUnknown:Release (This=0x69b99d8) returned 0x2
	[0256.945] WbemLocator:IUnknown:Release (This=0x69b99d8) returned 0x1
	[0256.946] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0256.946] CoGetContextToken (in: pToken=0x19ef78 | out: pToken=0x19ef78) returned 0x0
	[0256.946] WbemLocator:IUnknown:QueryInterface (in: This=0x69b99d8, riid=0x19f048*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x69b99d8) returned 0x0
	[0256.946] WbemLocator:IUnknown:AddRef (This=0x69b99d8) returned 0x3
	[0256.946] WbemLocator:IUnknown:Release (This=0x69b99d8) returned 0x2
	[0256.946] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1e0 | out: puCount=0x19f1e0*=0x2) returned 0x0
	[0256.946] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=8, puBuffLength=0x19f1dc*=0x0, pszText=0x0 | out: puBuffLength=0x19f1dc*=0xf, pszText=0x0) returned 0x0
	[0256.946] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=8, puBuffLength=0x19f1dc*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1dc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0256.946] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0b8 | out: ppv=0x19f0b8*=0x69b9a18) returned 0x0
	[0256.946] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b9a18, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f14c | out: ppNamespace=0x19f14c*=0x6f9208) returned 0x0
	[0256.959] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9208, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efe8 | out: ppvObject=0x19efe8*=0x7057d4) returned 0x0
	[0256.959] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7057d4, pProxy=0x6f9208, pAuthnSvc=0x19f038, pAuthzSvc=0x19f034, pServerPrincName=0x19f02c, pAuthnLevel=0x19f030, pImpLevel=0x19f020, pAuthInfo=0x19f024, pCapabilites=0x19f028 | out: pAuthnSvc=0x19f038*=0xa, pAuthzSvc=0x19f034*=0x0, pServerPrincName=0x19f02c, pAuthnLevel=0x19f030*=0x6, pImpLevel=0x19f020*=0x2, pAuthInfo=0x19f024, pCapabilites=0x19f028*=0x1) returned 0x0
	[0256.959] WbemLocator:IUnknown:Release (This=0x7057d4) returned 0x1
	[0256.959] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9208, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efdc | out: ppvObject=0x19efdc*=0x7057f8) returned 0x0
	[0256.959] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9208, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efd8 | out: ppvObject=0x19efd8*=0x7057d4) returned 0x0
	[0256.959] WbemLocator:IClientSecurity:SetBlanket (This=0x7057d4, pProxy=0x6f9208, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0256.959] WbemLocator:IUnknown:Release (This=0x7057d4) returned 0x2
	[0256.959] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0256.960] CoTaskMemFree (pv=0x6a11e98) 
	[0256.960] WbemLocator:IUnknown:Release (This=0x69b9a18) returned 0x0
	[0256.960] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9208, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebd8 | out: ppvObject=0x19ebd8*=0x7057f8) returned 0x0
	[0256.960] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eb94 | out: ppvObject=0x19eb94*=0x0) returned 0x80004002
	[0256.960] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9b4 | out: ppvObject=0x19e9b4*=0x0) returned 0x80004002
	[0256.961] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9208, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e78c | out: ppvObject=0x19e78c*=0x0) returned 0x80004002
	[0256.964] WbemLocator:IUnknown:AddRef (This=0x7057f8) returned 0x3
	[0256.964] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e4f4 | out: ppvObject=0x19e4f4*=0x0) returned 0x80004002
	[0256.964] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4a4 | out: ppvObject=0x19e4a4*=0x0) returned 0x80004002
	[0256.964] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4b0 | out: ppvObject=0x19e4b0*=0x705754) returned 0x0
	[0256.964] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705754, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4b8 | out: pCid=0x19e4b8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0256.964] WbemLocator:IUnknown:Release (This=0x705754) returned 0x3
	[0256.964] CoGetContextToken (in: pToken=0x19e510 | out: pToken=0x19e510) returned 0x0
	[0256.965] CoGetContextToken (in: pToken=0x19e918 | out: pToken=0x19e918) returned 0x0
	[0256.965] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9a8 | out: ppvObject=0x19e9a8*=0x7057dc) returned 0x0
	[0256.965] WbemLocator:IRpcOptions:Query (in: This=0x7057dc, pPrx=0x7057f8, dwProperty=2, pdwValue=0x19e9d0 | out: pdwValue=0x19e9d0) returned 0x80004002
	[0256.965] WbemLocator:IUnknown:Release (This=0x7057dc) returned 0x3
	[0256.965] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x2
	[0256.965] CoGetContextToken (in: pToken=0x19eee8 | out: pToken=0x19eee8) returned 0x0
	[0256.965] CoGetContextToken (in: pToken=0x19ee48 | out: pToken=0x19ee48) returned 0x0
	[0256.965] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x19ef18*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef14 | out: ppvObject=0x19ef14*=0x6f9208) returned 0x0
	[0256.965] WbemLocator:IUnknown:AddRef (This=0x6f9208) returned 0x4
	[0256.965] WbemLocator:IUnknown:Release (This=0x6f9208) returned 0x3
	[0256.965] WbemLocator:IUnknown:Release (This=0x6f9208) returned 0x2
	[0256.965] SysStringLen (param_1=0x0) returned 0x0
	[0256.965] CoGetContextToken (in: pToken=0x19eee0 | out: pToken=0x19eee0) returned 0x0
	[0256.965] WbemLocator:IUnknown:AddRef (This=0x7057f8) returned 0x3
	[0256.965] WbemLocator:IUnknown:QueryInterface (in: This=0x7057f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed74 | out: ppvObject=0x19ed74*=0x7057f8) returned 0x0
	[0256.966] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x3
	[0256.966] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x2
	[0256.966] CoGetContextToken (in: pToken=0x19efd8 | out: pToken=0x19efd8) returned 0x0
	[0256.966] WbemLocator:IUnknown:AddRef (This=0x6f9208) returned 0x3
	[0256.966] IWbemServices:ExecQuery (in: This=0x6f9208, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x19f1e8 | out: ppEnum=0x19f1e8*=0x6f37b0) returned 0x0
	[0256.980] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f04c | out: ppvObject=0x19f04c*=0x6f37b4) returned 0x0
	[0256.980] IClientSecurity:QueryBlanket (in: This=0x6f37b4, pProxy=0x6f37b0, pAuthnSvc=0x19f09c, pAuthzSvc=0x19f098, pServerPrincName=0x19f090, pAuthnLevel=0x19f094, pImpLevel=0x19f084, pAuthInfo=0x19f088, pCapabilites=0x19f08c | out: pAuthnSvc=0x19f09c*=0xa, pAuthzSvc=0x19f098*=0x0, pServerPrincName=0x19f090, pAuthnLevel=0x19f094*=0x6, pImpLevel=0x19f084*=0x2, pAuthInfo=0x19f088, pCapabilites=0x19f08c*=0x1) returned 0x0
	[0256.980] IUnknown:Release (This=0x6f37b4) returned 0x1
	[0256.980] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f040 | out: ppvObject=0x19f040*=0x7050f8) returned 0x0
	[0256.981] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f03c | out: ppvObject=0x19f03c*=0x6f37b4) returned 0x0
	[0256.981] IClientSecurity:SetBlanket (This=0x6f37b4, pProxy=0x6f37b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0257.006] IUnknown:Release (This=0x6f37b4) returned 0x2
	[0257.006] WbemLocator:IUnknown:Release (This=0x7050f8) returned 0x1
	[0257.006] CoTaskMemFree (pv=0x6a11f58) 
	[0257.006] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec38 | out: ppvObject=0x19ec38*=0x7050f8) returned 0x0
	[0257.006] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebf4 | out: ppvObject=0x19ebf4*=0x0) returned 0x80004002
	[0257.008] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea14 | out: ppvObject=0x19ea14*=0x0) returned 0x80004002
	[0257.012] IUnknown:QueryInterface (in: This=0x6f37b0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7ec | out: ppvObject=0x19e7ec*=0x0) returned 0x80004002
	[0257.044] WbemLocator:IUnknown:AddRef (This=0x7050f8) returned 0x3
	[0257.044] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e554 | out: ppvObject=0x19e554*=0x0) returned 0x80004002
	[0257.044] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x0) returned 0x80004002
	[0257.044] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e510 | out: ppvObject=0x19e510*=0x705054) returned 0x0
	[0257.045] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705054, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e518 | out: pCid=0x19e518*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0257.045] WbemLocator:IUnknown:Release (This=0x705054) returned 0x3
	[0257.045] CoGetContextToken (in: pToken=0x19e570 | out: pToken=0x19e570) returned 0x0
	[0257.045] CoGetContextToken (in: pToken=0x19e978 | out: pToken=0x19e978) returned 0x0
	[0257.045] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea08 | out: ppvObject=0x19ea08*=0x7050dc) returned 0x0
	[0257.045] WbemLocator:IRpcOptions:Query (in: This=0x7050dc, pPrx=0x7050f8, dwProperty=2, pdwValue=0x19ea30 | out: pdwValue=0x19ea30) returned 0x80004002
	[0257.045] WbemLocator:IUnknown:Release (This=0x7050dc) returned 0x3
	[0257.045] WbemLocator:IUnknown:Release (This=0x7050f8) returned 0x2
	[0257.045] CoGetContextToken (in: pToken=0x19ef48 | out: pToken=0x19ef48) returned 0x0
	[0257.045] CoGetContextToken (in: pToken=0x19eea8 | out: pToken=0x19eea8) returned 0x0
	[0257.045] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x19ef78*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef74 | out: ppvObject=0x19ef74*=0x6f37b0) returned 0x0
	[0257.045] IUnknown:AddRef (This=0x6f37b0) returned 0x4
	[0257.045] IUnknown:Release (This=0x6f37b0) returned 0x3
	[0257.045] IUnknown:Release (This=0x6f37b0) returned 0x2
	[0257.045] WbemLocator:IUnknown:Release (This=0x6f9208) returned 0x2
	[0257.045] SysStringLen (param_1=0x0) returned 0x0
	[0257.045] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f234 | out: puCount=0x19f234*=0x2) returned 0x0
	[0257.046] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f230*=0x0, pszText=0x0 | out: puBuffLength=0x19f230*=0xf, pszText=0x0) returned 0x0
	[0257.046] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f230*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f230*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0257.046] CoGetContextToken (in: pToken=0x19f080 | out: pToken=0x19f080) returned 0x0
	[0257.046] IUnknown:AddRef (This=0x6f37b0) returned 0x3
	[0257.046] IEnumWbemClassObject:Clone (in: This=0x6f37b0, ppEnum=0x19f240 | out: ppEnum=0x19f240*=0x6f3a08) returned 0x0
	[0257.104] IUnknown:QueryInterface (in: This=0x6f3a08, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f104 | out: ppvObject=0x19f104*=0x6f3a0c) returned 0x0
	[0257.104] IClientSecurity:QueryBlanket (in: This=0x6f3a0c, pProxy=0x6f3a08, pAuthnSvc=0x19f154, pAuthzSvc=0x19f150, pServerPrincName=0x19f148, pAuthnLevel=0x19f14c, pImpLevel=0x19f13c, pAuthInfo=0x19f140, pCapabilites=0x19f144 | out: pAuthnSvc=0x19f154*=0xa, pAuthzSvc=0x19f150*=0x0, pServerPrincName=0x19f148, pAuthnLevel=0x19f14c*=0x6, pImpLevel=0x19f13c*=0x2, pAuthInfo=0x19f140, pCapabilites=0x19f144*=0x1) returned 0x0
	[0257.104] IUnknown:Release (This=0x6f3a0c) returned 0x1
	[0257.104] IUnknown:QueryInterface (in: This=0x6f3a08, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0f8 | out: ppvObject=0x19f0f8*=0x7062f8) returned 0x0
	[0257.104] IUnknown:QueryInterface (in: This=0x6f3a08, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0f4 | out: ppvObject=0x19f0f4*=0x6f3a0c) returned 0x0
	[0257.104] IClientSecurity:SetBlanket (This=0x6f3a0c, pProxy=0x6f3a08, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0257.141] IUnknown:Release (This=0x6f3a0c) returned 0x2
	[0257.141] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x1
	[0257.141] CoTaskMemFree (pv=0x6a11bc8) 
	[0257.141] IUnknown:QueryInterface (in: This=0x6f3a08, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ece0 | out: ppvObject=0x19ece0*=0x7062f8) returned 0x0
	[0257.141] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec9c | out: ppvObject=0x19ec9c*=0x0) returned 0x80004002
	[0257.142] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eabc | out: ppvObject=0x19eabc*=0x0) returned 0x80004002
	[0257.142] IUnknown:QueryInterface (in: This=0x6f3a08, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e894 | out: ppvObject=0x19e894*=0x0) returned 0x80004002
	[0257.143] WbemLocator:IUnknown:AddRef (This=0x7062f8) returned 0x3
	[0257.143] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5fc | out: ppvObject=0x19e5fc*=0x0) returned 0x80004002
	[0257.143] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5ac | out: ppvObject=0x19e5ac*=0x0) returned 0x80004002
	[0257.143] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5b8 | out: ppvObject=0x19e5b8*=0x706254) returned 0x0
	[0257.143] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706254, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5c0 | out: pCid=0x19e5c0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0257.143] WbemLocator:IUnknown:Release (This=0x706254) returned 0x3
	[0257.143] CoGetContextToken (in: pToken=0x19e618 | out: pToken=0x19e618) returned 0x0
	[0257.143] CoGetContextToken (in: pToken=0x19ea20 | out: pToken=0x19ea20) returned 0x0
	[0257.143] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eab0 | out: ppvObject=0x19eab0*=0x7062dc) returned 0x0
	[0257.143] WbemLocator:IRpcOptions:Query (in: This=0x7062dc, pPrx=0x7062f8, dwProperty=2, pdwValue=0x19ead8 | out: pdwValue=0x19ead8) returned 0x80004002
	[0257.143] WbemLocator:IUnknown:Release (This=0x7062dc) returned 0x3
	[0257.143] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x2
	[0257.143] CoGetContextToken (in: pToken=0x19eff0 | out: pToken=0x19eff0) returned 0x0
	[0257.143] CoGetContextToken (in: pToken=0x19ef50 | out: pToken=0x19ef50) returned 0x0
	[0257.143] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x19f020*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f01c | out: ppvObject=0x19f01c*=0x6f3a08) returned 0x0
	[0257.144] IUnknown:AddRef (This=0x6f3a08) returned 0x4
	[0257.144] IUnknown:Release (This=0x6f3a08) returned 0x3
	[0257.144] IUnknown:Release (This=0x6f3a08) returned 0x2
	[0257.144] IUnknown:Release (This=0x6f37b0) returned 0x2
	[0257.144] SysStringLen (param_1=0x0) returned 0x0
	[0257.144] IEnumWbemClassObject:Reset (This=0x6f3a08) returned 0x0
	[0257.144] CoTaskMemAlloc (cb=0x4) returned 0x69b9a38
	[0257.144] IEnumWbemClassObject:Next (in: This=0x6f3a08, lTimeout=-1, uCount=0x1, apObjects=0x69b9a38, puReturned=0x2c0f220 | out: apObjects=0x69b9a38*=0x6a0b2e0, puReturned=0x2c0f220*=0x1) returned 0x0
	[0262.347] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e8a0 | out: ppvObject=0x19e8a0*=0x6a0b2e0) returned 0x0
	[0262.347] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e85c | out: ppvObject=0x19e85c*=0x0) returned 0x80004002
	[0262.347] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e67c | out: ppvObject=0x19e67c*=0x0) returned 0x80004002
	[0262.347] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e454 | out: ppvObject=0x19e454*=0x0) returned 0x80004002
	[0262.347] IUnknown:AddRef (This=0x6a0b2e0) returned 0x3
	[0262.347] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e1bc | out: ppvObject=0x19e1bc*=0x0) returned 0x80004002
	[0262.347] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e16c | out: ppvObject=0x19e16c*=0x0) returned 0x80004002
	[0262.348] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e178 | out: ppvObject=0x19e178*=0x6a0b2e4) returned 0x0
	[0262.348] IMarshal:GetUnmarshalClass (in: This=0x6a0b2e4, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e180 | out: pCid=0x19e180*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0262.348] IUnknown:Release (This=0x6a0b2e4) returned 0x3
	[0262.348] CoGetContextToken (in: pToken=0x19e1d8 | out: pToken=0x19e1d8) returned 0x0
	[0262.348] CoGetContextToken (in: pToken=0x19e5e0 | out: pToken=0x19e5e0) returned 0x0
	[0262.348] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e670 | out: ppvObject=0x19e670*=0x0) returned 0x80004002
	[0262.348] IUnknown:Release (This=0x6a0b2e0) returned 0x2
	[0262.348] CoGetContextToken (in: pToken=0x19ebb0 | out: pToken=0x19ebb0) returned 0x0
	[0262.348] CoGetContextToken (in: pToken=0x19eb10 | out: pToken=0x19eb10) returned 0x0
	[0262.348] IUnknown:QueryInterface (in: This=0x6a0b2e0, riid=0x19ebe0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebdc | out: ppvObject=0x19ebdc*=0x6a0b2e0) returned 0x0
	[0262.348] IUnknown:AddRef (This=0x6a0b2e0) returned 0x4
	[0262.348] IUnknown:Release (This=0x6a0b2e0) returned 0x3
	[0262.348] IUnknown:Release (This=0x6a0b2e0) returned 0x2
	[0262.348] CoTaskMemFree (pv=0x69b9a38) 
	[0262.348] CoGetContextToken (in: pToken=0x19ef20 | out: pToken=0x19ef20) returned 0x0
	[0262.348] IUnknown:AddRef (This=0x6a0b2e0) returned 0x3
	[0262.348] IWbemClassObject:Get (in: This=0x6a0b2e0, wszName="__GENUS", lFlags=0, pVal=0x19f230*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2b0*=0, plFlavor=0x19f2ac*=0 | out: pVal=0x19f230*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f2b0*=3, plFlavor=0x19f2ac*=64) returned 0x0
	[0262.349] IWbemClassObject:Get (in: This=0x6a0b2e0, wszName="__PATH", lFlags=0, pVal=0x19f214*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f298*=0, plFlavor=0x19f294*=0 | out: pVal=0x19f214*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x19f298*=8, plFlavor=0x19f294*=64) returned 0x0
	[0262.349] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0262.349] SysStringByteLen (bstr="\\\\XC64ZB\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66
	[0262.349] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f240 | out: ppv=0x19f240*=0x66b664) returned 0x0
	[0262.349] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f238 | out: pAptType=0x19f238*=1) returned 0x0
	[0262.349] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f23c | out: ppvObject=0x19f23c*=0x0) returned 0x80004002
	[0262.349] IUnknown:Release (This=0x66b664) returned 0x1
	[0262.350] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eba8 | out: ppv=0x19eba8*=0x69b9a38) returned 0x0
	[0262.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9a38, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19edc0 | out: ppvObject=0x19edc0*=0x0) returned 0x80004002
	[0262.350] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9a38, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edd4 | out: ppvObject=0x19edd4*=0x6a099b8) returned 0x0
	[0262.350] WbemDefPath:IUnknown:Release (This=0x69b9a38) returned 0x0
	[0262.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a099b8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9f4 | out: ppvObject=0x19e9f4*=0x6a099b8) returned 0x0
	[0262.351] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a099b8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9b0 | out: ppvObject=0x19e9b0*=0x0) returned 0x80004002
	[0262.351] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a099b8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5a4 | out: ppvObject=0x19e5a4*=0x0) returned 0x80004002
	[0262.351] WbemDefPath:IUnknown:AddRef (This=0x6a099b8) returned 0x3
	[0262.351] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a099b8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e30c | out: ppvObject=0x19e30c*=0x0) returned 0x80004002
	[0262.351] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a099b8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e2bc | out: ppvObject=0x19e2bc*=0x0) returned 0x80004002
	[0262.351] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a099b8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2c8 | out: ppvObject=0x19e2c8*=0x6a0ed58) returned 0x0
	[0262.351] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0ed58, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2d0 | out: pCid=0x19e2d0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.351] WbemDefPath:IUnknown:Release (This=0x6a0ed58) returned 0x3
	[0262.351] CoGetContextToken (in: pToken=0x19e328 | out: pToken=0x19e328) returned 0x0
	[0262.351] CoGetContextToken (in: pToken=0x19e730 | out: pToken=0x19e730) returned 0x0
	[0262.351] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a099b8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7c0 | out: ppvObject=0x19e7c0*=0x0) returned 0x80004002
	[0262.353] WbemDefPath:IUnknown:Release (This=0x6a099b8) returned 0x2
	[0262.353] WbemDefPath:IUnknown:Release (This=0x6a099b8) returned 0x1
	[0262.353] CoGetContextToken (in: pToken=0x19f0b8 | out: pToken=0x19f0b8) returned 0x0
	[0262.353] CoGetContextToken (in: pToken=0x19f018 | out: pToken=0x19f018) returned 0x0
	[0262.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a099b8, riid=0x19f0e8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0e4 | out: ppvObject=0x19f0e4*=0x6a099b8) returned 0x0
	[0262.353] WbemDefPath:IUnknown:AddRef (This=0x6a099b8) returned 0x3
	[0262.353] WbemDefPath:IUnknown:Release (This=0x6a099b8) returned 0x2
	[0262.353] WbemDefPath:IWbemPath:SetText (This=0x6a099b8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0262.354] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f26c | out: puCount=0x19f26c*=0x2) returned 0x0
	[0262.354] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f268*=0x0, pszText=0x0 | out: puBuffLength=0x19f268*=0xf, pszText=0x0) returned 0x0
	[0262.354] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f268*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f268*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0262.359] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f238 | out: puCount=0x19f238*=0x2) returned 0x0
	[0262.359] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f234*=0x0, pszText=0x0 | out: puBuffLength=0x19f234*=0xf, pszText=0x0) returned 0x0
	[0262.359] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f234*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f234*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0262.360] IWbemClassObject:Get (in: This=0x6a0b2e0, wszName="Name", lFlags=0, pVal=0x19f234*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c0fa58*=0, plFlavor=0x2c0fa5c*=0 | out: pVal=0x19f234*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x2c0fa58*=8, plFlavor=0x2c0fa5c*=0) returned 0x0
	[0262.360] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0262.360] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0262.360] IWbemClassObject:Get (in: This=0x6a0b2e0, wszName="Name", lFlags=0, pVal=0x19f23c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c0fa58*=8, plFlavor=0x2c0fa5c*=0 | out: pVal=0x19f23c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x2c0fa58*=8, plFlavor=0x2c0fa5c*=0) returned 0x0
	[0262.360] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0262.360] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e
	[0262.363] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f238 | out: puCount=0x19f238*=0x2) returned 0x0
	[0262.363] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f234*=0x0, pszText=0x0 | out: puBuffLength=0x19f234*=0xf, pszText=0x0) returned 0x0
	[0262.363] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f234*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f234*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0262.363] IWbemClassObject:Get (in: This=0x6a0b2e0, wszName="NumberOfCores", lFlags=0, pVal=0x19f234*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c0fb8c*=0, plFlavor=0x2c0fb90*=0 | out: pVal=0x19f234*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x2c0fb8c*=19, plFlavor=0x2c0fb90*=0) returned 0x0
	[0262.363] IWbemClassObject:Get (in: This=0x6a0b2e0, wszName="NumberOfCores", lFlags=0, pVal=0x19f23c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c0fb8c*=19, plFlavor=0x2c0fb90*=0 | out: pVal=0x19f23c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x2c0fb8c*=19, plFlavor=0x2c0fb90*=0) returned 0x0
	[0262.373] CoTaskMemAlloc (cb=0x4) returned 0x69b9948
	[0262.373] IEnumWbemClassObject:Next (in: This=0x6f3a08, lTimeout=-1, uCount=0x1, apObjects=0x69b9948, puReturned=0x2c0f220 | out: apObjects=0x69b9948*=0x0, puReturned=0x2c0f220*=0x0) returned 0x1
	[0262.379] CoTaskMemFree (pv=0x69b9948) 
	[0262.379] CoGetContextToken (in: pToken=0x19f168 | out: pToken=0x19f168) returned 0x0
	[0262.380] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x1
	[0262.380] IUnknown:Release (This=0x6f3a08) returned 0x0
	[0262.382] CoGetContextToken (in: pToken=0x19f168 | out: pToken=0x19f168) returned 0x0
	[0262.382] WbemLocator:IUnknown:Release (This=0x7050f8) returned 0x1
	[0262.382] IUnknown:Release (This=0x6f37b0) returned 0x0
	[0262.419] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f254 | out: ppv=0x19f254*=0x66b664) returned 0x0
	[0262.420] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f24c | out: pAptType=0x19f24c*=1) returned 0x0
	[0262.420] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f250 | out: ppvObject=0x19f250*=0x0) returned 0x80004002
	[0262.420] IUnknown:Release (This=0x66b664) returned 0x1
	[0262.421] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebc0 | out: ppv=0x19ebc0*=0x69b9a18) returned 0x0
	[0262.421] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9a18, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19edd8 | out: ppvObject=0x19edd8*=0x0) returned 0x80004002
	[0262.421] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9a18, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edec | out: ppvObject=0x19edec*=0x6a09718) returned 0x0
	[0262.422] WbemDefPath:IUnknown:Release (This=0x69b9a18) returned 0x0
	[0262.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09718, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea0c | out: ppvObject=0x19ea0c*=0x6a09718) returned 0x0
	[0262.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09718, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9c8 | out: ppvObject=0x19e9c8*=0x0) returned 0x80004002
	[0262.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09718, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e5bc | out: ppvObject=0x19e5bc*=0x0) returned 0x80004002
	[0262.422] WbemDefPath:IUnknown:AddRef (This=0x6a09718) returned 0x3
	[0262.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09718, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e324 | out: ppvObject=0x19e324*=0x0) returned 0x80004002
	[0262.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09718, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e2d4 | out: ppvObject=0x19e2d4*=0x0) returned 0x80004002
	[0262.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09718, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2e0 | out: ppvObject=0x19e2e0*=0x6a0ec38) returned 0x0
	[0262.422] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0ec38, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2e8 | out: pCid=0x19e2e8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.422] WbemDefPath:IUnknown:Release (This=0x6a0ec38) returned 0x3
	[0262.422] CoGetContextToken (in: pToken=0x19e340 | out: pToken=0x19e340) returned 0x0
	[0262.422] CoGetContextToken (in: pToken=0x19e748 | out: pToken=0x19e748) returned 0x0
	[0262.422] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09718, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7d8 | out: ppvObject=0x19e7d8*=0x0) returned 0x80004002
	[0262.423] WbemDefPath:IUnknown:Release (This=0x6a09718) returned 0x2
	[0262.423] WbemDefPath:IUnknown:Release (This=0x6a09718) returned 0x1
	[0262.423] CoGetContextToken (in: pToken=0x19f0d0 | out: pToken=0x19f0d0) returned 0x0
	[0262.423] CoGetContextToken (in: pToken=0x19f030 | out: pToken=0x19f030) returned 0x0
	[0262.423] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09718, riid=0x19f100*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0fc | out: ppvObject=0x19f0fc*=0x6a09718) returned 0x0
	[0262.423] WbemDefPath:IUnknown:AddRef (This=0x6a09718) returned 0x3
	[0262.423] WbemDefPath:IUnknown:Release (This=0x6a09718) returned 0x2
	[0262.423] WbemDefPath:IWbemPath:SetText (This=0x6a09718, uMode=0x4, pszPath="root\\CIMV2") returned 0x0
	[0262.423] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09718, puCount=0x19f27c | out: puCount=0x19f27c*=0x2) returned 0x0
	[0262.423] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f278*=0x0, pszText=0x0 | out: puBuffLength=0x19f278*=0xf, pszText=0x0) returned 0x0
	[0262.423] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f278*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f278*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0262.423] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09718, puCount=0x19f268 | out: puCount=0x19f268*=0x2) returned 0x0
	[0262.423] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f264*=0x0, pszText=0x0 | out: puBuffLength=0x19f264*=0xf, pszText=0x0) returned 0x0
	[0262.423] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f264*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f264*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0262.423] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1fc | out: ppv=0x19f1fc*=0x66b664) returned 0x0
	[0262.423] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1f4 | out: pAptType=0x19f1f4*=1) returned 0x0
	[0262.424] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1f8 | out: ppvObject=0x19f1f8*=0x0) returned 0x80004002
	[0262.424] IUnknown:Release (This=0x66b664) returned 0x1
	[0262.428] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee18 | out: ppv=0x19ee18*=0x6a0f148) returned 0x0
	[0262.429] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0f148, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f030 | out: ppvObject=0x19f030*=0x0) returned 0x80004002
	[0262.429] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0f148, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f044 | out: ppvObject=0x19f044*=0x69b9a28) returned 0x0
	[0262.429] WbemLocator:IUnknown:Release (This=0x6a0f148) returned 0x0
	[0262.429] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a28, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec64 | out: ppvObject=0x19ec64*=0x69b9a28) returned 0x0
	[0262.429] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a28, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec20 | out: ppvObject=0x19ec20*=0x0) returned 0x80004002
	[0262.429] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a28, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e814 | out: ppvObject=0x19e814*=0x0) returned 0x80004002
	[0262.429] WbemLocator:IUnknown:AddRef (This=0x69b9a28) returned 0x3
	[0262.429] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a28, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e57c | out: ppvObject=0x19e57c*=0x0) returned 0x80004002
	[0262.430] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a28, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e52c | out: ppvObject=0x19e52c*=0x0) returned 0x80004002
	[0262.430] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a28, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e538 | out: ppvObject=0x19e538*=0x0) returned 0x80004002
	[0262.430] CoGetContextToken (in: pToken=0x19e598 | out: pToken=0x19e598) returned 0x0
	[0262.430] CoGetContextToken (in: pToken=0x19e9a0 | out: pToken=0x19e9a0) returned 0x0
	[0262.430] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a28, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea30 | out: ppvObject=0x19ea30*=0x0) returned 0x80004002
	[0262.430] WbemLocator:IUnknown:Release (This=0x69b9a28) returned 0x2
	[0262.430] WbemLocator:IUnknown:Release (This=0x69b9a28) returned 0x1
	[0262.430] CoGetContextToken (in: pToken=0x19f010 | out: pToken=0x19f010) returned 0x0
	[0262.430] CoGetContextToken (in: pToken=0x19ef70 | out: pToken=0x19ef70) returned 0x0
	[0262.430] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9a28, riid=0x19f040*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f03c | out: ppvObject=0x19f03c*=0x69b9a28) returned 0x0
	[0262.430] WbemLocator:IUnknown:AddRef (This=0x69b9a28) returned 0x3
	[0262.430] WbemLocator:IUnknown:Release (This=0x69b9a28) returned 0x2
	[0262.430] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09718, puCount=0x19f1d8 | out: puCount=0x19f1d8*=0x2) returned 0x0
	[0262.430] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=8, puBuffLength=0x19f1d4*=0x0, pszText=0x0 | out: puBuffLength=0x19f1d4*=0xf, pszText=0x0) returned 0x0
	[0262.430] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=8, puBuffLength=0x19f1d4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1d4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0262.430] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f0b0 | out: ppv=0x19f0b0*=0x69b9948) returned 0x0
	[0262.431] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b9948, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f144 | out: ppNamespace=0x19f144*=0x6f9258) returned 0x0
	[0262.447] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9258, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efe0 | out: ppvObject=0x19efe0*=0x7050d4) returned 0x0
	[0262.447] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7050d4, pProxy=0x6f9258, pAuthnSvc=0x19f030, pAuthzSvc=0x19f02c, pServerPrincName=0x19f024, pAuthnLevel=0x19f028, pImpLevel=0x19f018, pAuthInfo=0x19f01c, pCapabilites=0x19f020 | out: pAuthnSvc=0x19f030*=0xa, pAuthzSvc=0x19f02c*=0x0, pServerPrincName=0x19f024, pAuthnLevel=0x19f028*=0x6, pImpLevel=0x19f018*=0x2, pAuthInfo=0x19f01c, pCapabilites=0x19f020*=0x1) returned 0x0
	[0262.448] WbemLocator:IUnknown:Release (This=0x7050d4) returned 0x1
	[0262.448] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9258, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efd4 | out: ppvObject=0x19efd4*=0x7050f8) returned 0x0
	[0262.448] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9258, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efd0 | out: ppvObject=0x19efd0*=0x7050d4) returned 0x0
	[0262.448] WbemLocator:IClientSecurity:SetBlanket (This=0x7050d4, pProxy=0x6f9258, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0262.448] WbemLocator:IUnknown:Release (This=0x7050d4) returned 0x2
	[0262.448] WbemLocator:IUnknown:Release (This=0x7050f8) returned 0x1
	[0262.448] CoTaskMemFree (pv=0x6a11da8) 
	[0262.448] WbemLocator:IUnknown:Release (This=0x69b9948) returned 0x0
	[0262.448] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9258, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebd0 | out: ppvObject=0x19ebd0*=0x7050f8) returned 0x0
	[0262.448] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eb8c | out: ppvObject=0x19eb8c*=0x0) returned 0x80004002
	[0262.453] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9ac | out: ppvObject=0x19e9ac*=0x0) returned 0x80004002
	[0262.456] WbemLocator:IUnknown:QueryInterface (in: This=0x6f9258, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e784 | out: ppvObject=0x19e784*=0x0) returned 0x80004002
	[0262.459] WbemLocator:IUnknown:AddRef (This=0x7050f8) returned 0x3
	[0262.459] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e4ec | out: ppvObject=0x19e4ec*=0x0) returned 0x80004002
	[0262.459] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e49c | out: ppvObject=0x19e49c*=0x0) returned 0x80004002
	[0262.459] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4a8 | out: ppvObject=0x19e4a8*=0x705054) returned 0x0
	[0262.459] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x705054, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4b0 | out: pCid=0x19e4b0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.459] WbemLocator:IUnknown:Release (This=0x705054) returned 0x3
	[0262.459] CoGetContextToken (in: pToken=0x19e508 | out: pToken=0x19e508) returned 0x0
	[0262.459] CoGetContextToken (in: pToken=0x19e910 | out: pToken=0x19e910) returned 0x0
	[0262.459] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9a0 | out: ppvObject=0x19e9a0*=0x7050dc) returned 0x0
	[0262.460] WbemLocator:IRpcOptions:Query (in: This=0x7050dc, pPrx=0x7050f8, dwProperty=2, pdwValue=0x19e9c8 | out: pdwValue=0x19e9c8) returned 0x80004002
	[0262.460] WbemLocator:IUnknown:Release (This=0x7050dc) returned 0x3
	[0262.460] WbemLocator:IUnknown:Release (This=0x7050f8) returned 0x2
	[0262.460] CoGetContextToken (in: pToken=0x19eee0 | out: pToken=0x19eee0) returned 0x0
	[0262.460] CoGetContextToken (in: pToken=0x19ee40 | out: pToken=0x19ee40) returned 0x0
	[0262.460] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x19ef10*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef0c | out: ppvObject=0x19ef0c*=0x6f9258) returned 0x0
	[0262.460] WbemLocator:IUnknown:AddRef (This=0x6f9258) returned 0x4
	[0262.460] WbemLocator:IUnknown:Release (This=0x6f9258) returned 0x3
	[0262.460] WbemLocator:IUnknown:Release (This=0x6f9258) returned 0x2
	[0262.460] SysStringLen (param_1=0x0) returned 0x0
	[0262.460] CoGetContextToken (in: pToken=0x19eed8 | out: pToken=0x19eed8) returned 0x0
	[0262.460] WbemLocator:IUnknown:AddRef (This=0x7050f8) returned 0x3
	[0262.460] WbemLocator:IUnknown:QueryInterface (in: This=0x7050f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed6c | out: ppvObject=0x19ed6c*=0x7050f8) returned 0x0
	[0262.460] WbemLocator:IUnknown:Release (This=0x7050f8) returned 0x3
	[0262.460] WbemLocator:IUnknown:Release (This=0x7050f8) returned 0x2
	[0262.461] CoGetContextToken (in: pToken=0x19efc8 | out: pToken=0x19efc8) returned 0x0
	[0262.461] WbemLocator:IUnknown:AddRef (This=0x6f9258) returned 0x3
	[0262.461] IWbemServices:ExecQuery (in: This=0x6f9258, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19f1e0 | out: ppEnum=0x19f1e0*=0x6f3940) returned 0x0
	[0262.514] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f038 | out: ppvObject=0x19f038*=0x6f3944) returned 0x0
	[0262.514] IClientSecurity:QueryBlanket (in: This=0x6f3944, pProxy=0x6f3940, pAuthnSvc=0x19f088, pAuthzSvc=0x19f084, pServerPrincName=0x19f07c, pAuthnLevel=0x19f080, pImpLevel=0x19f070, pAuthInfo=0x19f074, pCapabilites=0x19f078 | out: pAuthnSvc=0x19f088*=0xa, pAuthzSvc=0x19f084*=0x0, pServerPrincName=0x19f07c, pAuthnLevel=0x19f080*=0x6, pImpLevel=0x19f070*=0x2, pAuthInfo=0x19f074, pCapabilites=0x19f078*=0x1) returned 0x0
	[0262.514] IUnknown:Release (This=0x6f3944) returned 0x1
	[0262.514] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f02c | out: ppvObject=0x19f02c*=0x7061f8) returned 0x0
	[0262.514] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f028 | out: ppvObject=0x19f028*=0x6f3944) returned 0x0
	[0262.515] IClientSecurity:SetBlanket (This=0x6f3944, pProxy=0x6f3940, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0262.537] IUnknown:Release (This=0x6f3944) returned 0x2
	[0262.537] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x1
	[0262.537] CoTaskMemFree (pv=0x6a11bc8) 
	[0262.537] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec24 | out: ppvObject=0x19ec24*=0x7061f8) returned 0x0
	[0262.537] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebe0 | out: ppvObject=0x19ebe0*=0x0) returned 0x80004002
	[0262.538] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9fc | out: ppvObject=0x19e9fc*=0x0) returned 0x80004002
	[0262.539] IUnknown:QueryInterface (in: This=0x6f3940, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7d4 | out: ppvObject=0x19e7d4*=0x0) returned 0x80004002
	[0262.539] WbemLocator:IUnknown:AddRef (This=0x7061f8) returned 0x3
	[0262.539] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e53c | out: ppvObject=0x19e53c*=0x0) returned 0x80004002
	[0262.539] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4ec | out: ppvObject=0x19e4ec*=0x0) returned 0x80004002
	[0262.539] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4f8 | out: ppvObject=0x19e4f8*=0x706154) returned 0x0
	[0262.539] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706154, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e500 | out: pCid=0x19e500*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.539] WbemLocator:IUnknown:Release (This=0x706154) returned 0x3
	[0262.540] CoGetContextToken (in: pToken=0x19e558 | out: pToken=0x19e558) returned 0x0
	[0262.540] CoGetContextToken (in: pToken=0x19e960 | out: pToken=0x19e960) returned 0x0
	[0262.540] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9f0 | out: ppvObject=0x19e9f0*=0x7061dc) returned 0x0
	[0262.540] WbemLocator:IRpcOptions:Query (in: This=0x7061dc, pPrx=0x7061f8, dwProperty=2, pdwValue=0x19ea18 | out: pdwValue=0x19ea18) returned 0x80004002
	[0262.540] WbemLocator:IUnknown:Release (This=0x7061dc) returned 0x3
	[0262.540] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x2
	[0262.540] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0262.540] CoGetContextToken (in: pToken=0x19ee98 | out: pToken=0x19ee98) returned 0x0
	[0262.540] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x19ef68*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef64 | out: ppvObject=0x19ef64*=0x6f3940) returned 0x0
	[0262.540] IUnknown:AddRef (This=0x6f3940) returned 0x4
	[0262.540] IUnknown:Release (This=0x6f3940) returned 0x3
	[0262.540] IUnknown:Release (This=0x6f3940) returned 0x2
	[0262.540] WbemLocator:IUnknown:Release (This=0x6f9258) returned 0x2
	[0262.541] SysStringLen (param_1=0x0) returned 0x0
	[0262.541] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09718, puCount=0x19f22c | out: puCount=0x19f22c*=0x2) returned 0x0
	[0262.541] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f228*=0x0, pszText=0x0 | out: puBuffLength=0x19f228*=0xf, pszText=0x0) returned 0x0
	[0262.541] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f228*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f228*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0262.541] CoGetContextToken (in: pToken=0x19f078 | out: pToken=0x19f078) returned 0x0
	[0262.541] IUnknown:AddRef (This=0x6f3940) returned 0x3
	[0262.541] IEnumWbemClassObject:Clone (in: This=0x6f3940, ppEnum=0x19f238 | out: ppEnum=0x19f238*=0x6f3ad0) returned 0x0
	[0262.542] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0fc | out: ppvObject=0x19f0fc*=0x6f3ad4) returned 0x0
	[0262.542] IClientSecurity:QueryBlanket (in: This=0x6f3ad4, pProxy=0x6f3ad0, pAuthnSvc=0x19f14c, pAuthzSvc=0x19f148, pServerPrincName=0x19f140, pAuthnLevel=0x19f144, pImpLevel=0x19f134, pAuthInfo=0x19f138, pCapabilites=0x19f13c | out: pAuthnSvc=0x19f14c*=0xa, pAuthzSvc=0x19f148*=0x0, pServerPrincName=0x19f140, pAuthnLevel=0x19f144*=0x6, pImpLevel=0x19f134*=0x2, pAuthInfo=0x19f138, pCapabilites=0x19f13c*=0x1) returned 0x0
	[0262.542] IUnknown:Release (This=0x6f3ad4) returned 0x1
	[0262.542] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0f0 | out: ppvObject=0x19f0f0*=0x7063f8) returned 0x0
	[0262.543] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0ec | out: ppvObject=0x19f0ec*=0x6f3ad4) returned 0x0
	[0262.543] IClientSecurity:SetBlanket (This=0x6f3ad4, pProxy=0x6f3ad0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0262.545] IUnknown:Release (This=0x6f3ad4) returned 0x2
	[0262.545] WbemLocator:IUnknown:Release (This=0x7063f8) returned 0x1
	[0262.545] CoTaskMemFree (pv=0x6a11ec8) 
	[0262.545] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecd8 | out: ppvObject=0x19ecd8*=0x7063f8) returned 0x0
	[0262.545] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec94 | out: ppvObject=0x19ec94*=0x0) returned 0x80004002
	[0262.546] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eab4 | out: ppvObject=0x19eab4*=0x0) returned 0x80004002
	[0262.546] IUnknown:QueryInterface (in: This=0x6f3ad0, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e88c | out: ppvObject=0x19e88c*=0x0) returned 0x80004002
	[0262.547] WbemLocator:IUnknown:AddRef (This=0x7063f8) returned 0x3
	[0262.547] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5f4 | out: ppvObject=0x19e5f4*=0x0) returned 0x80004002
	[0262.547] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e5a4 | out: ppvObject=0x19e5a4*=0x0) returned 0x80004002
	[0262.547] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5b0 | out: ppvObject=0x19e5b0*=0x706354) returned 0x0
	[0262.547] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706354, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5b8 | out: pCid=0x19e5b8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.547] WbemLocator:IUnknown:Release (This=0x706354) returned 0x3
	[0262.547] CoGetContextToken (in: pToken=0x19e610 | out: pToken=0x19e610) returned 0x0
	[0262.547] CoGetContextToken (in: pToken=0x19ea18 | out: pToken=0x19ea18) returned 0x0
	[0262.548] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eaa8 | out: ppvObject=0x19eaa8*=0x7063dc) returned 0x0
	[0262.548] WbemLocator:IRpcOptions:Query (in: This=0x7063dc, pPrx=0x7063f8, dwProperty=2, pdwValue=0x19ead0 | out: pdwValue=0x19ead0) returned 0x80004002
	[0262.548] WbemLocator:IUnknown:Release (This=0x7063dc) returned 0x3
	[0262.548] WbemLocator:IUnknown:Release (This=0x7063f8) returned 0x2
	[0262.548] CoGetContextToken (in: pToken=0x19efe8 | out: pToken=0x19efe8) returned 0x0
	[0262.548] CoGetContextToken (in: pToken=0x19ef48 | out: pToken=0x19ef48) returned 0x0
	[0262.548] WbemLocator:IUnknown:QueryInterface (in: This=0x7063f8, riid=0x19f018*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f014 | out: ppvObject=0x19f014*=0x6f3ad0) returned 0x0
	[0262.548] IUnknown:AddRef (This=0x6f3ad0) returned 0x4
	[0262.548] IUnknown:Release (This=0x6f3ad0) returned 0x3
	[0262.548] IUnknown:Release (This=0x6f3ad0) returned 0x2
	[0262.548] IUnknown:Release (This=0x6f3940) returned 0x2
	[0262.548] SysStringLen (param_1=0x0) returned 0x0
	[0262.548] IEnumWbemClassObject:Reset (This=0x6f3ad0) returned 0x0
	[0262.549] CoTaskMemAlloc (cb=0x4) returned 0x69b9a98
	[0262.549] IEnumWbemClassObject:Next (in: This=0x6f3ad0, lTimeout=-1, uCount=0x1, apObjects=0x69b9a98, puReturned=0x2c10d2c | out: apObjects=0x69b9a98*=0x6a0b148, puReturned=0x2c10d2c*=0x1) returned 0x0
	[0262.564] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e898 | out: ppvObject=0x19e898*=0x6a0b148) returned 0x0
	[0262.564] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e854 | out: ppvObject=0x19e854*=0x0) returned 0x80004002
	[0262.564] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e674 | out: ppvObject=0x19e674*=0x0) returned 0x80004002
	[0262.564] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e44c | out: ppvObject=0x19e44c*=0x0) returned 0x80004002
	[0262.564] IUnknown:AddRef (This=0x6a0b148) returned 0x3
	[0262.564] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e1b4 | out: ppvObject=0x19e1b4*=0x0) returned 0x80004002
	[0262.564] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e164 | out: ppvObject=0x19e164*=0x0) returned 0x80004002
	[0262.564] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e170 | out: ppvObject=0x19e170*=0x6a0b14c) returned 0x0
	[0262.564] IMarshal:GetUnmarshalClass (in: This=0x6a0b14c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e178 | out: pCid=0x19e178*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0262.564] IUnknown:Release (This=0x6a0b14c) returned 0x3
	[0262.564] CoGetContextToken (in: pToken=0x19e1d0 | out: pToken=0x19e1d0) returned 0x0
	[0262.565] CoGetContextToken (in: pToken=0x19e5d8 | out: pToken=0x19e5d8) returned 0x0
	[0262.565] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e668 | out: ppvObject=0x19e668*=0x0) returned 0x80004002
	[0262.565] IUnknown:Release (This=0x6a0b148) returned 0x2
	[0262.565] CoGetContextToken (in: pToken=0x19eba8 | out: pToken=0x19eba8) returned 0x0
	[0262.565] CoGetContextToken (in: pToken=0x19eb08 | out: pToken=0x19eb08) returned 0x0
	[0262.565] IUnknown:QueryInterface (in: This=0x6a0b148, riid=0x19ebd8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebd4 | out: ppvObject=0x19ebd4*=0x6a0b148) returned 0x0
	[0262.565] IUnknown:AddRef (This=0x6a0b148) returned 0x4
	[0262.565] IUnknown:Release (This=0x6a0b148) returned 0x3
	[0262.565] IUnknown:Release (This=0x6a0b148) returned 0x2
	[0262.565] CoTaskMemFree (pv=0x69b9a98) 
	[0262.565] CoGetContextToken (in: pToken=0x19ef18 | out: pToken=0x19ef18) returned 0x0
	[0262.565] IUnknown:AddRef (This=0x6a0b148) returned 0x3
	[0262.565] IWbemClassObject:Get (in: This=0x6a0b148, wszName="__GENUS", lFlags=0, pVal=0x19f228*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f2a8*=0, plFlavor=0x19f2a4*=0 | out: pVal=0x19f228*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f2a8*=3, plFlavor=0x19f2a4*=64) returned 0x0
	[0262.565] IWbemClassObject:Get (in: This=0x6a0b148, wszName="__PATH", lFlags=0, pVal=0x19f20c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f290*=0, plFlavor=0x19f28c*=0 | out: pVal=0x19f20c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19f290*=8, plFlavor=0x19f28c*=64) returned 0x0
	[0262.565] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0262.566] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a
	[0262.566] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f238 | out: ppv=0x19f238*=0x66b664) returned 0x0
	[0262.566] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f230 | out: pAptType=0x19f230*=1) returned 0x0
	[0262.566] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f234 | out: ppvObject=0x19f234*=0x0) returned 0x80004002
	[0262.566] IUnknown:Release (This=0x66b664) returned 0x1
	[0262.567] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eba0 | out: ppv=0x19eba0*=0x69b9968) returned 0x0
	[0262.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b9968, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19edb8 | out: ppvObject=0x19edb8*=0x0) returned 0x80004002
	[0262.567] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b9968, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edcc | out: ppvObject=0x19edcc*=0x6a08d08) returned 0x0
	[0262.567] WbemDefPath:IUnknown:Release (This=0x69b9968) returned 0x0
	[0262.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08d08, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9ec | out: ppvObject=0x19e9ec*=0x6a08d08) returned 0x0
	[0262.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08d08, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e9a8 | out: ppvObject=0x19e9a8*=0x0) returned 0x80004002
	[0262.567] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08d08, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e59c | out: ppvObject=0x19e59c*=0x0) returned 0x80004002
	[0262.568] WbemDefPath:IUnknown:AddRef (This=0x6a08d08) returned 0x3
	[0262.568] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08d08, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e304 | out: ppvObject=0x19e304*=0x0) returned 0x80004002
	[0262.568] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08d08, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e2b4 | out: ppvObject=0x19e2b4*=0x0) returned 0x80004002
	[0262.568] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08d08, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2c0 | out: ppvObject=0x19e2c0*=0x6a0eff8) returned 0x0
	[0262.568] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0eff8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2c8 | out: pCid=0x19e2c8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.568] WbemDefPath:IUnknown:Release (This=0x6a0eff8) returned 0x3
	[0262.568] CoGetContextToken (in: pToken=0x19e320 | out: pToken=0x19e320) returned 0x0
	[0262.568] CoGetContextToken (in: pToken=0x19e728 | out: pToken=0x19e728) returned 0x0
	[0262.568] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08d08, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7b8 | out: ppvObject=0x19e7b8*=0x0) returned 0x80004002
	[0262.568] WbemDefPath:IUnknown:Release (This=0x6a08d08) returned 0x2
	[0262.568] WbemDefPath:IUnknown:Release (This=0x6a08d08) returned 0x1
	[0262.568] CoGetContextToken (in: pToken=0x19f0b0 | out: pToken=0x19f0b0) returned 0x0
	[0262.568] CoGetContextToken (in: pToken=0x19f010 | out: pToken=0x19f010) returned 0x0
	[0262.568] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a08d08, riid=0x19f0e0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0dc | out: ppvObject=0x19f0dc*=0x6a08d08) returned 0x0
	[0262.568] WbemDefPath:IUnknown:AddRef (This=0x6a08d08) returned 0x3
	[0262.568] WbemDefPath:IUnknown:Release (This=0x6a08d08) returned 0x2
	[0262.568] WbemDefPath:IWbemPath:SetText (This=0x6a08d08, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0
	[0262.569] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09718, puCount=0x19f264 | out: puCount=0x19f264*=0x2) returned 0x0
	[0262.569] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f260*=0x0, pszText=0x0 | out: puBuffLength=0x19f260*=0xf, pszText=0x0) returned 0x0
	[0262.569] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f260*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f260*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0262.569] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6a09718, puCount=0x19f230 | out: puCount=0x19f230*=0x2) returned 0x0
	[0262.569] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f22c*=0x0, pszText=0x0 | out: puBuffLength=0x19f22c*=0xf, pszText=0x0) returned 0x0
	[0262.569] WbemDefPath:IWbemPath:GetText (in: This=0x6a09718, lFlags=4, puBuffLength=0x19f22c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f22c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0
	[0262.569] IWbemClassObject:Get (in: This=0x6a0b148, wszName="AdapterRAM", lFlags=0, pVal=0x19f22c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c11580*=0, plFlavor=0x2c11584*=0 | out: pVal=0x19f22c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c11580*=19, plFlavor=0x2c11584*=0) returned 0x0
	[0262.569] IWbemClassObject:Get (in: This=0x6a0b148, wszName="AdapterRAM", lFlags=0, pVal=0x19f234*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c11580*=19, plFlavor=0x2c11584*=0 | out: pVal=0x19f234*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c11580*=19, plFlavor=0x2c11584*=0) returned 0x0
	[0262.570] CoTaskMemAlloc (cb=0x4) returned 0x69b9a08
	[0262.570] IEnumWbemClassObject:Next (in: This=0x6f3ad0, lTimeout=-1, uCount=0x1, apObjects=0x69b9a08, puReturned=0x2c10d2c | out: apObjects=0x69b9a08*=0x0, puReturned=0x2c10d2c*=0x0) returned 0x1
	[0262.571] CoTaskMemFree (pv=0x69b9a08) 
	[0262.571] CoGetContextToken (in: pToken=0x19f160 | out: pToken=0x19f160) returned 0x0
	[0262.571] WbemLocator:IUnknown:Release (This=0x7063f8) returned 0x1
	[0262.571] IUnknown:Release (This=0x6f3ad0) returned 0x0
	[0262.573] CoGetContextToken (in: pToken=0x19f160 | out: pToken=0x19f160) returned 0x0
	[0262.573] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x1
	[0262.573] IUnknown:Release (This=0x6f3940) returned 0x0
	[0262.607] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f260 | out: puCount=0x19f260*=0x2) returned 0x0
	[0262.607] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f25c*=0x0, pszText=0x0 | out: puBuffLength=0x19f25c*=0xf, pszText=0x0) returned 0x0
	[0262.607] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f25c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f25c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0262.607] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f1e4 | out: ppv=0x19f1e4*=0x66b664) returned 0x0
	[0262.607] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f1dc | out: pAptType=0x19f1dc*=1) returned 0x0
	[0262.607] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f1e0 | out: ppvObject=0x19f1e0*=0x0) returned 0x80004002
	[0262.607] IUnknown:Release (This=0x66b664) returned 0x1
	[0262.608] CoGetClassObject (in: rclsid=0x710e3c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee00 | out: ppv=0x19ee00*=0x6a0efc8) returned 0x0
	[0262.608] WbemLocator:IUnknown:QueryInterface (in: This=0x6a0efc8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f018 | out: ppvObject=0x19f018*=0x0) returned 0x80004002
	[0262.608] WbemLocator:IClassFactory:CreateInstance (in: This=0x6a0efc8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f02c | out: ppvObject=0x19f02c*=0x69b9ac8) returned 0x0
	[0262.608] WbemLocator:IUnknown:Release (This=0x6a0efc8) returned 0x0
	[0262.608] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9ac8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec4c | out: ppvObject=0x19ec4c*=0x69b9ac8) returned 0x0
	[0262.608] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9ac8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec08 | out: ppvObject=0x19ec08*=0x0) returned 0x80004002
	[0262.609] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9ac8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7fc | out: ppvObject=0x19e7fc*=0x0) returned 0x80004002
	[0262.609] WbemLocator:IUnknown:AddRef (This=0x69b9ac8) returned 0x3
	[0262.609] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9ac8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e564 | out: ppvObject=0x19e564*=0x0) returned 0x80004002
	[0262.609] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9ac8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e514 | out: ppvObject=0x19e514*=0x0) returned 0x80004002
	[0262.609] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9ac8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e520 | out: ppvObject=0x19e520*=0x0) returned 0x80004002
	[0262.609] CoGetContextToken (in: pToken=0x19e580 | out: pToken=0x19e580) returned 0x0
	[0262.609] CoGetContextToken (in: pToken=0x19e988 | out: pToken=0x19e988) returned 0x0
	[0262.609] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9ac8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea18 | out: ppvObject=0x19ea18*=0x0) returned 0x80004002
	[0262.609] WbemLocator:IUnknown:Release (This=0x69b9ac8) returned 0x2
	[0262.609] WbemLocator:IUnknown:Release (This=0x69b9ac8) returned 0x1
	[0262.609] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0
	[0262.609] CoGetContextToken (in: pToken=0x19ef58 | out: pToken=0x19ef58) returned 0x0
	[0262.609] WbemLocator:IUnknown:QueryInterface (in: This=0x69b9ac8, riid=0x19f028*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f024 | out: ppvObject=0x19f024*=0x69b9ac8) returned 0x0
	[0262.609] WbemLocator:IUnknown:AddRef (This=0x69b9ac8) returned 0x3
	[0262.609] WbemLocator:IUnknown:Release (This=0x69b9ac8) returned 0x2
	[0262.609] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f1c0 | out: puCount=0x19f1c0*=0x2) returned 0x0
	[0262.609] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=8, puBuffLength=0x19f1bc*=0x0, pszText=0x0 | out: puBuffLength=0x19f1bc*=0xf, pszText=0x0) returned 0x0
	[0262.610] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=8, puBuffLength=0x19f1bc*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f1bc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0262.610] CoCreateInstance (in: rclsid=0x6d331284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6d3312e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f098 | out: ppv=0x19f098*=0x69b9a18) returned 0x0
	[0262.610] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69b9a18, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f12c | out: ppNamespace=0x19f12c*=0x6f8b78) returned 0x0
	[0262.624] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8b78, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efc8 | out: ppvObject=0x19efc8*=0x7062d4) returned 0x0
	[0262.624] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7062d4, pProxy=0x6f8b78, pAuthnSvc=0x19f018, pAuthzSvc=0x19f014, pServerPrincName=0x19f00c, pAuthnLevel=0x19f010, pImpLevel=0x19f000, pAuthInfo=0x19f004, pCapabilites=0x19f008 | out: pAuthnSvc=0x19f018*=0xa, pAuthzSvc=0x19f014*=0x0, pServerPrincName=0x19f00c, pAuthnLevel=0x19f010*=0x6, pImpLevel=0x19f000*=0x2, pAuthInfo=0x19f004, pCapabilites=0x19f008*=0x1) returned 0x0
	[0262.625] WbemLocator:IUnknown:Release (This=0x7062d4) returned 0x1
	[0262.625] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8b78, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efbc | out: ppvObject=0x19efbc*=0x7062f8) returned 0x0
	[0262.625] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8b78, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19efb8 | out: ppvObject=0x19efb8*=0x7062d4) returned 0x0
	[0262.625] WbemLocator:IClientSecurity:SetBlanket (This=0x7062d4, pProxy=0x6f8b78, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0262.626] WbemLocator:IUnknown:Release (This=0x7062d4) returned 0x2
	[0262.626] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x1
	[0262.626] CoTaskMemFree (pv=0x6a11a18) 
	[0262.627] WbemLocator:IUnknown:Release (This=0x69b9a18) returned 0x0
	[0262.627] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8b78, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ebb8 | out: ppvObject=0x19ebb8*=0x7062f8) returned 0x0
	[0262.627] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19eb74 | out: ppvObject=0x19eb74*=0x0) returned 0x80004002
	[0262.627] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e994 | out: ppvObject=0x19e994*=0x0) returned 0x80004002
	[0262.628] WbemLocator:IUnknown:QueryInterface (in: This=0x6f8b78, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e76c | out: ppvObject=0x19e76c*=0x0) returned 0x80004002
	[0262.628] WbemLocator:IUnknown:AddRef (This=0x7062f8) returned 0x3
	[0262.628] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e4d4 | out: ppvObject=0x19e4d4*=0x0) returned 0x80004002
	[0262.628] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e484 | out: ppvObject=0x19e484*=0x0) returned 0x80004002
	[0262.628] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e490 | out: ppvObject=0x19e490*=0x706254) returned 0x0
	[0262.629] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706254, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e498 | out: pCid=0x19e498*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.629] WbemLocator:IUnknown:Release (This=0x706254) returned 0x3
	[0262.629] CoGetContextToken (in: pToken=0x19e4f0 | out: pToken=0x19e4f0) returned 0x0
	[0262.629] CoGetContextToken (in: pToken=0x19e8f8 | out: pToken=0x19e8f8) returned 0x0
	[0262.629] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e988 | out: ppvObject=0x19e988*=0x7062dc) returned 0x0
	[0262.629] WbemLocator:IRpcOptions:Query (in: This=0x7062dc, pPrx=0x7062f8, dwProperty=2, pdwValue=0x19e9b0 | out: pdwValue=0x19e9b0) returned 0x80004002
	[0262.629] WbemLocator:IUnknown:Release (This=0x7062dc) returned 0x3
	[0262.629] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x2
	[0262.629] CoGetContextToken (in: pToken=0x19eec8 | out: pToken=0x19eec8) returned 0x0
	[0262.629] CoGetContextToken (in: pToken=0x19ee28 | out: pToken=0x19ee28) returned 0x0
	[0262.629] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x19eef8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19eef4 | out: ppvObject=0x19eef4*=0x6f8b78) returned 0x0
	[0262.630] WbemLocator:IUnknown:AddRef (This=0x6f8b78) returned 0x4
	[0262.630] WbemLocator:IUnknown:Release (This=0x6f8b78) returned 0x3
	[0262.630] WbemLocator:IUnknown:Release (This=0x6f8b78) returned 0x2
	[0262.630] SysStringLen (param_1=0x0) returned 0x0
	[0262.630] CoGetContextToken (in: pToken=0x19eec0 | out: pToken=0x19eec0) returned 0x0
	[0262.630] WbemLocator:IUnknown:AddRef (This=0x7062f8) returned 0x3
	[0262.630] WbemLocator:IUnknown:QueryInterface (in: This=0x7062f8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed54 | out: ppvObject=0x19ed54*=0x7062f8) returned 0x0
	[0262.630] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x3
	[0262.630] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x2
	[0262.630] CoGetContextToken (in: pToken=0x19efb0 | out: pToken=0x19efb0) returned 0x0
	[0262.630] WbemLocator:IUnknown:AddRef (This=0x6f8b78) returned 0x3
	[0262.630] IWbemServices:ExecQuery (in: This=0x6f8b78, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x19f1c8 | out: ppEnum=0x19f1c8*=0x6f3c60) returned 0x0
	[0262.652] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f020 | out: ppvObject=0x19f020*=0x6f3c64) returned 0x0
	[0262.652] IClientSecurity:QueryBlanket (in: This=0x6f3c64, pProxy=0x6f3c60, pAuthnSvc=0x19f070, pAuthzSvc=0x19f06c, pServerPrincName=0x19f064, pAuthnLevel=0x19f068, pImpLevel=0x19f058, pAuthInfo=0x19f05c, pCapabilites=0x19f060 | out: pAuthnSvc=0x19f070*=0xa, pAuthzSvc=0x19f06c*=0x0, pServerPrincName=0x19f064, pAuthnLevel=0x19f068*=0x6, pImpLevel=0x19f058*=0x2, pAuthInfo=0x19f05c, pCapabilites=0x19f060*=0x1) returned 0x0
	[0262.653] IUnknown:Release (This=0x6f3c64) returned 0x1
	[0262.653] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f014 | out: ppvObject=0x19f014*=0x7061f8) returned 0x0
	[0262.653] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f010 | out: ppvObject=0x19f010*=0x6f3c64) returned 0x0
	[0262.653] IClientSecurity:SetBlanket (This=0x6f3c64, pProxy=0x6f3c60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0262.688] IUnknown:Release (This=0x6f3c64) returned 0x2
	[0262.688] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x1
	[0262.688] CoTaskMemFree (pv=0x6a11cb8) 
	[0262.688] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec0c | out: ppvObject=0x19ec0c*=0x7061f8) returned 0x0
	[0262.688] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ebc8 | out: ppvObject=0x19ebc8*=0x0) returned 0x80004002
	[0262.701] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9e4 | out: ppvObject=0x19e9e4*=0x0) returned 0x80004002
	[0262.709] IUnknown:QueryInterface (in: This=0x6f3c60, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e7bc | out: ppvObject=0x19e7bc*=0x0) returned 0x80004002
	[0262.712] WbemLocator:IUnknown:AddRef (This=0x7061f8) returned 0x3
	[0262.712] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e524 | out: ppvObject=0x19e524*=0x0) returned 0x80004002
	[0262.712] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e4d4 | out: ppvObject=0x19e4d4*=0x0) returned 0x80004002
	[0262.712] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4e0 | out: ppvObject=0x19e4e0*=0x706154) returned 0x0
	[0262.712] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x706154, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e4e8 | out: pCid=0x19e4e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.712] WbemLocator:IUnknown:Release (This=0x706154) returned 0x3
	[0262.712] CoGetContextToken (in: pToken=0x19e540 | out: pToken=0x19e540) returned 0x0
	[0262.713] CoGetContextToken (in: pToken=0x19e948 | out: pToken=0x19e948) returned 0x0
	[0262.713] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9d8 | out: ppvObject=0x19e9d8*=0x7061dc) returned 0x0
	[0262.713] WbemLocator:IRpcOptions:Query (in: This=0x7061dc, pPrx=0x7061f8, dwProperty=2, pdwValue=0x19ea00 | out: pdwValue=0x19ea00) returned 0x80004002
	[0262.713] WbemLocator:IUnknown:Release (This=0x7061dc) returned 0x3
	[0262.713] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x2
	[0262.713] CoGetContextToken (in: pToken=0x19ef20 | out: pToken=0x19ef20) returned 0x0
	[0262.713] CoGetContextToken (in: pToken=0x19ee80 | out: pToken=0x19ee80) returned 0x0
	[0262.713] WbemLocator:IUnknown:QueryInterface (in: This=0x7061f8, riid=0x19ef50*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19ef4c | out: ppvObject=0x19ef4c*=0x6f3c60) returned 0x0
	[0262.713] IUnknown:AddRef (This=0x6f3c60) returned 0x4
	[0262.713] IUnknown:Release (This=0x6f3c60) returned 0x3
	[0262.713] IUnknown:Release (This=0x6f3c60) returned 0x2
	[0262.713] WbemLocator:IUnknown:Release (This=0x6f8b78) returned 0x2
	[0262.713] SysStringLen (param_1=0x0) returned 0x0
	[0262.714] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f214 | out: puCount=0x19f214*=0x2) returned 0x0
	[0262.714] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f210*=0x0, pszText=0x0 | out: puBuffLength=0x19f210*=0xf, pszText=0x0) returned 0x0
	[0262.714] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f210*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f210*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0262.714] CoGetContextToken (in: pToken=0x19f068 | out: pToken=0x19f068) returned 0x0
	[0262.715] IUnknown:AddRef (This=0x6f3c60) returned 0x3
	[0262.715] IEnumWbemClassObject:Clone (in: This=0x6f3c60, ppEnum=0x19f228 | out: ppEnum=0x19f228*=0x6f3d28) returned 0x0
	[0262.717] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0ec | out: ppvObject=0x19f0ec*=0x6f3d2c) returned 0x0
	[0262.717] IClientSecurity:QueryBlanket (in: This=0x6f3d2c, pProxy=0x6f3d28, pAuthnSvc=0x19f13c, pAuthzSvc=0x19f138, pServerPrincName=0x19f130, pAuthnLevel=0x19f134, pImpLevel=0x19f124, pAuthInfo=0x19f128, pCapabilites=0x19f12c | out: pAuthnSvc=0x19f13c*=0xa, pAuthzSvc=0x19f138*=0x0, pServerPrincName=0x19f130, pAuthnLevel=0x19f134*=0x6, pImpLevel=0x19f124*=0x2, pAuthInfo=0x19f128, pCapabilites=0x19f12c*=0x1) returned 0x0
	[0262.717] IUnknown:Release (This=0x6f3d2c) returned 0x1
	[0262.717] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6d3310f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0e0 | out: ppvObject=0x19f0e0*=0x6a18e00) returned 0x0
	[0262.717] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6d331104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0dc | out: ppvObject=0x19f0dc*=0x6f3d2c) returned 0x0
	[0262.717] IClientSecurity:SetBlanket (This=0x6f3d2c, pProxy=0x6f3d28, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0262.719] IUnknown:Release (This=0x6f3d2c) returned 0x2
	[0262.719] WbemLocator:IUnknown:Release (This=0x6a18e00) returned 0x1
	[0262.719] CoTaskMemFree (pv=0x6a11c88) 
	[0262.719] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecc8 | out: ppvObject=0x19ecc8*=0x6a18e00) returned 0x0
	[0262.719] WbemLocator:IUnknown:QueryInterface (in: This=0x6a18e00, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec84 | out: ppvObject=0x19ec84*=0x0) returned 0x80004002
	[0262.719] WbemLocator:IUnknown:QueryInterface (in: This=0x6a18e00, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eaa4 | out: ppvObject=0x19eaa4*=0x0) returned 0x80004002
	[0262.720] IUnknown:QueryInterface (in: This=0x6f3d28, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e87c | out: ppvObject=0x19e87c*=0x0) returned 0x80004002
	[0262.721] WbemLocator:IUnknown:AddRef (This=0x6a18e00) returned 0x3
	[0262.721] WbemLocator:IUnknown:QueryInterface (in: This=0x6a18e00, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5e4 | out: ppvObject=0x19e5e4*=0x0) returned 0x80004002
	[0262.721] WbemLocator:IUnknown:QueryInterface (in: This=0x6a18e00, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e594 | out: ppvObject=0x19e594*=0x0) returned 0x80004002
	[0262.721] WbemLocator:IUnknown:QueryInterface (in: This=0x6a18e00, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5a0 | out: ppvObject=0x19e5a0*=0x6a18d5c) returned 0x0
	[0262.721] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x6a18d5c, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e5a8 | out: pCid=0x19e5a8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.721] WbemLocator:IUnknown:Release (This=0x6a18d5c) returned 0x3
	[0262.721] CoGetContextToken (in: pToken=0x19e600 | out: pToken=0x19e600) returned 0x0
	[0262.721] CoGetContextToken (in: pToken=0x19ea08 | out: pToken=0x19ea08) returned 0x0
	[0262.721] WbemLocator:IUnknown:QueryInterface (in: This=0x6a18e00, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea98 | out: ppvObject=0x19ea98*=0x6a18de4) returned 0x0
	[0262.721] WbemLocator:IRpcOptions:Query (in: This=0x6a18de4, pPrx=0x6a18e00, dwProperty=2, pdwValue=0x19eac0 | out: pdwValue=0x19eac0) returned 0x80004002
	[0262.721] WbemLocator:IUnknown:Release (This=0x6a18de4) returned 0x3
	[0262.721] WbemLocator:IUnknown:Release (This=0x6a18e00) returned 0x2
	[0262.721] CoGetContextToken (in: pToken=0x19efd8 | out: pToken=0x19efd8) returned 0x0
	[0262.721] CoGetContextToken (in: pToken=0x19ef38 | out: pToken=0x19ef38) returned 0x0
	[0262.721] WbemLocator:IUnknown:QueryInterface (in: This=0x6a18e00, riid=0x19f008*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f004 | out: ppvObject=0x19f004*=0x6f3d28) returned 0x0
	[0262.722] IUnknown:AddRef (This=0x6f3d28) returned 0x4
	[0262.722] IUnknown:Release (This=0x6f3d28) returned 0x3
	[0262.722] IUnknown:Release (This=0x6f3d28) returned 0x2
	[0262.722] IUnknown:Release (This=0x6f3c60) returned 0x2
	[0262.722] SysStringLen (param_1=0x0) returned 0x0
	[0262.722] IEnumWbemClassObject:Reset (This=0x6f3d28) returned 0x0
	[0262.722] CoTaskMemAlloc (cb=0x4) returned 0x69b9998
	[0262.723] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9998, puReturned=0x2c12204 | out: apObjects=0x69b9998*=0x6a0bad8, puReturned=0x2c12204*=0x1) returned 0x0
	[0262.727] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e888 | out: ppvObject=0x19e888*=0x6a0bad8) returned 0x0
	[0262.727] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e844 | out: ppvObject=0x19e844*=0x0) returned 0x80004002
	[0262.727] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x6b3dfb20*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e664 | out: ppvObject=0x19e664*=0x0) returned 0x80004002
	[0262.727] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e43c | out: ppvObject=0x19e43c*=0x0) returned 0x80004002
	[0262.727] IUnknown:AddRef (This=0x6a0bad8) returned 0x3
	[0262.727] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e1a4 | out: ppvObject=0x19e1a4*=0x0) returned 0x80004002
	[0262.727] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e154 | out: ppvObject=0x19e154*=0x0) returned 0x80004002
	[0262.727] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e160 | out: ppvObject=0x19e160*=0x6a0badc) returned 0x0
	[0262.727] IMarshal:GetUnmarshalClass (in: This=0x6a0badc, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e168 | out: pCid=0x19e168*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0262.727] IUnknown:Release (This=0x6a0badc) returned 0x3
	[0262.727] CoGetContextToken (in: pToken=0x19e1c0 | out: pToken=0x19e1c0) returned 0x0
	[0262.728] CoGetContextToken (in: pToken=0x19e5c8 | out: pToken=0x19e5c8) returned 0x0
	[0262.728] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e658 | out: ppvObject=0x19e658*=0x0) returned 0x80004002
	[0262.728] IUnknown:Release (This=0x6a0bad8) returned 0x2
	[0262.728] CoGetContextToken (in: pToken=0x19eb98 | out: pToken=0x19eb98) returned 0x0
	[0262.728] CoGetContextToken (in: pToken=0x19eaf8 | out: pToken=0x19eaf8) returned 0x0
	[0262.728] IUnknown:QueryInterface (in: This=0x6a0bad8, riid=0x19ebc8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19ebc4 | out: ppvObject=0x19ebc4*=0x6a0bad8) returned 0x0
	[0262.728] IUnknown:AddRef (This=0x6a0bad8) returned 0x4
	[0262.728] IUnknown:Release (This=0x6a0bad8) returned 0x3
	[0262.728] IUnknown:Release (This=0x6a0bad8) returned 0x2
	[0262.728] CoTaskMemFree (pv=0x69b9998) 
	[0262.728] CoGetContextToken (in: pToken=0x19ef08 | out: pToken=0x19ef08) returned 0x0
	[0262.728] IUnknown:AddRef (This=0x6a0bad8) returned 0x3
	[0262.728] IWbemClassObject:Get (in: This=0x6a0bad8, wszName="__GENUS", lFlags=0, pVal=0x19f210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f290*=0, plFlavor=0x19f28c*=0 | out: pVal=0x19f210*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19f290*=3, plFlavor=0x19f28c*=64) returned 0x0
	[0262.728] IWbemClassObject:Get (in: This=0x6a0bad8, wszName="__PATH", lFlags=0, pVal=0x19f1f4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19f278*=0, plFlavor=0x19f274*=0 | out: pVal=0x19f1f4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x19f278*=8, plFlavor=0x19f274*=64) returned 0x0
	[0262.728] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72
	[0262.729] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72
	[0262.729] CoGetObjectContext (in: riid=0x29cbcd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f220 | out: ppv=0x19f220*=0x66b664) returned 0x0
	[0262.729] IComThreadingInfo:GetCurrentApartmentType (in: This=0x66b664, pAptType=0x19f218 | out: pAptType=0x19f218*=1) returned 0x0
	[0262.729] IUnknown:QueryInterface (in: This=0x66b664, riid=0x29cbcc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f21c | out: ppvObject=0x19f21c*=0x0) returned 0x80004002
	[0262.729] IUnknown:Release (This=0x66b664) returned 0x1
	[0262.733] CoGetClassObject (in: rclsid=0x7113dc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6b3554e0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19eb88 | out: ppv=0x19eb88*=0x69b99e8) returned 0x0
	[0262.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b99e8, riid=0x6b3095e0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eda0 | out: ppvObject=0x19eda0*=0x0) returned 0x80004002
	[0262.734] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b99e8, pUnkOuter=0x0, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edb4 | out: ppvObject=0x19edb4*=0x6a09a28) returned 0x0
	[0262.734] WbemDefPath:IUnknown:Release (This=0x69b99e8) returned 0x0
	[0262.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09a28, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e9d4 | out: ppvObject=0x19e9d4*=0x6a09a28) returned 0x0
	[0262.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09a28, riid=0x6b3dfdcc*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e990 | out: ppvObject=0x19e990*=0x0) returned 0x80004002
	[0262.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09a28, riid=0x6b3e056c*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e584 | out: ppvObject=0x19e584*=0x0) returned 0x80004002
	[0262.734] WbemDefPath:IUnknown:AddRef (This=0x6a09a28) returned 0x3
	[0262.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09a28, riid=0x6b3e0208*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e2ec | out: ppvObject=0x19e2ec*=0x0) returned 0x80004002
	[0262.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09a28, riid=0x6b3e015c*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e29c | out: ppvObject=0x19e29c*=0x0) returned 0x80004002
	[0262.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09a28, riid=0x6b2b40e8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e2a8 | out: ppvObject=0x19e2a8*=0x6a0f340) returned 0x0
	[0262.734] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x6a0f340, riid=0x6b2a6c6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e2b0 | out: pCid=0x19e2b0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0262.734] WbemDefPath:IUnknown:Release (This=0x6a0f340) returned 0x3
	[0262.734] CoGetContextToken (in: pToken=0x19e308 | out: pToken=0x19e308) returned 0x0
	[0262.735] CoGetContextToken (in: pToken=0x19e710 | out: pToken=0x19e710) returned 0x0
	[0262.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09a28, riid=0x6b3e0448*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e7a0 | out: ppvObject=0x19e7a0*=0x0) returned 0x80004002
	[0262.735] WbemDefPath:IUnknown:Release (This=0x6a09a28) returned 0x2
	[0262.735] WbemDefPath:IUnknown:Release (This=0x6a09a28) returned 0x1
	[0262.735] CoGetContextToken (in: pToken=0x19f098 | out: pToken=0x19f098) returned 0x0
	[0262.735] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0
	[0262.735] WbemDefPath:IUnknown:QueryInterface (in: This=0x6a09a28, riid=0x19f0c8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19f0c4 | out: ppvObject=0x19f0c4*=0x6a09a28) returned 0x0
	[0262.735] WbemDefPath:IUnknown:AddRef (This=0x6a09a28) returned 0x3
	[0262.735] WbemDefPath:IUnknown:Release (This=0x6a09a28) returned 0x2
	[0262.735] WbemDefPath:IWbemPath:SetText (This=0x6a09a28, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0
	[0262.735] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f24c | out: puCount=0x19f24c*=0x2) returned 0x0
	[0262.735] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f248*=0x0, pszText=0x0 | out: puBuffLength=0x19f248*=0xf, pszText=0x0) returned 0x0
	[0262.735] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f248*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f248*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0262.735] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x63e610, puCount=0x19f218 | out: puCount=0x19f218*=0x2) returned 0x0
	[0262.735] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f214*=0x0, pszText=0x0 | out: puBuffLength=0x19f214*=0xf, pszText=0x0) returned 0x0
	[0262.735] WbemDefPath:IWbemPath:GetText (in: This=0x63e610, lFlags=4, puBuffLength=0x19f214*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f214*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0262.735] IWbemClassObject:Get (in: This=0x6a0bad8, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x19f214*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c12a90*=0, plFlavor=0x2c12a94*=0 | out: pVal=0x19f214*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2c12a90*=21, plFlavor=0x2c12a94*=0) returned 0x0
	[0262.735] SysStringByteLen (bstr="2096620") returned 0xe
	[0262.735] SysStringByteLen (bstr="2096620") returned 0xe
	[0262.736] IWbemClassObject:Get (in: This=0x6a0bad8, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x19f21c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c12a90*=21, plFlavor=0x2c12a94*=0 | out: pVal=0x19f21c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2c12a90*=21, plFlavor=0x2c12a94*=0) returned 0x0
	[0262.736] SysStringByteLen (bstr="2096620") returned 0xe
	[0262.736] SysStringByteLen (bstr="2096620") returned 0xe
	[0262.761] CoTaskMemAlloc (cb=0x4) returned 0x69b9af8
	[0262.761] IEnumWbemClassObject:Next (in: This=0x6f3d28, lTimeout=-1, uCount=0x1, apObjects=0x69b9af8, puReturned=0x2c12204 | out: apObjects=0x69b9af8*=0x0, puReturned=0x2c12204*=0x0) returned 0x1
	[0262.762] CoTaskMemFree (pv=0x69b9af8) 
	[0262.762] CoGetContextToken (in: pToken=0x19f150 | out: pToken=0x19f150) returned 0x0
	[0262.762] WbemLocator:IUnknown:Release (This=0x6a18e00) returned 0x1
	[0262.762] IUnknown:Release (This=0x6f3d28) returned 0x0
	[0262.765] CoGetContextToken (in: pToken=0x19f148 | out: pToken=0x19f148) returned 0x0
	[0262.765] WbemLocator:IUnknown:Release (This=0x7061f8) returned 0x1
	[0262.765] IUnknown:Release (This=0x6f3c60) returned 0x0
	[0262.841] GdipCreateFromHWND (hwnd=0x0, graphics=0x19f264) returned 0x0
	[0262.843] GdipGetDC (graphics=0x6fc1f08, hdc=0x19f27c) returned 0x0
	[0262.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdi32", cchWideChar=5, lpMultiByteStr=0x19f21c, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gdi32ñá\x06P»\x95÷ «)khö\x19", lpUsedDefaultChar=0x0) returned 5
	[0262.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDeviceCaps", cchWideChar=13, lpMultiByteStr=0x19f214, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDeviceCapsòá\x06P»\x95÷ «)khö\x19", lpUsedDefaultChar=0x0) returned 13
	[0262.954] GdipReleaseDC (graphics=0x6fc1f08, hdc=0xa0100d0) returned 0x0
	[0263.123] GdipDeleteGraphics (graphics=0x6fc1f08) returned 0x0
	[0263.618] GdipCreateBitmapFromScan0 (width=1440, height=900, stride=0, format=0x26200a, scan0=0x0, bitmap=0x19f260) returned 0x0
	[0263.724] GdipGetImagePixelFormat (image=0x6fc1f08, format=0x19f2d8) returned 0x0
	[0263.725] GdipGetImageGraphicsContext (image=0x6fc1f08, graphics=0x19f2e4) returned 0x0
	[0263.731] GdipSetInterpolationMode (graphics=0x6fc2408, interpolationMode=0x4) returned 0x0
	[0263.742] GdipSetPixelOffsetMode (graphics=0x6fc2408, pixelOffsetMode=0x1) returned 0x0
	[0263.744] GdipSetSmoothingMode (graphics=0x6fc2408, smoothingMode=0x1) returned 0x0
	[0264.097] GetCurrentObject (hdc=0x1f010704, type=0x1) returned 0x1b00017
	[0264.097] GetCurrentObject (hdc=0x1f010704, type=0x2) returned 0x1900010
	[0264.098] GetCurrentObject (hdc=0x1f010704, type=0x7) returned 0xbf050541
	[0264.098] GetCurrentObject (hdc=0x1f010704, type=0x6) returned 0x18a0048
	[0264.098] GdipGetDC (graphics=0x6fc2408, hdc=0x19f1e0) returned 0x0
	[0264.568] GdipReleaseDC (graphics=0x6fc2408, hdc=0x320106c7) returned 0x0
	[0264.575] GdipDeleteGraphics (graphics=0x6fc2408) returned 0x0
	[0264.603] GdipGetImageEncodersSize (numEncoders=0x19f254, size=0x19f250) returned 0x0
	[0264.603] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x6a1bf80
	[0264.604] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x6a1bf80 | out: encoders=0x6a1bf80) returned 0x0
	[0264.620] LocalFree (hMem=0x6a1bf80) returned 0x0
	[0264.902] GdipSaveImageToStream (image=0x6fc1f08, stream=0x2300010, clsidEncoder=0x19f264*(Data1=0x557cf406, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0
	[0266.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Security\\4e4cb6e2e651b6d243241e4edd14b3f3\\System.Security.ni.dll.aux", nBufferLength=0x104, lpBuffer=0x19b550, lpFilePart=0x19b54c | out: lpBuffer="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Security\\4e4cb6e2e651b6d243241e4edd14b3f3\\System.Security.ni.dll.aux", lpFilePart=0x19b54c*="System.Security.ni.dll.aux") returned 0x7a
	[0266.449] CreateFileW (lpFileName="C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Security\\4e4cb6e2e651b6d243241e4edd14b3f3\\System.Security.ni.dll.aux" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.security\\4e4cb6e2e651b6d243241e4edd14b3f3\\system.security.ni.dll.aux"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0266.450] GetFileSize (in: hFile=0x3f4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x390
	[0266.450] ReadFile (in: hFile=0x3f4, lpBuffer=0x69b3588, nNumberOfBytesToRead=0x390, lpNumberOfBytesRead=0x19b834, lpOverlapped=0x0 | out: lpBuffer=0x69b3588*, lpNumberOfBytesRead=0x19b834*=0x390, lpOverlapped=0x0) returned 1
	[0266.453] CloseHandle (hObject=0x3f4) returned 1
	[0266.741] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f18c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0266.741] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local", lpDst=0x19f18c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local") returned 0x24
	[0266.741] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NordVPN", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NordVPN", lpFilePart=0x0) returned 0x2b
	[0266.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f26c) returned 1
	[0266.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NordVPN" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\nordvpn"), fInfoLevelId=0x0, lpFileInformation=0x2b5004c | out: lpFileInformation=0x2b5004c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0266.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f268) returned 1
	[0266.777] ExpandEnvironmentStringsW (in: lpSrc="%USERPFile.WriteROFILE%", lpDst=0x19f15c, nSize=0x64 | out: lpDst="%USERPFile.WriteROFILE%") returned 0x18
	[0266.778] ExpandEnvironmentStringsW (in: lpSrc="%USERPFile.WriteROFILE%\\AppFile.WriteData\\RoamiFile.Writeng", lpDst=0x19f15c, nSize=0x64 | out: lpDst="%USERPFile.WriteROFILE%\\AppFile.WriteData\\RoamiFile.Writeng") returned 0x3c
	[0266.947] GetFullPathNameW (in: lpFileName="%USERPROFILE%\\AppData\\Roaming\\OpenVPN Connect\\profiles", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Roaming\\OpenVPN Connect\\profiles", lpFilePart=0x0) returned 0x54
	[0266.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0266.947] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Roaming\\OpenVPN Connect\\profiles", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Roaming\\OpenVPN Connect\\profiles", lpFilePart=0x0) returned 0x54
	[0266.948] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Roaming\\OpenVPN Connect\\profiles\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Roaming\\OpenVPN Connect\\profiles\\", lpFilePart=0x0) returned 0x55
	[0266.948] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Roaming\\OpenVPN Connect\\profiles\\*ovpn" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\c:\\users\\rdhj0cnfevzx"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0266.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0266.997] ExpandEnvironmentStringsW (in: lpSrc="%USERPserviceInterface.ExtensionROFILE%", lpDst=0x19f168, nSize=0x64 | out: lpDst="%USERPserviceInterface.ExtensionROFILE%") returned 0x28
	[0266.997] ExpandEnvironmentStringsW (in: lpSrc="%USERPserviceInterface.ExtensionROFILE%\\ApserviceInterface.ExtensionpData\\LocaserviceInterface.Extensionl", lpDst=0x19f168, nSize=0x64 | out: lpDst="%USERPserviceInterface.ExtensionROFILE%\\ApserviceInterface.ExtensionpData\\LocaserviceInterface.Exte\x19ʌ") returned 0x6a
	[0266.997] ExpandEnvironmentStringsW (in: lpSrc="%USERPserviceInterface.ExtensionROFILE%\\ApserviceInterface.ExtensionpData\\LocaserviceInterface.Extensionl", lpDst=0x19f15c, nSize=0x6a | out: lpDst="%USERPserviceInterface.ExtensionROFILE%\\ApserviceInterface.ExtensionpData\\LocaserviceInterface.Extensionl") returned 0x6a
	[0266.998] GetFullPathNameW (in: lpFileName="%USERPROFILE%\\AppData\\Local\\ProtonVPN", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Local\\ProtonVPN", lpFilePart=0x0) returned 0x43
	[0266.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0266.998] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Local\\ProtonVPN", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Local\\ProtonVPN", lpFilePart=0x0) returned 0x43
	[0266.998] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Local\\ProtonVPN\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Local\\ProtonVPN\\", lpFilePart=0x0) returned 0x44
	[0266.998] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\%USERPROFILE%\\AppData\\Local\\ProtonVPN\\*ovpn" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\c:\\users\\rdhj0cnfevzx"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0266.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0267.117] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f0d0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0267.117] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\discord\\Local Storage\\leveldb", lpDst=0x19f0d0, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb") returned 0x44
	[0267.117] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19ed48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43
	[0267.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1fc) returned 1
	[0267.118] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19ed04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43
	[0267.118] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x19ecd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x44
	[0267.119] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\*.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord\\local storage\\leveldb\\*.log"), lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0267.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c0) returned 1
	[0267.122] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19ed48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43
	[0267.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1fc) returned 1
	[0267.122] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19ed04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43
	[0267.122] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x19ecd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x44
	[0267.122] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\*.ldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord\\local storage\\leveldb\\*.ldb"), lpFindFileData=0x19ef24 | out: lpFindFileData=0x19ef24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0267.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f1c0) returned 1
	[0267.388] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x424) returned 0x0
	[0267.388] RegQueryInfoKeyW (in: hKey=0x424, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x19f2e8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x19f2e4, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x19f2e8*=0x2c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x19f2e4*=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x0, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x1, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x2, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x3, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DXM_Runtime", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x4, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x5, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x6, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x7, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x8, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.389] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x9, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.389] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0xa, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MPlayer2", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0xb, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0xc, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0xd, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{0FA68574-690B-4B00-89AA-B28946231449}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0xe, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0xf, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x10, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x11, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x12, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.390] CoTaskMemFree (pv=0x0) 
	[0267.390] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x13, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x14, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x15, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x16, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x17, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x18, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x19, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{65e650ff-30be-469d-b63a-418d71ea1765}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x1a, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x1b, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x1c, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-008C-0000-0000-0000000FF1CE}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.391] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x1d, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-008C-0409-0000-0000000FF1CE}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.391] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x1e, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x1f, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{B175520C-86A2-35A7-8619-86DC379688B9}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x20, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x21, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x22, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x23, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x24, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x25, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x26, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x27, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.392] CoTaskMemFree (pv=0x0) 
	[0267.392] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x28, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.393] CoTaskMemFree (pv=0x0) 
	[0267.393] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x29, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.393] CoTaskMemFree (pv=0x0) 
	[0267.393] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x2a, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.393] CoTaskMemFree (pv=0x0) 
	[0267.393] RegEnumKeyExW (in: hKey=0x424, dwIndex=0x2b, lpName=0x2b55d94, lpcchName=0x19f304, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0x19f304, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0267.393] CoTaskMemFree (pv=0x0) 
	[0267.393] RegOpenKeyExW (in: hKey=0x424, lpSubKey="AddressBook", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.393] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.393] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.393] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.394] RegOpenKeyExW (in: hKey=0x424, lpSubKey="Connection Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.394] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.394] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.394] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.394] RegOpenKeyExW (in: hKey=0x424, lpSubKey="DirectDrawEx", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.394] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.394] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.394] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.394] RegOpenKeyExW (in: hKey=0x424, lpSubKey="DXM_Runtime", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.394] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.394] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.394] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.395] RegOpenKeyExW (in: hKey=0x424, lpSubKey="Fontcore", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.395] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.395] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.395] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.395] RegOpenKeyExW (in: hKey=0x424, lpSubKey="IE40", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.395] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.395] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.395] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.395] RegOpenKeyExW (in: hKey=0x424, lpSubKey="IE4Data", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.395] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.395] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.395] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.395] RegOpenKeyExW (in: hKey=0x424, lpSubKey="IE5BAKEX", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.396] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.396] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.396] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.396] RegOpenKeyExW (in: hKey=0x424, lpSubKey="IEData", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.396] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.396] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.396] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.396] RegOpenKeyExW (in: hKey=0x424, lpSubKey="MobileOptionPack", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.396] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.396] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.396] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.397] RegOpenKeyExW (in: hKey=0x424, lpSubKey="MPlayer2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.397] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.397] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.397] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.397] RegOpenKeyExW (in: hKey=0x424, lpSubKey="SchedulingAgent", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.397] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.397] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.397] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.397] RegOpenKeyExW (in: hKey=0x424, lpSubKey="WIC", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.397] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.397] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.397] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.397] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{0FA68574-690B-4B00-89AA-B28946231449}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.398] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x7e) returned 0x0
	[0267.398] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b582b8, lpcbData=0x19f2dc*=0x7e | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508", lpcbData=0x19f2dc*=0x7e) returned 0x0
	[0267.398] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x18) returned 0x0
	[0267.398] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b58424, lpcbData=0x19f2dc*=0x18 | out: lpType=0x19f2e0*=0x1, lpData="14.25.28508", lpcbData=0x19f2dc*=0x18) returned 0x0
	[0267.471] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.471] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.472] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x76) returned 0x0
	[0267.472] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5dd14, lpcbData=0x19f2dc*=0x76 | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpcbData=0x19f2dc*=0x76) returned 0x0
	[0267.472] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.472] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5de70, lpcbData=0x19f2dc*=0x16 | out: lpType=0x19f2e0*=0x1, lpData="12.0.21005", lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.472] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.472] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.472] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.472] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.472] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.472] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.472] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.473] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.473] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.473] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.473] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.473] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.473] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.473] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.473] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.473] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.473] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.473] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.473] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.473] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.473] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.474] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.474] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.474] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.474] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.474] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.474] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.474] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.474] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.474] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.474] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x78) returned 0x0
	[0267.474] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5eeb8, lpcbData=0x19f2dc*=0x78 | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508", lpcbData=0x19f2dc*=0x78) returned 0x0
	[0267.474] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x18) returned 0x0
	[0267.474] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5f014, lpcbData=0x19f2dc*=0x18 | out: lpType=0x19f2e0*=0x1, lpData="14.25.28508", lpcbData=0x19f2dc*=0x18) returned 0x0
	[0267.475] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.475] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.475] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x7a) returned 0x0
	[0267.475] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5f3b0, lpcbData=0x19f2dc*=0x7a | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpcbData=0x19f2dc*=0x7a) returned 0x0
	[0267.475] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1a) returned 0x0
	[0267.475] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5f514, lpcbData=0x19f2dc*=0x1a | out: lpType=0x19f2e0*=0x1, lpData="11.0.61030.0", lpcbData=0x19f2dc*=0x1a) returned 0x0
	[0267.475] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.475] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.475] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x7a) returned 0x0
	[0267.475] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5f8bc, lpcbData=0x19f2dc*=0x7a | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpcbData=0x19f2dc*=0x7a) returned 0x0
	[0267.475] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1a) returned 0x0
	[0267.475] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5fa20, lpcbData=0x19f2dc*=0x1a | out: lpType=0x19f2e0*=0x1, lpData="12.0.30501.0", lpcbData=0x19f2dc*=0x1a) returned 0x0
	[0267.476] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.476] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{65e650ff-30be-469d-b63a-418d71ea1765}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.476] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x86) returned 0x0
	[0267.476] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5fdf4, lpcbData=0x19f2dc*=0x86 | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508", lpcbData=0x19f2dc*=0x86) returned 0x0
	[0267.476] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1c) returned 0x0
	[0267.476] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b5ff70, lpcbData=0x19f2dc*=0x1c | out: lpType=0x19f2e0*=0x1, lpData="14.25.28508.3", lpcbData=0x19f2dc*=0x1c) returned 0x0
	[0267.476] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.476] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.477] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x86) returned 0x0
	[0267.477] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b60328, lpcbData=0x19f2dc*=0x86 | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508", lpcbData=0x19f2dc*=0x86) returned 0x0
	[0267.477] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1c) returned 0x0
	[0267.477] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b604a4, lpcbData=0x19f2dc*=0x1c | out: lpType=0x19f2e0*=0x1, lpData="14.25.28508.3", lpcbData=0x19f2dc*=0x1c) returned 0x0
	[0267.477] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.477] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.477] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x54) returned 0x0
	[0267.477] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b6085c, lpcbData=0x19f2dc*=0x54 | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2005 Redistributable", lpcbData=0x19f2dc*=0x54) returned 0x0
	[0267.477] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x14) returned 0x0
	[0267.477] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b60970, lpcbData=0x19f2dc*=0x14 | out: lpType=0x19f2e0*=0x1, lpData="8.0.61001", lpcbData=0x19f2dc*=0x14) returned 0x0
	[0267.477] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.478] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{90160000-008C-0000-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.478] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x5e) returned 0x0
	[0267.478] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b60cdc, lpcbData=0x19f2dc*=0x5e | out: lpType=0x19f2e0*=0x1, lpData="Office 16 Click-to-Run Extensibility Component", lpcbData=0x19f2dc*=0x5e) returned 0x0
	[0267.478] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1e) returned 0x0
	[0267.478] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b60e08, lpcbData=0x19f2dc*=0x1e | out: lpType=0x19f2e0*=0x1, lpData="16.0.4266.1003", lpcbData=0x19f2dc*=0x1e) returned 0x0
	[0267.478] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.478] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{90160000-008C-0409-0000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.478] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x5c) returned 0x0
	[0267.478] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b611ec, lpcbData=0x19f2dc*=0x5c | out: lpType=0x19f2e0*=0x1, lpData="Office 16 Click-to-Run Localization Component", lpcbData=0x19f2dc*=0x5c) returned 0x0
	[0267.479] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1e) returned 0x0
	[0267.479] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b61310, lpcbData=0x19f2dc*=0x1e | out: lpType=0x19f2e0*=0x1, lpData="16.0.4266.1003", lpcbData=0x19f2dc*=0x1e) returned 0x0
	[0267.479] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.479] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.479] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x7e) returned 0x0
	[0267.479] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b616a8, lpcbData=0x19f2dc*=0x7e | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpcbData=0x19f2dc*=0x7e) returned 0x0
	[0267.479] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1e) returned 0x0
	[0267.479] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b61814, lpcbData=0x19f2dc*=0x1e | out: lpType=0x19f2e0*=0x1, lpData="9.0.30729.6161", lpcbData=0x19f2dc*=0x1e) returned 0x0
	[0267.479] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.479] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.479] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x7c) returned 0x0
	[0267.479] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b61bcc, lpcbData=0x19f2dc*=0x7c | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpcbData=0x19f2dc*=0x7c) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b61d30, lpcbData=0x19f2dc*=0x16 | out: lpType=0x19f2e0*=0x1, lpData="11.0.61030", lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.480] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.480] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x76) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b620d0, lpcbData=0x19f2dc*=0x76 | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpcbData=0x19f2dc*=0x76) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b6222c, lpcbData=0x19f2dc*=0x16 | out: lpType=0x19f2e0*=0x1, lpData="11.0.61030", lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.480] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.480] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x7a) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b625c4, lpcbData=0x19f2dc*=0x7a | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpcbData=0x19f2dc*=0x7a) returned 0x0
	[0267.480] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1a) returned 0x0
	[0267.481] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b62728, lpcbData=0x19f2dc*=0x1a | out: lpType=0x19f2e0*=0x1, lpData="11.0.61030.0", lpcbData=0x19f2dc*=0x1a) returned 0x0
	[0267.481] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.481] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.481] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x7a) returned 0x0
	[0267.481] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b62ad0, lpcbData=0x19f2dc*=0x7a | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpcbData=0x19f2dc*=0x7a) returned 0x0
	[0267.481] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x1a) returned 0x0
	[0267.481] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b62c34, lpcbData=0x19f2dc*=0x1a | out: lpType=0x19f2e0*=0x1, lpData="12.0.30501.0", lpcbData=0x19f2dc*=0x1a) returned 0x0
	[0267.481] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.481] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.481] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x78) returned 0x0
	[0267.481] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b62fdc, lpcbData=0x19f2dc*=0x78 | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219", lpcbData=0x19f2dc*=0x78) returned 0x0
	[0267.482] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.482] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b63138, lpcbData=0x19f2dc*=0x16 | out: lpType=0x19f2e0*=0x1, lpData="10.0.40219", lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.482] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.482] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.482] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.482] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.482] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.482] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.482] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.482] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.482] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.482] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.483] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.483] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.483] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.483] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.483] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.483] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.483] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.483] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.483] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.483] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.483] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.483] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.483] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.483] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.484] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.484] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.484] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.484] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x0, lpData=0x0, lpcbData=0x19f2dc*=0x0) returned 0x2
	[0267.484] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.484] RegOpenKeyExW (in: hKey=0x424, lpSubKey="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f2c0 | out: phkResult=0x19f2c0*=0x3f4) returned 0x0
	[0267.484] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x7c) returned 0x0
	[0267.484] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b64184, lpcbData=0x19f2dc*=0x7c | out: lpType=0x19f2e0*=0x1, lpData="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpcbData=0x19f2dc*=0x7c) returned 0x0
	[0267.484] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x0, lpcbData=0x19f2dc*=0x0 | out: lpType=0x19f2e0*=0x1, lpData=0x0, lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.484] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DisplayVersion", lpReserved=0x0, lpType=0x19f2e0, lpData=0x2b642e8, lpcbData=0x19f2dc*=0x16 | out: lpType=0x19f2e0*=0x1, lpData="12.0.21005", lpcbData=0x19f2dc*=0x16) returned 0x0
	[0267.484] RegCloseKey (hKey=0x3f4) returned 0x0
	[0267.484] RegCloseKey (hKey=0x424) returned 0x0
	[0269.025] CoTaskMemAlloc (cb=0x20c) returned 0x7183a8
	[0269.025] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7183a8 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0
	[0269.026] CoTaskMemFree (pv=0x7183a8) 
	[0269.026] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0269.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0269.026] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25
	[0269.026] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x26
	[0269.026] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\*"), lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x77ec8a9, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x77ec8a9, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.027] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x77ec8a9, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x77ec8a9, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.028] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc773d80, ftCreationTime.dwHighDateTime=0x1d8532f, ftLastAccessTime.dwLowDateTime=0x4c715be0, ftLastAccessTime.dwHighDateTime=0x1d85838, ftLastWriteTime.dwLowDateTime=0x4c715be0, ftLastWriteTime.dwHighDateTime=0x1d85838, nFileSizeHigh=0x0, nFileSizeLow=0x9547, dwReserved0=0x0, dwReserved1=0x0, cFileName="1-hf1rcRn6It.mp3", cAlternateFileName="1-HF1R~1.MP3")) returned 1
	[0269.028] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8625c70, ftCreationTime.dwHighDateTime=0x1d85305, ftLastAccessTime.dwLowDateTime=0x91c0e080, ftLastAccessTime.dwHighDateTime=0x1d85770, ftLastWriteTime.dwLowDateTime=0x91c0e080, ftLastWriteTime.dwHighDateTime=0x1d85770, nFileSizeHigh=0x0, nFileSizeLow=0x66b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="1x4o kqm8JIQ.mkv", cAlternateFileName="1X4OKQ~1.MKV")) returned 1
	[0269.028] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc41e0, ftCreationTime.dwHighDateTime=0x1d856c0, ftLastAccessTime.dwLowDateTime=0x8fa012c0, ftLastAccessTime.dwHighDateTime=0x1d85875, ftLastWriteTime.dwLowDateTime=0x8fa012c0, ftLastWriteTime.dwHighDateTime=0x1d85875, nFileSizeHigh=0x0, nFileSizeLow=0x2f2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Sd6pEP.mp3", cAlternateFileName="")) returned 1
	[0269.028] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79f45f40, ftCreationTime.dwHighDateTime=0x1d8568f, ftLastAccessTime.dwLowDateTime=0x9ee94d60, ftLastAccessTime.dwHighDateTime=0x1d85711, ftLastWriteTime.dwLowDateTime=0x9ee94d60, ftLastWriteTime.dwHighDateTime=0x1d85711, nFileSizeHigh=0x0, nFileSizeLow=0xea0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7I0sk8Qcnu.ots", cAlternateFileName="7I0SK8~1.OTS")) returned 1
	[0269.029] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a54ae20, ftCreationTime.dwHighDateTime=0x1d85844, ftLastAccessTime.dwLowDateTime=0x2f184310, ftLastAccessTime.dwHighDateTime=0x1d85865, ftLastWriteTime.dwLowDateTime=0x2f184310, ftLastWriteTime.dwHighDateTime=0x1d85865, nFileSizeHigh=0x0, nFileSizeLow=0xd0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Q4j_vzFP-n39uv-1.jpg", cAlternateFileName="7Q4J_V~1.JPG")) returned 1
	[0269.044] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30a888f0, ftCreationTime.dwHighDateTime=0x1d85173, ftLastAccessTime.dwLowDateTime=0x51603930, ftLastAccessTime.dwHighDateTime=0x1d8547f, ftLastWriteTime.dwLowDateTime=0x51603930, ftLastWriteTime.dwHighDateTime=0x1d8547f, nFileSizeHigh=0x0, nFileSizeLow=0xeedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9JHB.flv", cAlternateFileName="")) returned 1
	[0269.044] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0269.044] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ab0770, ftCreationTime.dwHighDateTime=0x1d84ca0, ftLastAccessTime.dwLowDateTime=0x15d70390, ftLastAccessTime.dwHighDateTime=0x1d8544c, ftLastWriteTime.dwLowDateTime=0x15d70390, ftLastWriteTime.dwHighDateTime=0x1d8544c, nFileSizeHigh=0x0, nFileSizeLow=0x4ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="bC39mXhnQr.m4a", cAlternateFileName="BC39MX~1.M4A")) returned 1
	[0269.044] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0cbe5c0, ftCreationTime.dwHighDateTime=0x1d84f93, ftLastAccessTime.dwLowDateTime=0xffc87900, ftLastAccessTime.dwHighDateTime=0x1d8566a, ftLastWriteTime.dwLowDateTime=0xffc87900, ftLastWriteTime.dwHighDateTime=0x1d8566a, nFileSizeHigh=0x0, nFileSizeLow=0x2707, dwReserved0=0x0, dwReserved1=0x0, cFileName="CkWBcKbyrMzpP.mkv", cAlternateFileName="CKWBCK~1.MKV")) returned 1
	[0269.044] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x850a120, ftCreationTime.dwHighDateTime=0x1d84db9, ftLastAccessTime.dwLowDateTime=0x41e5b870, ftLastAccessTime.dwHighDateTime=0x1d8576f, ftLastWriteTime.dwLowDateTime=0x41e5b870, ftLastWriteTime.dwHighDateTime=0x1d8576f, nFileSizeHigh=0x0, nFileSizeLow=0xf4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cxXRwdf2xZs_g.gif", cAlternateFileName="CXXRWD~1.GIF")) returned 1
	[0269.045] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc39d7e0, ftCreationTime.dwHighDateTime=0x1d85073, ftLastAccessTime.dwLowDateTime=0x1a7de0, ftLastAccessTime.dwHighDateTime=0x1d8542c, ftLastWriteTime.dwLowDateTime=0x1a7de0, ftLastWriteTime.dwHighDateTime=0x1d8542c, nFileSizeHigh=0x0, nFileSizeLow=0x33cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DwP2t78S2Z.m4a", cAlternateFileName="DWP2T7~1.M4A")) returned 1
	[0269.045] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd7f860, ftCreationTime.dwHighDateTime=0x1d856d0, ftLastAccessTime.dwLowDateTime=0x9a459900, ftLastAccessTime.dwHighDateTime=0x1d8578c, ftLastWriteTime.dwLowDateTime=0x9a459900, ftLastWriteTime.dwHighDateTime=0x1d8578c, nFileSizeHigh=0x0, nFileSizeLow=0x10080, dwReserved0=0x0, dwReserved1=0x0, cFileName="DYXDOMM.avi", cAlternateFileName="")) returned 1
	[0269.045] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317fcc20, ftCreationTime.dwHighDateTime=0x1d84f70, ftLastAccessTime.dwLowDateTime=0x97dfa2f0, ftLastAccessTime.dwHighDateTime=0x1d85683, ftLastWriteTime.dwLowDateTime=0x97dfa2f0, ftLastWriteTime.dwHighDateTime=0x1d85683, nFileSizeHigh=0x0, nFileSizeLow=0x777, dwReserved0=0x0, dwReserved1=0x0, cFileName="EJiOb1Gq1.m4a", cAlternateFileName="EJIOB1~1.M4A")) returned 1
	[0269.045] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6601cd40, ftCreationTime.dwHighDateTime=0x1d84d31, ftLastAccessTime.dwLowDateTime=0xd4315970, ftLastAccessTime.dwHighDateTime=0x1d84ff7, ftLastWriteTime.dwLowDateTime=0xd4315970, ftLastWriteTime.dwHighDateTime=0x1d84ff7, nFileSizeHigh=0x0, nFileSizeLow=0xab1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="e_2ltAbAnuK-.png", cAlternateFileName="E_2LTA~1.PNG")) returned 1
	[0269.046] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f62030, ftCreationTime.dwHighDateTime=0x1d852c2, ftLastAccessTime.dwLowDateTime=0x4f5b1fc0, ftLastAccessTime.dwHighDateTime=0x1d85492, ftLastWriteTime.dwLowDateTime=0x4f5b1fc0, ftLastWriteTime.dwHighDateTime=0x1d85492, nFileSizeHigh=0x0, nFileSizeLow=0x5c07, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCMju.jpg", cAlternateFileName="")) returned 1
	[0269.046] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c124060, ftCreationTime.dwHighDateTime=0x1d855f8, ftLastAccessTime.dwLowDateTime=0x666efd10, ftLastAccessTime.dwHighDateTime=0x1d856ec, ftLastWriteTime.dwLowDateTime=0x666efd10, ftLastWriteTime.dwHighDateTime=0x1d856ec, nFileSizeHigh=0x0, nFileSizeLow=0x92f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FN-PAH.avi", cAlternateFileName="")) returned 1
	[0269.046] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d738de0, ftCreationTime.dwHighDateTime=0x1d84ff3, ftLastAccessTime.dwLowDateTime=0x4a282550, ftLastAccessTime.dwHighDateTime=0x1d8523c, ftLastWriteTime.dwLowDateTime=0x4a282550, ftLastWriteTime.dwHighDateTime=0x1d8523c, nFileSizeHigh=0x0, nFileSizeLow=0x13961, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIer.png", cAlternateFileName="")) returned 1
	[0269.046] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af07a0, ftCreationTime.dwHighDateTime=0x1d855df, ftLastAccessTime.dwLowDateTime=0xfa568a40, ftLastAccessTime.dwHighDateTime=0x1d85708, ftLastWriteTime.dwLowDateTime=0xfa568a40, ftLastWriteTime.dwHighDateTime=0x1d85708, nFileSizeHigh=0x0, nFileSizeLow=0x16df1, dwReserved0=0x0, dwReserved1=0x0, cFileName="JnDp0A38.ods", cAlternateFileName="")) returned 1
	[0269.046] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e630040, ftCreationTime.dwHighDateTime=0x1d8513a, ftLastAccessTime.dwLowDateTime=0x417bec10, ftLastAccessTime.dwHighDateTime=0x1d8517a, ftLastWriteTime.dwLowDateTime=0x417bec10, ftLastWriteTime.dwHighDateTime=0x1d8517a, nFileSizeHigh=0x0, nFileSizeLow=0x81e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L8SQVI.swf", cAlternateFileName="")) returned 1
	[0269.047] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823ba260, ftCreationTime.dwHighDateTime=0x1d85623, ftLastAccessTime.dwLowDateTime=0xf1ee2410, ftLastAccessTime.dwHighDateTime=0x1d85683, ftLastWriteTime.dwLowDateTime=0xf1ee2410, ftLastWriteTime.dwHighDateTime=0x1d85683, nFileSizeHigh=0x0, nFileSizeLow=0xa440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lu3OEC2RSN1Jd.avi", cAlternateFileName="LU3OEC~1.AVI")) returned 1
	[0269.047] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa92f1c4e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa92f1c4e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0269.047] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c4d430, ftCreationTime.dwHighDateTime=0x1d84cb2, ftLastAccessTime.dwLowDateTime=0x4e4df490, ftLastAccessTime.dwHighDateTime=0x1d84ef7, ftLastWriteTime.dwLowDateTime=0x4e4df490, ftLastWriteTime.dwHighDateTime=0x1d84ef7, nFileSizeHigh=0x0, nFileSizeLow=0x4c8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmPgFh_.bmp", cAlternateFileName="")) returned 1
	[0269.047] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951ea110, ftCreationTime.dwHighDateTime=0x1d85629, ftLastAccessTime.dwLowDateTime=0x38a80390, ftLastAccessTime.dwHighDateTime=0x1d8582c, ftLastWriteTime.dwLowDateTime=0x38a80390, ftLastWriteTime.dwHighDateTime=0x1d8582c, nFileSizeHigh=0x0, nFileSizeLow=0x5124, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAi.m4a", cAlternateFileName="")) returned 1
	[0269.048] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc87df10, ftCreationTime.dwHighDateTime=0x1d84a0a, ftLastAccessTime.dwLowDateTime=0x4e63fee0, ftLastAccessTime.dwHighDateTime=0x1d84a68, ftLastWriteTime.dwLowDateTime=0x4e63fee0, ftLastWriteTime.dwHighDateTime=0x1d84a68, nFileSizeHigh=0x0, nFileSizeLow=0x1b73, dwReserved0=0x0, dwReserved1=0x0, cFileName="oYrq0yjhi.m4a", cAlternateFileName="OYRQ0Y~1.M4A")) returned 1
	[0269.048] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb125620, ftCreationTime.dwHighDateTime=0x1d85358, ftLastAccessTime.dwLowDateTime=0x1aeda000, ftLastAccessTime.dwHighDateTime=0x1d853bb, ftLastWriteTime.dwLowDateTime=0x1aeda000, ftLastWriteTime.dwHighDateTime=0x1d853bb, nFileSizeHigh=0x0, nFileSizeLow=0xa809, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcWFV3etJen2.wav", cAlternateFileName="PCWFV3~1.WAV")) returned 1
	[0269.048] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82021600, ftCreationTime.dwHighDateTime=0x1d85419, ftLastAccessTime.dwLowDateTime=0x93a9c8b0, ftLastAccessTime.dwHighDateTime=0x1d85808, ftLastWriteTime.dwLowDateTime=0x93a9c8b0, ftLastWriteTime.dwHighDateTime=0x1d85808, nFileSizeHigh=0x0, nFileSizeLow=0xd607, dwReserved0=0x0, dwReserved1=0x0, cFileName="RuAWA3AqNif.wav", cAlternateFileName="RUAWA3~1.WAV")) returned 1
	[0269.048] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d40150, ftCreationTime.dwHighDateTime=0x1d856ad, ftLastAccessTime.dwLowDateTime=0xbafc2630, ftLastAccessTime.dwHighDateTime=0x1d856c6, ftLastWriteTime.dwLowDateTime=0xbafc2630, ftLastWriteTime.dwHighDateTime=0x1d856c6, nFileSizeHigh=0x0, nFileSizeLow=0x11824, dwReserved0=0x0, dwReserved1=0x0, cFileName="S57JVrV.png", cAlternateFileName="")) returned 1
	[0269.048] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90375c50, ftCreationTime.dwHighDateTime=0x1d85278, ftLastAccessTime.dwLowDateTime=0x6910f6b0, ftLastAccessTime.dwHighDateTime=0x1d85500, ftLastWriteTime.dwLowDateTime=0x6910f6b0, ftLastWriteTime.dwHighDateTime=0x1d85500, nFileSizeHigh=0x0, nFileSizeLow=0xa32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMyy8fNM47J.mp4", cAlternateFileName="SMYY8F~1.MP4")) returned 1
	[0269.049] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d45390, ftCreationTime.dwHighDateTime=0x1d84c07, ftLastAccessTime.dwLowDateTime=0x7cef7860, ftLastAccessTime.dwHighDateTime=0x1d85964, ftLastWriteTime.dwLowDateTime=0x7cef7860, ftLastWriteTime.dwHighDateTime=0x1d85964, nFileSizeHigh=0x0, nFileSizeLow=0x8fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sXkOVlQb54MwY.m4a", cAlternateFileName="SXKOVL~1.M4A")) returned 1
	[0269.049] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90b6b00, ftCreationTime.dwHighDateTime=0x1d85211, ftLastAccessTime.dwLowDateTime=0x1b849350, ftLastAccessTime.dwHighDateTime=0x1d85962, ftLastWriteTime.dwLowDateTime=0x1b849350, ftLastWriteTime.dwHighDateTime=0x1d85962, nFileSizeHigh=0x0, nFileSizeLow=0x1f8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thyd.jpg", cAlternateFileName="")) returned 1
	[0269.049] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61ac3340, ftCreationTime.dwHighDateTime=0x1d8531a, ftLastAccessTime.dwLowDateTime=0x4ee7c730, ftLastAccessTime.dwHighDateTime=0x1d85845, ftLastWriteTime.dwLowDateTime=0x4ee7c730, ftLastWriteTime.dwHighDateTime=0x1d85845, nFileSizeHigh=0x0, nFileSizeLow=0x1866d, dwReserved0=0x0, dwReserved1=0x0, cFileName="u1xNdXKdqp2FM0GA.gif", cAlternateFileName="U1XNDX~1.GIF")) returned 1
	[0269.049] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e0913d0, ftCreationTime.dwHighDateTime=0x1d85436, ftLastAccessTime.dwLowDateTime=0x76792360, ftLastAccessTime.dwHighDateTime=0x1d858cd, ftLastWriteTime.dwLowDateTime=0x76792360, ftLastWriteTime.dwHighDateTime=0x1d858cd, nFileSizeHigh=0x0, nFileSizeLow=0x1452c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UqcOGps2iKPfPqQFJeP.png", cAlternateFileName="UQCOGP~1.PNG")) returned 1
	[0269.050] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f59ad0, ftCreationTime.dwHighDateTime=0x1d84a5a, ftLastAccessTime.dwLowDateTime=0x3c93d720, ftLastAccessTime.dwHighDateTime=0x1d85905, ftLastWriteTime.dwLowDateTime=0x3c93d720, ftLastWriteTime.dwHighDateTime=0x1d85905, nFileSizeHigh=0x0, nFileSizeLow=0xe733, dwReserved0=0x0, dwReserved1=0x0, cFileName="wYWjk_n.wav", cAlternateFileName="")) returned 1
	[0269.050] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78728e0, ftCreationTime.dwHighDateTime=0x1d84db4, ftLastAccessTime.dwLowDateTime=0x36e589c0, ftLastAccessTime.dwHighDateTime=0x1d85510, ftLastWriteTime.dwLowDateTime=0x36e589c0, ftLastWriteTime.dwHighDateTime=0x1d85510, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ydVyXBe1LC1mcqp.mkv", cAlternateFileName="YDVYXB~1.MKV")) returned 1
	[0269.050] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baa67d0, ftCreationTime.dwHighDateTime=0x1d850a9, ftLastAccessTime.dwLowDateTime=0xd54a11a0, ftLastAccessTime.dwHighDateTime=0x1d85306, ftLastWriteTime.dwLowDateTime=0xd54a11a0, ftLastWriteTime.dwHighDateTime=0x1d85306, nFileSizeHigh=0x0, nFileSizeLow=0xf3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YE4CJXilxX62U0.ots", cAlternateFileName="YE4CJX~1.OTS")) returned 1
	[0269.050] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f42020, ftCreationTime.dwHighDateTime=0x1d84ef6, ftLastAccessTime.dwLowDateTime=0xa5da260, ftLastAccessTime.dwHighDateTime=0x1d8534f, ftLastWriteTime.dwLowDateTime=0xa5da260, ftLastWriteTime.dwHighDateTime=0x1d8534f, nFileSizeHigh=0x0, nFileSizeLow=0x135da, dwReserved0=0x0, dwReserved1=0x0, cFileName="z6 g.mkv", cAlternateFileName="Z6G~1.MKV")) returned 1
	[0269.051] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f42020, ftCreationTime.dwHighDateTime=0x1d84ef6, ftLastAccessTime.dwLowDateTime=0xa5da260, ftLastAccessTime.dwHighDateTime=0x1d8534f, ftLastWriteTime.dwLowDateTime=0xa5da260, ftLastWriteTime.dwHighDateTime=0x1d8534f, nFileSizeHigh=0x0, nFileSizeLow=0x135da, dwReserved0=0x0, dwReserved1=0x0, cFileName="z6 g.mkv", cAlternateFileName="Z6G~1.MKV")) returned 0
	[0269.051] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f180) returned 1
	[0269.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f18c) returned 1
	[0269.051] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b
	[0269.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.051] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x19ecb8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b
	[0269.051] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x19ec8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x2c
	[0269.052] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\*"), lpFindFileData=0x19eed8 | out: lpFindFileData=0x19eed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.054] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.054] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0269.054] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0
	[0269.054] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0269.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0269.055] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\.", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b
	[0269.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0269.055] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b
	[0269.055] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x19ec08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x2c
	[0269.055] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\*"), lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.056] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.056] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0269.056] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.056] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0269.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0269.056] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x38
	[0269.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.057] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x38
	[0269.057] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x39
	[0269.057] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\flash player\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f7718
	[0269.057] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.057] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1
	[0269.058] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0
	[0269.058] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.058] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x38
	[0269.058] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f
	[0269.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.058] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ecb8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f
	[0269.058] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x19ec8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x30
	[0269.058] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x19eed8 | out: lpFindFileData=0x19eed8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.059] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.059] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
	[0269.059] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e898ff, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1
	[0269.060] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0269.060] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x816a7a21, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
	[0269.060] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
	[0269.060] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0269.060] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
	[0269.061] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0269.061] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0269.061] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0269.062] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0269.062] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling", cAlternateFileName="")) returned 1
	[0269.062] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0269.062] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4984c62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4984c62, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0269.062] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0269.063] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0269.063] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1
	[0269.063] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0
	[0269.063] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0269.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0269.064] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\.", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f
	[0269.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0269.064] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f
	[0269.064] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x19ec08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x30
	[0269.064] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.064] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.064] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
	[0269.065] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e898ff, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1
	[0269.065] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0269.065] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x816a7a21, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
	[0269.065] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
	[0269.066] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0269.066] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
	[0269.066] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0269.066] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0269.066] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0269.066] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0269.067] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling", cAlternateFileName="")) returned 1
	[0269.067] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0269.067] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4984c62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4984c62, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0269.067] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0269.067] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0269.067] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1
	[0269.067] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.068] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0269.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0269.068] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x36
	[0269.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.068] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x36
	[0269.068] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x37
	[0269.068] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\addins\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f7718
	[0269.069] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.069] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0269.070] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.070] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x36
	[0269.070] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x3c
	[0269.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.070] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x3c
	[0269.070] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpFilePart=0x0) returned 0x3d
	[0269.070] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\bibliography\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.071] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.071] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1
	[0269.071] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0
	[0269.071] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.072] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x3c
	[0269.072] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x3b
	[0269.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.072] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x3b
	[0269.072] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x3c
	[0269.072] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\credentials\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.072] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.073] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0269.073] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.073] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x3b
	[0269.073] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x48
	[0269.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.073] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x48
	[0269.073] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x49
	[0269.073] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.075] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.075] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0269.075] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0269.075] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.076] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x48
	[0269.076] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x35
	[0269.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.076] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x35
	[0269.076] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x36
	[0269.076] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\excel\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.077] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.077] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1
	[0269.077] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0
	[0269.077] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.077] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x35
	[0269.077] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x41
	[0269.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.078] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x41
	[0269.078] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x42
	[0269.078] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f7718
	[0269.078] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.078] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6654de95, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6654de95, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0269.079] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
	[0269.087] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 0
	[0269.087] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.088] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x41
	[0269.088] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x33
	[0269.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.088] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x33
	[0269.088] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x34
	[0269.088] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\mmc\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f7718
	[0269.089] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.089] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0269.090] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.090] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x33
	[0269.090] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x37
	[0269.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.090] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x37
	[0269.090] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x38
	[0269.090] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.092] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.092] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0269.092] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0
	[0269.092] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.092] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x37
	[0269.093] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x36
	[0269.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.093] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x36
	[0269.093] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x37
	[0269.093] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.094] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.094] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f81d62, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80f81d62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80f83167, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1
	[0269.095] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4689310, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0269.095] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4689310, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0
	[0269.095] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.095] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x36
	[0269.095] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x37
	[0269.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.096] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x37
	[0269.096] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x38
	[0269.096] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\outlook\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x877953e5, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.097] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x877953e5, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.097] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abbe5b6, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6abbe5b6, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6acd6e90, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1
	[0269.097] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877953e5, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x877953e5, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x87797b5c, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x956, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1
	[0269.098] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.098] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.098] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x37
	[0269.098] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x37
	[0269.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.111] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x37
	[0269.111] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x38
	[0269.111] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\protect\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50866c1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f7718
	[0269.114] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50866c1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.114] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf68faea, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0269.114] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x50866c1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x562658a2, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x562658a2, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0269.115] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf753085, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1
	[0269.115] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.115] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.115] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x37
	[0269.115] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", lpFilePart=0x0) returned 0x38
	[0269.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.115] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", lpFilePart=0x0) returned 0x38
	[0269.115] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\", lpFilePart=0x0) returned 0x39
	[0269.116] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.120] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.120] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x567d5b26, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0269.120] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x567d5b26, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0269.120] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.120] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling", lpFilePart=0x0) returned 0x38
	[0269.121] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x42
	[0269.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.121] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x42
	[0269.121] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x43
	[0269.121] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.122] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.122] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0269.122] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
	[0269.123] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.123] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x42
	[0269.123] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x39
	[0269.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.123] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x39
	[0269.123] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x3a
	[0269.123] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4984c62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4984c62, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.243] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4984c62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4984c62, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.244] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveContent", cAlternateFileName="LIVECO~1")) returned 1
	[0269.244] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4614163, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4614163, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa46a67ce, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4641, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1
	[0269.244] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.244] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.245] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x39
	[0269.245] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x35
	[0269.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.246] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x35
	[0269.246] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x36
	[0269.246] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\vault\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.246] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.246] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0269.247] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.247] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x35
	[0269.247] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x37
	[0269.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.247] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x37
	[0269.247] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x38
	[0269.247] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaeb77be3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaeb77be3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f7718
	[0269.247] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaeb77be3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaeb77be3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.247] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1
	[0269.248] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b1d2cc3, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1d8e71, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0269.248] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1
	[0269.248] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1
	[0269.248] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe4e9a796, ftLastAccessTime.dwHighDateTime=0x1d85ff1, ftLastWriteTime.dwLowDateTime=0xe4e9a796, ftLastWriteTime.dwHighDateTime=0x1d85ff1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0269.248] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8c427141, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8c473662, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0269.249] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0269.249] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0269.249] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeb77be3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaebea315, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaebea315, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0269.249] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeb77be3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaebea315, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaebea315, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0269.249] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.249] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x37
	[0269.249] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x34
	[0269.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.250] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x34
	[0269.250] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x35
	[0269.250] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\word\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.250] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.250] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0269.250] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.251] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x34
	[0269.251] CoTaskMemAlloc (cb=0x20c) returned 0x7183a8
	[0269.251] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7183a8 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local") returned 0x0
	[0269.251] CoTaskMemFree (pv=0x7183a8) 
	[0269.251] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23
	[0269.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1c0) returned 1
	[0269.251] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23
	[0269.251] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x19ec9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\", lpFilePart=0x0) returned 0x24
	[0269.251] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\*"), lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdd3cec65, ftLastAccessTime.dwHighDateTime=0x1d85ff1, ftLastWriteTime.dwLowDateTime=0xdd3cec65, ftLastWriteTime.dwHighDateTime=0x1d85ff1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f7718
	[0269.252] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdd3cec65, ftLastAccessTime.dwHighDateTime=0x1d85ff1, ftLastWriteTime.dwLowDateTime=0xdd3cec65, ftLastWriteTime.dwHighDateTime=0x1d85ff1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.252] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1
	[0269.252] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0269.252] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1
	[0269.253] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0269.253] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xb1dfb94f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xb1dfb94f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xd858984a, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x5d96, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0269.253] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0269.253] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1
	[0269.253] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x217bac55, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x217bac55, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1
	[0269.253] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1
	[0269.253] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc699b5c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1
	[0269.253] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd537f54f, ftLastAccessTime.dwHighDateTime=0x1d85ff1, ftLastWriteTime.dwLowDateTime=0xd537f54f, ftLastWriteTime.dwHighDateTime=0x1d85ff1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0269.254] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0269.254] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1
	[0269.254] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1
	[0269.254] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3cec65, ftCreationTime.dwHighDateTime=0x1d85ff1, ftLastAccessTime.dwLowDateTime=0xdd3cec65, ftLastAccessTime.dwHighDateTime=0x1d85ff1, ftLastWriteTime.dwLowDateTime=0xdd3cec65, ftLastWriteTime.dwHighDateTime=0x1d85ff1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yandex", cAlternateFileName="")) returned 1
	[0269.255] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19eef8 | out: lpFindFileData=0x19eef8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.255] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f180) returned 1
	[0269.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f18c) returned 1
	[0269.255] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e
	[0269.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.255] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x19ecb8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e
	[0269.255] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\", nBufferLength=0x105, lpBuffer=0x19ec8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\", lpFilePart=0x0) returned 0x2f
	[0269.255] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\activesync\\*"), lpFindFileData=0x19eed8 | out: lpFindFileData=0x19eed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.256] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.256] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0269.256] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0269.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0269.256] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\.", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e
	[0269.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0269.256] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e
	[0269.256] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\", nBufferLength=0x105, lpBuffer=0x19ec08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\", lpFilePart=0x0) returned 0x2f
	[0269.256] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\activesync\\*"), lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.257] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.257] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0269.257] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0269.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0269.257] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x34
	[0269.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.257] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x19ecb8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x34
	[0269.257] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\", nBufferLength=0x105, lpBuffer=0x19ec8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\", lpFilePart=0x0) returned 0x35
	[0269.257] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\application data\\*"), lpFindFileData=0x19eed8 | out: lpFindFileData=0x19eed8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0269.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f174) returned 1
	[0269.303] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29
	[0269.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.303] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x19ecb8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29
	[0269.303] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\", nBufferLength=0x105, lpBuffer=0x19ec8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\", lpFilePart=0x0) returned 0x2a
	[0269.304] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\*"), lpFindFileData=0x19eed8 | out: lpFindFileData=0x19eed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.304] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.305] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x50cde571, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x50cde571, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0269.305] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1
	[0269.305] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xa2fb89cf, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xa2fb89cf, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1
	[0269.305] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xa2fb89cf, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xa2fb89cf, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0
	[0269.305] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0269.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0269.306] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\.", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29
	[0269.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0269.306] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29
	[0269.306] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\", nBufferLength=0x105, lpBuffer=0x19ec08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\", lpFilePart=0x0) returned 0x2a
	[0269.306] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\*"), lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.307] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.307] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x50cde571, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x50cde571, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0269.307] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1
	[0269.307] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xa2fb89cf, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xa2fb89cf, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1
	[0269.307] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.307] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0269.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0269.308] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e
	[0269.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.308] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e
	[0269.308] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\", lpFilePart=0x0) returned 0x2f
	[0269.308] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xceb6221c, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xceb63816, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.309] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xceb6221c, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xceb63816, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.309] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xceb63816, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xceb64b9f, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1
	[0269.309] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.309] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.310] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e
	[0269.310] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32
	[0269.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.310] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32
	[0269.310] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\", lpFilePart=0x0) returned 0x33
	[0269.310] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistore\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.311] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.311] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0269.311] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.311] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32
	[0269.311] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34
	[0269.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.311] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34
	[0269.311] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\", lpFilePart=0x0) returned 0x35
	[0269.312] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xa2fb89cf, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xa2fb89cf, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f7718
	[0269.312] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xa2fb89cf, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xa2fb89cf, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.312] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23a0d188, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23a0d188, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xa2f9c953, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x600000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1
	[0269.312] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2fb89cf, ftCreationTime.dwHighDateTime=0x1d8598c, ftLastAccessTime.dwLowDateTime=0xa2fb89cf, ftLastAccessTime.dwHighDateTime=0x1d8598c, ftLastWriteTime.dwLowDateTime=0xa3078682, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp.edb", cAlternateFileName="")) returned 1
	[0269.312] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239e71ab, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239e71ab, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xa2f60b3e, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.chk", cAlternateFileName="")) returned 1
	[0269.312] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xa2f61fce, ftLastWriteTime.dwHighDateTime=0x1d8598c, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.log", cAlternateFileName="")) returned 1
	[0269.312] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1
	[0269.312] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1
	[0269.312] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xdd289e64, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.log", cAlternateFileName="")) returned 1
	[0269.313] FindNextFileW (in: hFindFile=0x6f7718, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.313] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.313] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34
	[0269.313] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", lpFilePart=0x0) returned 0x2b
	[0269.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.313] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x19ecb8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", lpFilePart=0x0) returned 0x2b
	[0269.313] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\", nBufferLength=0x105, lpBuffer=0x19ec8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\", lpFilePart=0x0) returned 0x2c
	[0269.323] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\history\\*"), lpFindFileData=0x19eed8 | out: lpFindFileData=0x19eed8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0269.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f174) returned 1
	[0269.325] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d
	[0269.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.325] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ecb8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d
	[0269.325] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x19ec8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x2e
	[0269.325] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\*"), lpFindFileData=0x19eed8 | out: lpFindFileData=0x19eed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.326] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.326] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1
	[0269.326] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1
	[0269.326] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x58717184, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x58717184, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0269.327] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1556ad53, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x1556ad53, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0269.327] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x155833bf, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x155833bf, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0269.327] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0269.327] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1
	[0269.327] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1
	[0269.327] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1
	[0269.328] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x14aaf905, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x14aaf905, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0269.328] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0269.328] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0269.328] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x84c1ec39, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84c1ec39, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1
	[0269.328] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0269.329] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1
	[0269.329] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0269.329] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9615bbf, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x9615bbf, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0269.329] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1
	[0269.329] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0269.329] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19eee8 | out: lpFindFileData=0x19eee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
	[0269.330] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0269.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0269.331] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\.", nBufferLength=0x105, lpBuffer=0x19ec6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d
	[0269.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0269.331] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x19ec34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d
	[0269.331] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x19ec08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x2e
	[0269.331] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\*"), lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.332] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a17d745, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a17d745, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.332] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1
	[0269.332] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1
	[0269.332] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x58717184, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x58717184, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0269.333] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1556ad53, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x1556ad53, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0269.333] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x155833bf, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x155833bf, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0269.333] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0269.333] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1
	[0269.333] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1
	[0269.334] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1
	[0269.334] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x14aaf905, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x14aaf905, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0269.334] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0269.334] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0269.334] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x84c1ec39, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84c1ec39, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1
	[0269.334] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0269.335] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1
	[0269.335] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0269.335] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9615bbf, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x9615bbf, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0269.335] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1
	[0269.335] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0269.336] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee64 | out: lpFindFileData=0x19ee64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.336] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0269.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0269.337] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36
	[0269.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.338] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36
	[0269.338] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\", lpFilePart=0x0) returned 0x37
	[0269.338] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.339] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.339] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1
	[0269.339] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0
	[0269.340] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36
	[0269.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39
	[0269.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39
	[0269.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\", lpFilePart=0x0) returned 0x3a
	[0269.340] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.341] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.341] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1
	[0269.341] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0
	[0269.342] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.342] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39
	[0269.342] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39
	[0269.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.342] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39
	[0269.342] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x3a
	[0269.342] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\credentials\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x58717184, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x58717184, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.343] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x58717184, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x58717184, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.343] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x508b12b7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x58717184, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x5871986a, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x2ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1
	[0269.343] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0269.344] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.344] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39
	[0269.344] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33
	[0269.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.344] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33
	[0269.344] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x34
	[0269.345] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1556ad53, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x1556ad53, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.345] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1556ad53, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x1556ad53, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.345] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1556ad53, ftCreationTime.dwHighDateTime=0x1d8598d, ftLastAccessTime.dwLowDateTime=0x1556ad53, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x174d431b, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0269.346] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x154d2380, ftCreationTime.dwHighDateTime=0x1d8598d, ftLastAccessTime.dwLowDateTime=0x1554eba6, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x1554eba6, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0269.346] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x154d2380, ftCreationTime.dwHighDateTime=0x1d8598d, ftLastAccessTime.dwLowDateTime=0x1554eba6, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x1554eba6, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
	[0269.346] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.347] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33
	[0269.347] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39
	[0269.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.347] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39
	[0269.347] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x3a
	[0269.347] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\*"), lpFindFileData=0x19ee44 | out: lpFindFileData=0x19ee44*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x155833bf, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x155833bf, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6f75d8
	[0269.348] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x155833bf, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x155833bf, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0269.348] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1557e563, ftCreationTime.dwHighDateTime=0x1d8598d, ftLastAccessTime.dwLowDateTime=0x1557e563, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x1557e563, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1C0JLR17", cAlternateFileName="")) returned 1
	[0269.348] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x154e3522, ftCreationTime.dwHighDateTime=0x1d8598d, ftLastAccessTime.dwLowDateTime=0x154e3522, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x154e3522, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1
	[0269.349] FindNextFileW (in: hFindFile=0x6f75d8, lpFindFileData=0x19ee54 | out: lpFindFileData=0x19ee54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1557f8e0, ftCreationTime.dwHighDateTime=0x1d8598d, ftLastAccessTime.dwLowDateTime=0x1557f8e0, ftLastAccessTime.dwHighDateTime=0x1d8598d, ftLastWriteTime.dwLowDateTime=0x1557f8e0, ftLastWriteTime.dwHighDateTime=0x1d8598d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRB8PMFZ", cAlternateFileName="")) returned 1
	[0269.351] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.351] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39
	[0269.351] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33
	[0269.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.351] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33
	[0269.352] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x34
	[0269.358] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.359] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33
	[0269.359] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35
	[0269.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.359] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35
	[0269.359] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\", lpFilePart=0x0) returned 0x36
	[0269.360] FindClose (in: hFindFile=0x6f7718 | out: hFindFile=0x6f7718) returned 1
	[0269.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.360] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35
	[0269.360] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42
	[0269.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.360] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42
	[0269.360] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\", lpFilePart=0x0) returned 0x43
	[0269.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.369] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42
	[0269.369] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x3a
	[0269.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.370] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x3a
	[0269.370] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\", lpFilePart=0x0) returned 0x3b
	[0269.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.371] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x3a
	[0269.371] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f
	[0269.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.372] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f
	[0269.372] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x40
	[0269.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.375] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f
	[0269.375] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x3a
	[0269.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.375] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x3a
	[0269.376] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x3b
	[0269.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.378] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x3a
	[0269.378] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x34
	[0269.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.378] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x34
	[0269.378] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x35
	[0269.379] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.379] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x34
	[0269.380] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x36
	[0269.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.380] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x36
	[0269.380] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\", lpFilePart=0x0) returned 0x37
	[0269.382] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.382] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x36
	[0269.383] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x35
	[0269.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.383] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x35
	[0269.383] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x36
	[0269.384] FindClose (in: hFindFile=0x6f75d8 | out: hFindFile=0x6f75d8) returned 1
	[0269.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.384] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x35
	[0269.384] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady", lpFilePart=0x0) returned 0x37
	[0269.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.385] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady", lpFilePart=0x0) returned 0x37
	[0269.385] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\", lpFilePart=0x0) returned 0x38
	[0269.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.386] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady", lpFilePart=0x0) returned 0x37
	[0269.386] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault", lpFilePart=0x0) returned 0x33
	[0269.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.386] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault", lpFilePart=0x0) returned 0x33
	[0269.386] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x34
	[0269.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.387] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\.", nBufferLength=0x105, lpBuffer=0x19ebd8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault", lpFilePart=0x0) returned 0x33
	[0269.387] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x19ec54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x35
	[0269.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.387] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x19ec24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x35
	[0269.387] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x19ebf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x36
	[0269.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0269.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0269.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0269.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0269.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0269.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0269.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0269.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0269.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0269.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0269.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0269.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0269.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0269.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0269.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0270.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0270.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0270.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0270.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0270.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0270.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0270.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0270.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0270.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f174) returned 1
	[0270.433] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x31
	[0270.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0270.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0270.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0270.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0270.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0270.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0270.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0270.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0270.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0270.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0270.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1b0) returned 1
	[0270.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f17c) returned 1
	[0270.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f12c) returned 1
	[0270.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0ec) returned 1
	[0270.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0f8) returned 1
	[0270.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f11c) returned 1
	[0270.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0dc) returned 1
	[0270.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1
	[0270.505] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.506] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Battle.net", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net") returned 0x2f
	[0270.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.506] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net", lpFilePart=0x0) returned 0x2e
	[0270.506] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\", lpFilePart=0x0) returned 0x2f
	[0270.506] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Battle.net\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\battle.net\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.509] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.509] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chromium\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data") returned 0x37
	[0270.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.509] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data", lpFilePart=0x0) returned 0x36
	[0270.509] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", lpFilePart=0x0) returned 0x37
	[0270.509] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chromium\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.511] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.511] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Google\\Chrome\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x3c
	[0270.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.512] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3b
	[0270.512] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0270.512] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\google\\chrome\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.515] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.515] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Google(x86)\\Chrome\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data") returned 0x41
	[0270.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.515] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data", lpFilePart=0x0) returned 0x40
	[0270.515] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x41
	[0270.516] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\google(x86)\\chrome\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.517] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.517] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Opera Software\\", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\") returned 0x36
	[0270.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.518] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35
	[0270.518] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35
	[0270.518] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\opera software\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.520] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.520] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data") returned 0x45
	[0270.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.520] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data", lpFilePart=0x0) returned 0x44
	[0270.520] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", lpFilePart=0x0) returned 0x45
	[0270.520] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\maplestudio\\chromeplus\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.522] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.522] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Iridium\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data") returned 0x36
	[0270.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.522] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data", lpFilePart=0x0) returned 0x35
	[0270.522] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", lpFilePart=0x0) returned 0x36
	[0270.523] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iridium\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.524] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.525] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\7Star\\7Star\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data") returned 0x3a
	[0270.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.525] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data", lpFilePart=0x0) returned 0x39
	[0270.525] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", lpFilePart=0x0) returned 0x3a
	[0270.525] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\7star\\7star\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.530] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.530] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CentBrowser\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data") returned 0x3a
	[0270.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.530] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data", lpFilePart=0x0) returned 0x39
	[0270.530] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", lpFilePart=0x0) returned 0x3a
	[0270.530] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\centbrowser\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.532] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.532] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chedot\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data") returned 0x35
	[0270.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.532] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data", lpFilePart=0x0) returned 0x34
	[0270.532] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", lpFilePart=0x0) returned 0x35
	[0270.533] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chedot\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.534] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.534] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Vivaldi\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data") returned 0x36
	[0270.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.535] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data", lpFilePart=0x0) returned 0x35
	[0270.535] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", lpFilePart=0x0) returned 0x36
	[0270.535] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\vivaldi\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.537] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.537] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Kometa\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data") returned 0x35
	[0270.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.537] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data", lpFilePart=0x0) returned 0x34
	[0270.537] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", lpFilePart=0x0) returned 0x35
	[0270.537] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\kometa\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.539] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.539] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Elements Browser\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data") returned 0x3f
	[0270.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.539] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data", lpFilePart=0x0) returned 0x3e
	[0270.539] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", lpFilePart=0x0) returned 0x3f
	[0270.539] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\elements browser\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.541] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.541] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Epic Privacy Browser\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data") returned 0x43
	[0270.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.541] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", lpFilePart=0x0) returned 0x42
	[0270.541] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\", lpFilePart=0x0) returned 0x43
	[0270.542] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\epic privacy browser\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.544] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.544] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\uCozMedia\\Uran\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data") returned 0x3d
	[0270.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.544] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data", lpFilePart=0x0) returned 0x3c
	[0270.544] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0270.544] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\ucozmedia\\uran\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.547] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.547] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer") returned 0x58
	[0270.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.547] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer", lpFilePart=0x0) returned 0x57
	[0270.547] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", lpFilePart=0x0) returned 0x58
	[0270.547] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\fenrir inc\\sleipnir5\\setting\\modules\\chromiumviewer\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.549] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.549] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data") returned 0x43
	[0270.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.549] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data", lpFilePart=0x0) returned 0x42
	[0270.550] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", lpFilePart=0x0) returned 0x43
	[0270.550] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\catalinagroup\\citrio\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.551] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.551] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Coowon\\Coowon\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data") returned 0x3c
	[0270.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.552] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data", lpFilePart=0x0) returned 0x3b
	[0270.552] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0270.552] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\coowon\\coowon\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.554] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.554] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\liebao\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data") returned 0x35
	[0270.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.554] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data", lpFilePart=0x0) returned 0x34
	[0270.554] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", lpFilePart=0x0) returned 0x35
	[0270.554] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\liebao\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.556] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.556] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\QIP Surf\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data") returned 0x37
	[0270.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.556] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data", lpFilePart=0x0) returned 0x36
	[0270.556] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", lpFilePart=0x0) returned 0x37
	[0270.557] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\qip surf\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.558] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.558] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Orbitum\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data") returned 0x36
	[0270.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.558] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data", lpFilePart=0x0) returned 0x35
	[0270.558] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", lpFilePart=0x0) returned 0x36
	[0270.559] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\orbitum\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.560] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.561] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Comodo\\Dragon\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data") returned 0x3c
	[0270.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.561] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data", lpFilePart=0x0) returned 0x3b
	[0270.561] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", lpFilePart=0x0) returned 0x3c
	[0270.581] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comodo\\dragon\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.585] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.585] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Amigo\\User\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data") returned 0x39
	[0270.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.586] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data", lpFilePart=0x0) returned 0x38
	[0270.586] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", lpFilePart=0x0) returned 0x39
	[0270.586] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\amigo\\user\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.588] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.588] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Torch\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data") returned 0x34
	[0270.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.588] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data", lpFilePart=0x0) returned 0x33
	[0270.588] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", lpFilePart=0x0) returned 0x34
	[0270.588] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\torch\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.590] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.590] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data") returned 0x43
	[0270.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.591] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data", lpFilePart=0x0) returned 0x42
	[0270.591] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", lpFilePart=0x0) returned 0x43
	[0270.591] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yandexbrowser\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.593] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.593] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Comodo\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data") returned 0x35
	[0270.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.593] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data", lpFilePart=0x0) returned 0x34
	[0270.593] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", lpFilePart=0x0) returned 0x35
	[0270.593] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comodo\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.596] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.596] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\360Browser\\Browser\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data") returned 0x41
	[0270.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.596] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data", lpFilePart=0x0) returned 0x40
	[0270.596] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", lpFilePart=0x0) returned 0x41
	[0270.596] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\360browser\\browser\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.598] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.599] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Maxthon3\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data") returned 0x37
	[0270.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.599] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data", lpFilePart=0x0) returned 0x36
	[0270.599] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", lpFilePart=0x0) returned 0x37
	[0270.599] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\maxthon3\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.601] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.601] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\K-Melon\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data") returned 0x36
	[0270.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.601] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data", lpFilePart=0x0) returned 0x35
	[0270.601] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", lpFilePart=0x0) returned 0x36
	[0270.601] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\k-melon\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.603] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.603] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Sputnik\\Sputnik\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data") returned 0x3e
	[0270.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.603] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data", lpFilePart=0x0) returned 0x3d
	[0270.603] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", lpFilePart=0x0) returned 0x3e
	[0270.603] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\sputnik\\sputnik\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.605] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.605] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Nichrome\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data") returned 0x37
	[0270.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.605] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data", lpFilePart=0x0) returned 0x36
	[0270.605] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\", lpFilePart=0x0) returned 0x37
	[0270.606] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\nichrome\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.607] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.607] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CocCoc\\Browser\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data") returned 0x3d
	[0270.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.608] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data", lpFilePart=0x0) returned 0x3c
	[0270.608] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0270.608] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\coccoc\\browser\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.610] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.610] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Uran\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data") returned 0x33
	[0270.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.610] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data", lpFilePart=0x0) returned 0x32
	[0270.610] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\", lpFilePart=0x0) returned 0x33
	[0270.610] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\uran\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.612] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.612] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Chromodo\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data") returned 0x37
	[0270.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.612] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data", lpFilePart=0x0) returned 0x36
	[0270.612] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\", lpFilePart=0x0) returned 0x37
	[0270.612] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chromodo\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.614] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.614] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Mail.Ru\\Atom\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data") returned 0x3b
	[0270.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.614] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data", lpFilePart=0x0) returned 0x3a
	[0270.614] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\", lpFilePart=0x0) returned 0x3b
	[0270.614] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\mail.ru\\atom\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.617] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.617] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data") returned 0x4a
	[0270.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.617] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data", lpFilePart=0x0) returned 0x49
	[0270.617] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\", lpFilePart=0x0) returned 0x4a
	[0270.617] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\bravesoftware\\brave-browser\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.619] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.619] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Microsoft\\Edge\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data") returned 0x3d
	[0270.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.619] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data", lpFilePart=0x0) returned 0x3c
	[0270.619] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\", lpFilePart=0x0) returned 0x3d
	[0270.619] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\edge\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.622] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.622] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience") returned 0x51
	[0270.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.622] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience", lpFilePart=0x0) returned 0x50
	[0270.622] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\", lpFilePart=0x0) returned 0x51
	[0270.622] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NVIDIA Corporation\\NVIDIA GeForce Experience\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\nvidia corporation\\nvidia geforce experience\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.624] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.624] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\Steam", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam") returned 0x2a
	[0270.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.624] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam", lpFilePart=0x0) returned 0x29
	[0270.624] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\", lpFilePart=0x0) returned 0x2a
	[0270.624] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Steam\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\steam\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.626] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.626] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Local\\CryptoTab Browser\\User Data", lpDst=0x19f10c, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data") returned 0x40
	[0270.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f1ac) returned 1
	[0270.626] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19ecb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data", lpFilePart=0x0) returned 0x3f
	[0270.626] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19ec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\", lpFilePart=0x0) returned 0x40
	[0270.626] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CryptoTab Browser\\User Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\cryptotab browser\\user data\\*"), lpFindFileData=0x19eed4 | out: lpFindFileData=0x19eed4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f170) returned 1
	[0270.676] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.676] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\Armory", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory") returned 0x2d
	[0270.676] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", lpFilePart=0x0) returned 0x2c
	[0270.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.676] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", lpFilePart=0x0) returned 0x2c
	[0270.676] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory\\", lpFilePart=0x0) returned 0x2d
	[0270.677] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory\\*.wallet" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\armory\\*.wallet"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.679] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.679] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\atomic", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic") returned 0x2d
	[0270.679] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic", lpFilePart=0x0) returned 0x2c
	[0270.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.679] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic", lpFilePart=0x0) returned 0x2c
	[0270.679] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\", lpFilePart=0x0) returned 0x2d
	[0270.679] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\atomic\\*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.681] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.681] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\Binance", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Binance") returned 0x2e
	[0270.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Binance", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Binance", lpFilePart=0x0) returned 0x2d
	[0270.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Binance", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Binance", lpFilePart=0x0) returned 0x2d
	[0270.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Binance\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Binance\\", lpFilePart=0x0) returned 0x2e
	[0270.682] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Binance\\*app-store*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\binance\\*app-store*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.684] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.684] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\Coinomi", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi") returned 0x2e
	[0270.684] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi", lpFilePart=0x0) returned 0x2d
	[0270.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.684] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi", lpFilePart=0x0) returned 0x2d
	[0270.684] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi\\", lpFilePart=0x0) returned 0x2e
	[0270.684] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Coinomi\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\coinomi\\*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.686] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.686] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\Electrum\\wallets", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets") returned 0x37
	[0270.686] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", lpFilePart=0x0) returned 0x36
	[0270.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.687] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", lpFilePart=0x0) returned 0x36
	[0270.687] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets\\", lpFilePart=0x0) returned 0x37
	[0270.687] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\electrum\\wallets\\*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.689] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.689] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\Ethereum\\wallets", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets") returned 0x37
	[0270.689] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets", lpFilePart=0x0) returned 0x36
	[0270.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.689] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets", lpFilePart=0x0) returned 0x36
	[0270.689] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets\\", lpFilePart=0x0) returned 0x37
	[0270.690] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\wallets\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ethereum\\wallets\\*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.691] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.691] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\Exodus\\exodus.wallet", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet") returned 0x3b
	[0270.692] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", lpFilePart=0x0) returned 0x3a
	[0270.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.692] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", lpFilePart=0x0) returned 0x3a
	[0270.692] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet\\", lpFilePart=0x0) returned 0x3b
	[0270.692] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\exodus\\exodus.wallet\\*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.694] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.694] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\Exodus", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus") returned 0x2d
	[0270.694] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus", lpFilePart=0x0) returned 0x2c
	[0270.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.694] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus", lpFilePart=0x0) returned 0x2c
	[0270.694] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\", lpFilePart=0x0) returned 0x2d
	[0270.694] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\*.json" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\exodus\\*.json"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.696] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.696] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\Guarda", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda") returned 0x2d
	[0270.696] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda", lpFilePart=0x0) returned 0x2c
	[0270.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.696] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda", lpFilePart=0x0) returned 0x2c
	[0270.696] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\", lpFilePart=0x0) returned 0x2d
	[0270.696] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\guarda\\*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.699] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26
	[0270.699] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\com.liberty.jaxx", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx") returned 0x37
	[0270.699] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx", lpFilePart=0x0) returned 0x36
	[0270.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.700] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx", lpFilePart=0x0) returned 0x36
	[0270.700] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\", lpFilePart=0x0) returned 0x37
	[0270.700] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\com.liberty.jaxx\\*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.702] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX") returned 0x16
	[0270.702] ExpandEnvironmentStringsW (in: lpSrc="%userprofile%\\Documents\\Monero\\wallets", lpDst=0x19f198, nSize=0x64 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\Documents\\Monero\\wallets") returned 0x2f
	[0270.702] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Monero\\wallets", nBufferLength=0x105, lpBuffer=0x19eddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Monero\\wallets", lpFilePart=0x0) returned 0x2e
	[0270.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f290) returned 1
	[0270.702] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Monero\\wallets", nBufferLength=0x105, lpBuffer=0x19ed98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Monero\\wallets", lpFilePart=0x0) returned 0x2e
	[0270.702] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Monero\\wallets\\", nBufferLength=0x105, lpBuffer=0x19ed6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Monero\\wallets\\", lpFilePart=0x0) returned 0x2f
	[0270.702] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Monero\\wallets\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\monero\\wallets\\*"), lpFindFileData=0x19efb8 | out: lpFindFileData=0x19efb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0270.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f254) returned 1
	[0270.976] GetKeyboardLayoutList (in: nBuff=0, lpList=0x0 | out: lpList=0x0) returned 1
	[0270.977] GetKeyboardLayoutList (in: nBuff=1, lpList=0x2c9ca50 | out: lpList=0x2c9ca50) returned 1
	[0271.007] CoCreateGuid (in: pguid=0x19ef14 | out: pguid=0x19ef14*(Data1=0xec85a82, Data2=0xb9f3, Data3=0x42a2, Data4=([0]=0xb4, [1]=0xba, [2]=0xe8, [3]=0x9e, [4]=0x64, [5]=0x13, [6]=0xe6, [7]=0xaf))) returned 0x0
	[0271.008] CoCreateGuid (in: pguid=0x19ee44 | out: pguid=0x19ee44*(Data1=0x8db1d5f2, Data2=0x6d01, Data3=0x4784, Data4=([0]=0xab, [1]=0xa8, [2]=0xa1, [3]=0xaf, [4]=0x89, [5]=0xbe, [6]=0xb1, [7]=0xf5))) returned 0x0
	[0271.523] send (s=0x464, buf=0x40be9b5*, len=65536, flags=0) returned 65536
	[0271.526] send (s=0x464, buf=0x40ce9b5*, len=65536, flags=0) returned 65536
	[0274.019] send (s=0x464, buf=0x40de9b5*, len=65536, flags=0) returned 65536
	[0275.587] send (s=0x464, buf=0x40ee9b5*, len=65536, flags=0) returned 65536
	[0276.730] send (s=0x464, buf=0x40fe9b5*, len=65536, flags=0) returned 65536
	[0277.672] send (s=0x464, buf=0x410e9b5*, len=65536, flags=0) returned 65536
	[0278.374] send (s=0x464, buf=0x411e9b5*, len=65536, flags=0) returned 65536
	[0279.311] send (s=0x464, buf=0x412e9b5*, len=65536, flags=0) returned 65536
	[0280.038] send (s=0x464, buf=0x413e9b5*, len=65536, flags=0) returned 65536
	[0280.741] send (s=0x464, buf=0x414e9b5*, len=65536, flags=0) returned 65536
	[0281.454] send (s=0x464, buf=0x415e9b5*, len=65536, flags=0) returned 65536
	[0282.190] send (s=0x464, buf=0x416e9b5*, len=65536, flags=0) returned 65536
	[0282.672] send (s=0x464, buf=0x417e9b5*, len=65536, flags=0) returned 65536
	[0283.395] send (s=0x464, buf=0x418e9b5*, len=65536, flags=0) returned 65536
	[0283.866] send (s=0x464, buf=0x419e9b5*, len=65536, flags=0) returned 65536
	[0284.587] send (s=0x464, buf=0x41ae9b5*, len=65536, flags=0) returned 65536
	[0285.075] send (s=0x464, buf=0x41be9b5*, len=65536, flags=0) returned 65536
	[0285.561] send (s=0x464, buf=0x41ce9b5*, len=65536, flags=0) returned 65536
	[0286.045] send (s=0x464, buf=0x41de9b5*, len=65536, flags=0) returned 65536
	[0286.770] send (s=0x464, buf=0x41ee9b5*, len=65536, flags=0) returned 65536
	[0287.263] send (s=0x464, buf=0x41fe9b5*, len=65536, flags=0) returned 65536
	[0287.763] send (s=0x464, buf=0x420e9b5*, len=65536, flags=0) returned 65536
	[0288.251] send (s=0x464, buf=0x421e9b5*, len=65536, flags=0) returned 65536
	[0288.744] send (s=0x464, buf=0x422e9b5*, len=65536, flags=0) returned 65536
	[0289.231] send (s=0x464, buf=0x423e9b5*, len=65536, flags=0) returned 65536
	[0289.723] send (s=0x464, buf=0x424e9b5*, len=65536, flags=0) returned 65536
	[0290.222] send (s=0x464, buf=0x425e9b5*, len=65536, flags=0) returned 65536
	[0290.715] send (s=0x464, buf=0x426e9b5*, len=62322, flags=0) returned 62322
	[0291.226] recv (in: s=0x464, buf=0x2940134, len=8192, flags=0 | out: buf=0x2940134*) returned 108
	[0291.482] CoCreateGuid (in: pguid=0x19efe0 | out: pguid=0x19efe0*(Data1=0xbfaa8eeb, Data2=0x5ec9, Data3=0x4e39, Data4=([0]=0xb2, [1]=0xbe, [2]=0xe9, [3]=0x94, [4]=0x36, [5]=0x21, [6]=0x8, [7]=0x0))) returned 0x0
	[0291.482] CoCreateGuid (in: pguid=0x19ef10 | out: pguid=0x19ef10*(Data1=0xcf934f69, Data2=0xb5d2, Data3=0x4714, Data4=([0]=0x93, [1]=0x3b, [2]=0xd4, [3]=0x29, [4]=0xaa, [5]=0x8d, [6]=0x55, [7]=0xca))) returned 0x0
	[0291.486] send (s=0x464, buf=0x3ebe997*, len=595, flags=0) returned 595
	[0291.487] recv (in: s=0x464, buf=0x2940134, len=8192, flags=0 | out: buf=0x2940134*) returned 133
	[0291.753] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x45c
	[0291.753] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x394
	[0291.759] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e49c | out: phkResult=0x19e49c*=0x398) returned 0x0
	[0291.761] RegQueryValueExW (in: hKey=0x398, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19e4bc, lpData=0x0, lpcbData=0x19e4b8*=0x0 | out: lpType=0x19e4bc*=0x1, lpData=0x0, lpcbData=0x19e4b8*=0xe) returned 0x0
	[0291.761] RegQueryValueExW (in: hKey=0x398, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19e4bc, lpData=0x2cc9b64, lpcbData=0x19e4b8*=0xe | out: lpType=0x19e4bc*=0x1, lpData="Client", lpcbData=0x19e4b8*=0xe) returned 0x0
	[0291.762] RegCloseKey (hKey=0x398) returned 0x0
	[0291.774] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19dd80 | out: phkResult=0x19dd80*=0x0) returned 0x2
	[0291.778] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f29c | out: phkResult=0x19f29c*=0x398) returned 0x0
	[0291.778] RegQueryValueExW (in: hKey=0x398, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x19f2b8, lpData=0x0, lpcbData=0x19f2b4*=0x0 | out: lpType=0x19f2b8*=0x0, lpData=0x0, lpcbData=0x19f2b4*=0x0) returned 0x2
	[0291.778] RegCloseKey (hKey=0x398) returned 0x0
	[0291.896] CoGetContextToken (in: pToken=0x19fdc0 | out: pToken=0x19fdc0) returned 0x0
	[0291.896] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fde4 | out: ppvObject=0x19fde4*=0x66b664) returned 0x0
	[0291.896] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x19fe44 | out: pThreadType=0x19fe44*=0) returned 0x0
	[0291.896] IUnknown:Release (This=0x66b664) returned 0x0
	[0291.897] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0
	[0291.897] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fb00 | out: ppvObject=0x19fb00*=0x66b664) returned 0x0
	[0291.898] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x19fb2c | out: pThreadType=0x19fb2c*=0) returned 0x0
	[0291.898] IUnknown:Release (This=0x66b664) returned 0x0
	[0291.899] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0
	[0291.899] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fb00 | out: ppvObject=0x19fb00*=0x66b664) returned 0x0
	[0291.899] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x19fb2c | out: pThreadType=0x19fb2c*=0) returned 0x0
	[0291.903] IUnknown:Release (This=0x66b664) returned 0x0
	[0292.047] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log", nBufferLength=0x104, lpBuffer=0x19f5b0, lpFilePart=0x19f5ac | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log", lpFilePart=0x19f5ac*="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log") returned 0x8c
	[0292.047] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0292.050] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log", nBufferLength=0x104, lpBuffer=0x19f600, lpFilePart=0x19f5fc | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log", lpFilePart=0x19f5fc*="cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log") returned 0x8c
	[0292.050] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\cad1b58e38cfc1e0a0431fa9aae253a1626b4e4e3a6cbc6a8f119cd4959f6410.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c8
	[0292.059] WriteFile (in: hFile=0x4c8, lpBuffer=0x645300*, nNumberOfBytesToWrite=0xf23, lpNumberOfBytesWritten=0x19f8b0, lpOverlapped=0x0 | out: lpBuffer=0x645300*, lpNumberOfBytesWritten=0x19f8b0*=0xf23, lpOverlapped=0x0) returned 1
	[0292.071] CloseHandle (hObject=0x4c8) returned 1
	[0292.109] CoGetContextToken (in: pToken=0x19fadc | out: pToken=0x19fadc) returned 0x0
	[0292.109] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fb00 | out: ppvObject=0x19fb00*=0x66b664) returned 0x0
	[0292.109] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x19fb2c | out: pThreadType=0x19fb2c*=0) returned 0x0
	[0292.109] IUnknown:Release (This=0x66b664) returned 0x0
	[0292.111] CoGetContextToken (in: pToken=0x19faf4 | out: pToken=0x19faf4) returned 0x0
	[0292.111] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19fb18 | out: ppvObject=0x19fb18*=0x66b664) returned 0x0
	[0292.111] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x19fb44 | out: pThreadType=0x19fb44*=0) returned 0x0
	[0292.111] IUnknown:Release (This=0x66b664) returned 0x0
	[0292.112] CoUninitialize () 
	[0292.136] CloseHandle (hObject=0x214) returned 1
	[0292.137] CloseHandle (hObject=0x1d8) returned 1
	[0292.137] CloseHandle (hObject=0x1dc) returned 1
	[0292.146] CloseHandle (hObject=0x2d8) returned 1
	[0292.153] CloseHandle (hObject=0x170) returned 1
	[0292.154] CloseHandle (hObject=0x1a8) returned 1

Thread:
	id = 2
	os_tid = 0xdb4


Thread:
	id = 3
	os_tid = 0x570


Thread:
	id = 4
	os_tid = 0xa24


Thread:
	id = 5
	os_tid = 0x1314

	[0191.352] CloseHandle (hObject=0x290) returned 1
	[0191.352] CloseHandle (hObject=0x290) returned 1
	[0191.353] CloseHandle (hObject=0x294) returned 1
	[0191.353] CloseHandle (hObject=0x290) returned 1
	[0191.355] CloseHandle (hObject=0x290) returned 1
	[0195.758] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0195.758] RoInitialize () returned 0x1
	[0195.758] RoUninitialize () returned 0x0
	[0249.191] CoGetContextToken (in: pToken=0x285fc30 | out: pToken=0x285fc30) returned 0x0
	[0249.191] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0249.191] WbemLocator:IUnknown:Release (This=0x716818) returned 0x1
	[0249.191] WbemLocator:IUnknown:Release (This=0x716818) returned 0x0
	[0249.191] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0249.191] IUnknown:Release (This=0x658cb8) returned 0x2
	[0249.191] IUnknown:Release (This=0x658cb8) returned 0x1
	[0249.191] CoGetContextToken (in: pToken=0x285fc30 | out: pToken=0x285fc30) returned 0x0
	[0249.191] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0249.191] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x1
	[0249.191] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x0
	[0249.192] IUnknown:Release (This=0x658cb8) returned 0x0
	[0249.193] CloseHandle (hObject=0x418) returned 1
	[0249.194] RegCloseKey (hKey=0x3c0) returned 0x0
	[0249.194] CloseHandle (hObject=0x414) returned 1
	[0249.194] CloseHandle (hObject=0x410) returned 1
	[0249.194] CloseHandle (hObject=0x40c) returned 1
	[0249.195] CloseHandle (hObject=0x3ac) returned 1
	[0249.195] CloseHandle (hObject=0x408) returned 1
	[0249.195] CloseHandle (hObject=0x42c) returned 1
	[0249.195] CloseHandle (hObject=0x3fc) returned 1
	[0249.196] RegCloseKey (hKey=0x3c8) returned 0x0
	[0249.196] CloseHandle (hObject=0x428) returned 1
	[0249.196] CloseHandle (hObject=0x460) returned 1
	[0249.196] CloseHandle (hObject=0x3f4) returned 1
	[0249.197] CloseHandle (hObject=0x424) returned 1
	[0249.197] CloseHandle (hObject=0x420) returned 1
	[0249.197] CloseHandle (hObject=0x45c) returned 1
	[0249.198] CloseHandle (hObject=0x41c) returned 1
	[0249.198] CloseHandle (hObject=0x3cc) returned 1
	[0249.198] CloseHandle (hObject=0x39c) returned 1
	[0249.199] CloseHandle (hObject=0x38c) returned 1
	[0249.199] CloseHandle (hObject=0x390) returned 1
	[0249.199] CloseHandle (hObject=0x394) returned 1
	[0249.199] CloseHandle (hObject=0x398) returned 1
	[0265.440] CoGetContextToken (in: pToken=0x285fc30 | out: pToken=0x285fc30) returned 0x0
	[0265.440] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.440] IUnknown:Release (This=0x6aacc8) returned 0x2
	[0265.440] IUnknown:Release (This=0x6aacc8) returned 0x1
	[0265.440] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.440] IUnknown:Release (This=0x658cb8) returned 0x2
	[0265.440] IUnknown:Release (This=0x658cb8) returned 0x1
	[0265.440] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.441] WbemLocator:IUnknown:Release (This=0x7048f8) returned 0x1
	[0265.441] WbemLocator:IUnknown:Release (This=0x709898) returned 0x0
	[0265.446] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.446] WbemLocator:IUnknown:Release (This=0x69b9788) returned 0x1
	[0265.446] WbemLocator:IUnknown:Release (This=0x69b9788) returned 0x0
	[0265.446] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.446] IUnknown:Release (This=0x71d0f8) returned 0x2
	[0265.446] IUnknown:Release (This=0x71d0f8) returned 0x1
	[0265.446] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.446] IUnknown:Release (This=0x71d548) returned 0x2
	[0265.446] IUnknown:Release (This=0x71d548) returned 0x1
	[0265.446] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.446] IUnknown:Release (This=0x71d6e0) returned 0x2
	[0265.446] IUnknown:Release (This=0x71d6e0) returned 0x1
	[0265.446] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69b6c20) returned 0x2
	[0265.447] IUnknown:Release (This=0x69b6c20) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69b7298) returned 0x2
	[0265.447] IUnknown:Release (This=0x69b7298) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69b6900) returned 0x2
	[0265.447] IUnknown:Release (This=0x69b6900) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69b76f8) returned 0x2
	[0265.447] IUnknown:Release (This=0x69b76f8) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69b7890) returned 0x2
	[0265.447] IUnknown:Release (This=0x69b7890) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69dd860) returned 0x2
	[0265.447] IUnknown:Release (This=0x69dd860) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69dd548) returned 0x2
	[0265.447] IUnknown:Release (This=0x69dd548) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69d58a0) returned 0x2
	[0265.447] IUnknown:Release (This=0x69d58a0) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69d5cf8) returned 0x2
	[0265.447] IUnknown:Release (This=0x69d5cf8) returned 0x1
	[0265.447] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.447] IUnknown:Release (This=0x69d6138) returned 0x2
	[0265.448] IUnknown:Release (This=0x69d6138) returned 0x1
	[0265.448] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.448] IUnknown:Release (This=0x69d85b0) returned 0x2
	[0265.448] IUnknown:Release (This=0x69d85b0) returned 0x1
	[0265.448] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.448] IUnknown:Release (This=0x69d8a38) returned 0x2
	[0265.448] IUnknown:Release (This=0x69d8a38) returned 0x1
	[0265.448] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.448] IUnknown:Release (This=0x717598) returned 0x2
	[0265.448] IUnknown:Release (This=0x717598) returned 0x1
	[0265.448] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.448] IUnknown:Release (This=0x7170d0) returned 0x2
	[0265.448] IUnknown:Release (This=0x7170d0) returned 0x1
	[0265.448] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.448] IUnknown:Release (This=0x716a70) returned 0x2
	[0265.448] IUnknown:Release (This=0x716a70) returned 0x1
	[0265.448] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.448] IUnknown:Release (This=0x716da0) returned 0x2
	[0265.448] IUnknown:Release (This=0x716da0) returned 0x1
	[0265.448] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.448] IUnknown:Release (This=0x716c08) returned 0x2
	[0265.448] IUnknown:Release (This=0x716c08) returned 0x1
	[0265.448] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.448] IUnknown:Release (This=0x716f38) returned 0x2
	[0265.448] IUnknown:Release (This=0x716f38) returned 0x1
	[0265.449] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.449] IUnknown:Release (This=0x69e4e88) returned 0x2
	[0265.449] IUnknown:Release (This=0x69e4e88) returned 0x1
	[0265.449] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.449] IUnknown:Release (This=0x69e4cf0) returned 0x2
	[0265.449] IUnknown:Release (This=0x69e4cf0) returned 0x1
	[0265.449] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.449] IUnknown:Release (This=0x69e3e98) returned 0x2
	[0265.449] IUnknown:Release (This=0x69e3e98) returned 0x1
	[0265.449] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.449] IUnknown:Release (This=0x69e4360) returned 0x2
	[0265.449] IUnknown:Release (This=0x69e4360) returned 0x1
	[0265.449] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.449] IUnknown:Release (This=0x69e3040) returned 0x2
	[0265.449] IUnknown:Release (This=0x69e3040) returned 0x1
	[0265.449] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.449] IUnknown:Release (This=0x69e4690) returned 0x2
	[0265.449] IUnknown:Release (This=0x69e4690) returned 0x1
	[0265.450] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.450] IUnknown:Release (This=0x69e36a0) returned 0x2
	[0265.450] IUnknown:Release (This=0x69e36a0) returned 0x1
	[0265.450] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.450] IUnknown:Release (This=0x69e31d8) returned 0x2
	[0265.450] IUnknown:Release (This=0x69e31d8) returned 0x1
	[0265.450] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.450] IUnknown:Release (This=0x69e4828) returned 0x2
	[0265.450] IUnknown:Release (This=0x69e4828) returned 0x1
	[0265.450] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.450] IUnknown:Release (This=0x69e3b68) returned 0x2
	[0265.450] IUnknown:Release (This=0x69e3b68) returned 0x1
	[0265.450] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.450] IUnknown:Release (This=0x69e44f8) returned 0x2
	[0265.450] IUnknown:Release (This=0x69e44f8) returned 0x1
	[0265.450] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.451] IUnknown:Release (This=0x69e3d00) returned 0x2
	[0265.451] IUnknown:Release (This=0x69e3d00) returned 0x1
	[0265.451] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.451] IUnknown:Release (This=0x69e4030) returned 0x2
	[0265.451] IUnknown:Release (This=0x69e4030) returned 0x1
	[0265.451] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.451] IUnknown:Release (This=0x69e41c8) returned 0x2
	[0265.451] IUnknown:Release (This=0x69e41c8) returned 0x1
	[0265.451] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.451] IUnknown:Release (This=0x69e49c0) returned 0x2
	[0265.452] IUnknown:Release (This=0x69e49c0) returned 0x1
	[0265.452] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.452] IUnknown:Release (This=0x69e3370) returned 0x2
	[0265.452] IUnknown:Release (This=0x69e3370) returned 0x1
	[0265.452] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.452] IUnknown:Release (This=0x69e3508) returned 0x2
	[0265.452] IUnknown:Release (This=0x69e3508) returned 0x1
	[0265.452] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.452] IUnknown:Release (This=0x69e3838) returned 0x2
	[0265.452] IUnknown:Release (This=0x69e3838) returned 0x1
	[0265.452] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.452] IUnknown:Release (This=0x69e4b58) returned 0x2
	[0265.452] IUnknown:Release (This=0x69e4b58) returned 0x1
	[0265.452] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.452] IUnknown:Release (This=0x69e39d0) returned 0x2
	[0265.452] IUnknown:Release (This=0x69e39d0) returned 0x1
	[0265.452] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.452] IUnknown:Release (This=0x69f0808) returned 0x2
	[0265.452] IUnknown:Release (This=0x69f0808) returned 0x1
	[0265.452] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.452] IUnknown:Release (This=0x69efe78) returned 0x2
	[0265.453] IUnknown:Release (This=0x69efe78) returned 0x1
	[0265.453] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.453] IUnknown:Release (This=0x69efce0) returned 0x2
	[0265.453] IUnknown:Release (This=0x69efce0) returned 0x1
	[0265.453] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.453] IUnknown:Release (This=0x69f01a8) returned 0x2
	[0265.453] IUnknown:Release (This=0x69f01a8) returned 0x1
	[0265.453] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.453] IUnknown:Release (This=0x69ef818) returned 0x2
	[0265.453] IUnknown:Release (This=0x69ef818) returned 0x1
	[0265.453] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.453] IUnknown:Release (This=0x69f0010) returned 0x2
	[0265.453] IUnknown:Release (This=0x69f0010) returned 0x1
	[0265.453] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.453] IUnknown:Release (This=0x69ef9b0) returned 0x2
	[0265.453] IUnknown:Release (This=0x69ef9b0) returned 0x1
	[0265.453] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.453] IUnknown:Release (This=0x69ef4e8) returned 0x2
	[0265.453] IUnknown:Release (This=0x69ef4e8) returned 0x1
	[0265.454] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.454] IUnknown:Release (This=0x69f09a0) returned 0x2
	[0265.454] IUnknown:Release (This=0x69f09a0) returned 0x1
	[0265.454] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.454] IUnknown:Release (This=0x69f0e68) returned 0x2
	[0265.454] IUnknown:Release (This=0x69f0e68) returned 0x1
	[0265.454] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.454] IUnknown:Release (This=0x69f0340) returned 0x2
	[0265.454] IUnknown:Release (This=0x69f0340) returned 0x1
	[0265.454] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.454] IUnknown:Release (This=0x69f0b38) returned 0x2
	[0265.454] IUnknown:Release (This=0x69f0b38) returned 0x1
	[0265.454] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.454] IUnknown:Release (This=0x69efb48) returned 0x2
	[0265.454] IUnknown:Release (This=0x69efb48) returned 0x1
	[0265.454] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.454] IUnknown:Release (This=0x69f1000) returned 0x2
	[0265.454] IUnknown:Release (This=0x69f1000) returned 0x1
	[0265.454] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.454] IUnknown:Release (This=0x69ef680) returned 0x2
	[0265.455] IUnknown:Release (This=0x69ef680) returned 0x1
	[0265.455] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.455] IUnknown:Release (This=0x69ef1b8) returned 0x2
	[0265.455] IUnknown:Release (This=0x69ef1b8) returned 0x1
	[0265.456] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.456] IUnknown:Release (This=0x69f04d8) returned 0x2
	[0265.456] IUnknown:Release (This=0x69f04d8) returned 0x1
	[0265.456] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.456] IUnknown:Release (This=0x69f0670) returned 0x2
	[0265.456] IUnknown:Release (This=0x69f0670) returned 0x1
	[0265.457] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.457] IUnknown:Release (This=0x69f0cd0) returned 0x2
	[0265.457] IUnknown:Release (This=0x69f0cd0) returned 0x1
	[0265.457] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.457] IUnknown:Release (This=0x69ef350) returned 0x2
	[0265.457] IUnknown:Release (This=0x69ef350) returned 0x1
	[0265.457] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.457] IUnknown:Release (This=0x69fa0a0) returned 0x2
	[0265.457] IUnknown:Release (This=0x69fa0a0) returned 0x1
	[0265.457] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.457] IUnknown:Release (This=0x69faa30) returned 0x2
	[0265.457] IUnknown:Release (This=0x69faa30) returned 0x1
	[0265.457] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.457] IUnknown:Release (This=0x69fbd50) returned 0x2
	[0265.457] IUnknown:Release (This=0x69fbd50) returned 0x1
	[0265.457] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.457] IUnknown:Release (This=0x69fbee8) returned 0x2
	[0265.457] IUnknown:Release (This=0x69fbee8) returned 0x1
	[0265.457] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.457] IUnknown:Release (This=0x69fabc8) returned 0x2
	[0265.457] IUnknown:Release (This=0x69fabc8) returned 0x1
	[0265.458] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.458] IUnknown:Release (This=0x69fa898) returned 0x2
	[0265.458] IUnknown:Release (This=0x69fa898) returned 0x1
	[0265.458] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.458] IUnknown:Release (This=0x69fad60) returned 0x2
	[0265.458] IUnknown:Release (This=0x69fad60) returned 0x1
	[0265.458] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.458] IUnknown:Release (This=0x69fa238) returned 0x2
	[0265.458] IUnknown:Release (This=0x69fa238) returned 0x1
	[0265.458] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.458] IUnknown:Release (This=0x69fb3c0) returned 0x2
	[0265.458] IUnknown:Release (This=0x69fb3c0) returned 0x1
	[0265.458] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.458] IUnknown:Release (This=0x69faef8) returned 0x2
	[0265.458] IUnknown:Release (This=0x69faef8) returned 0x1
	[0265.458] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.458] IUnknown:Release (This=0x69fbbb8) returned 0x2
	[0265.458] IUnknown:Release (This=0x69fbbb8) returned 0x1
	[0265.458] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.458] IUnknown:Release (This=0x69fa3d0) returned 0x2
	[0265.458] IUnknown:Release (This=0x69fa3d0) returned 0x1
	[0265.459] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.459] IUnknown:Release (This=0x69fb090) returned 0x2
	[0265.459] IUnknown:Release (This=0x69fb090) returned 0x1
	[0265.459] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.459] IUnknown:Release (This=0x69fb558) returned 0x2
	[0265.459] IUnknown:Release (This=0x69fb558) returned 0x1
	[0265.459] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.459] IUnknown:Release (This=0x69fba20) returned 0x2
	[0265.459] IUnknown:Release (This=0x69fba20) returned 0x1
	[0265.459] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.459] IUnknown:Release (This=0x69fb228) returned 0x2
	[0265.459] IUnknown:Release (This=0x69fb228) returned 0x1
	[0265.459] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.459] IUnknown:Release (This=0x69fa568) returned 0x2
	[0265.459] IUnknown:Release (This=0x69fa568) returned 0x1
	[0265.459] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.459] IUnknown:Release (This=0x69fa700) returned 0x2
	[0265.459] IUnknown:Release (This=0x69fa700) returned 0x1
	[0265.460] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.460] IUnknown:Release (This=0x69fb6f0) returned 0x2
	[0265.460] IUnknown:Release (This=0x69fb6f0) returned 0x1
	[0265.460] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.460] IUnknown:Release (This=0x69fb888) returned 0x2
	[0265.460] IUnknown:Release (This=0x69fb888) returned 0x1
	[0265.460] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.460] IUnknown:Release (This=0x6a0cc60) returned 0x2
	[0265.460] IUnknown:Release (This=0x6a0cc60) returned 0x1
	[0265.460] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.460] IUnknown:Release (This=0x6a0b7a8) returned 0x2
	[0265.460] IUnknown:Release (This=0x6a0b7a8) returned 0x1
	[0265.460] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.460] WbemLocator:IUnknown:Release (This=0x69b9888) returned 0x1
	[0265.460] WbemLocator:IUnknown:Release (This=0x69b9888) returned 0x0
	[0265.460] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.460] WbemLocator:IUnknown:Release (This=0x704bf8) returned 0x1
	[0265.460] WbemLocator:IUnknown:Release (This=0x6a02d18) returned 0x0
	[0265.462] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.462] WbemLocator:IUnknown:Release (This=0x69b98a8) returned 0x1
	[0265.462] WbemLocator:IUnknown:Release (This=0x69b98a8) returned 0x0
	[0265.462] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.462] WbemLocator:IUnknown:Release (This=0x704cf8) returned 0x1
	[0265.462] WbemLocator:IUnknown:Release (This=0x6a02ef8) returned 0x0
	[0265.462] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.462] WbemLocator:IUnknown:Release (This=0x69b9868) returned 0x1
	[0265.463] WbemLocator:IUnknown:Release (This=0x69b9868) returned 0x0
	[0265.463] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.463] WbemLocator:IUnknown:Release (This=0x704ff8) returned 0x1
	[0265.463] WbemLocator:IUnknown:Release (This=0x6a02f48) returned 0x0
	[0265.463] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.463] WbemLocator:IUnknown:Release (This=0x69b9928) returned 0x1
	[0265.463] WbemLocator:IUnknown:Release (This=0x69b9928) returned 0x0
	[0265.463] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.464] IUnknown:Release (This=0x6a0cdf8) returned 0x2
	[0265.464] IUnknown:Release (This=0x6a0cdf8) returned 0x1
	[0265.464] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.464] WbemLocator:IUnknown:Release (This=0x69b9738) returned 0x1
	[0265.464] WbemLocator:IUnknown:Release (This=0x69b9738) returned 0x0
	[0265.464] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.464] IUnknown:Release (This=0x6a0c600) returned 0x2
	[0265.464] IUnknown:Release (This=0x6a0c600) returned 0x1
	[0265.464] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.464] WbemLocator:IUnknown:Release (This=0x69b9a48) returned 0x1
	[0265.464] WbemLocator:IUnknown:Release (This=0x69b9a48) returned 0x0
	[0265.464] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.464] WbemLocator:IUnknown:Release (This=0x705cf8) returned 0x1
	[0265.464] WbemLocator:IUnknown:Release (This=0x6f8e98) returned 0x0
	[0265.465] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.465] WbemLocator:IUnknown:Release (This=0x69b99d8) returned 0x1
	[0265.465] WbemLocator:IUnknown:Release (This=0x69b99d8) returned 0x0
	[0265.465] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.465] IUnknown:Release (This=0x6a0b2e0) returned 0x2
	[0265.465] IUnknown:Release (This=0x6a0b2e0) returned 0x1
	[0265.465] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.465] WbemLocator:IUnknown:Release (This=0x69b9a28) returned 0x1
	[0265.465] WbemLocator:IUnknown:Release (This=0x69b9a28) returned 0x0
	[0265.465] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.465] IUnknown:Release (This=0x6a0b148) returned 0x2
	[0265.465] IUnknown:Release (This=0x6a0b148) returned 0x1
	[0265.465] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.465] WbemLocator:IUnknown:Release (This=0x69b9ac8) returned 0x1
	[0265.465] WbemLocator:IUnknown:Release (This=0x69b9ac8) returned 0x0
	[0265.466] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.466] IUnknown:Release (This=0x6a0bad8) returned 0x2
	[0265.466] IUnknown:Release (This=0x6a0bad8) returned 0x1
	[0265.466] CoGetContextToken (in: pToken=0x285fc30 | out: pToken=0x285fc30) returned 0x0
	[0265.466] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.466] WbemDefPath:IUnknown:Release (This=0x63e680) returned 0x1
	[0265.466] WbemDefPath:IUnknown:Release (This=0x63e680) returned 0x0
	[0265.466] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.466] WbemDefPath:IUnknown:Release (This=0x6a09398) returned 0x1
	[0265.466] WbemDefPath:IUnknown:Release (This=0x6a09398) returned 0x0
	[0265.466] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.466] WbemDefPath:IUnknown:Release (This=0x6a08e58) returned 0x1
	[0265.466] WbemDefPath:IUnknown:Release (This=0x6a08e58) returned 0x0
	[0265.468] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.468] WbemDefPath:IUnknown:Release (This=0x6a09478) returned 0x1
	[0265.468] WbemDefPath:IUnknown:Release (This=0x6a09478) returned 0x0
	[0265.468] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0265.468] WbemDefPath:IUnknown:Release (This=0x6a09088) returned 0x1
	[0265.468] WbemDefPath:IUnknown:Release (This=0x6a09088) returned 0x0
	[0265.468] IUnknown:Release (This=0x69fb888) returned 0x0
	[0265.468] IUnknown:Release (This=0x69fb6f0) returned 0x0
	[0265.469] IUnknown:Release (This=0x69fa700) returned 0x0
	[0265.469] IUnknown:Release (This=0x69fa568) returned 0x0
	[0265.469] IUnknown:Release (This=0x69fb228) returned 0x0
	[0265.471] IUnknown:Release (This=0x69fba20) returned 0x0
	[0265.471] IUnknown:Release (This=0x69fb558) returned 0x0
	[0265.471] IUnknown:Release (This=0x69fb090) returned 0x0
	[0265.471] IUnknown:Release (This=0x69fa3d0) returned 0x0
	[0265.471] IUnknown:Release (This=0x69fbbb8) returned 0x0
	[0265.472] IUnknown:Release (This=0x69faef8) returned 0x0
	[0265.472] IUnknown:Release (This=0x69fb3c0) returned 0x0
	[0265.472] IUnknown:Release (This=0x69fa238) returned 0x0
	[0265.474] IUnknown:Release (This=0x69fad60) returned 0x0
	[0265.474] IUnknown:Release (This=0x69fa898) returned 0x0
	[0265.475] IUnknown:Release (This=0x69fabc8) returned 0x0
	[0265.475] IUnknown:Release (This=0x69fbee8) returned 0x0
	[0265.475] IUnknown:Release (This=0x69fbd50) returned 0x0
	[0265.475] IUnknown:Release (This=0x69faa30) returned 0x0
	[0265.476] IUnknown:Release (This=0x69fa0a0) returned 0x0
	[0265.476] IUnknown:Release (This=0x69ef350) returned 0x0
	[0265.476] IUnknown:Release (This=0x69f0cd0) returned 0x0
	[0265.480] IUnknown:Release (This=0x69f0670) returned 0x0
	[0265.480] IUnknown:Release (This=0x69f04d8) returned 0x0
	[0265.480] IUnknown:Release (This=0x69ef1b8) returned 0x0
	[0265.480] IUnknown:Release (This=0x69ef680) returned 0x0
	[0265.480] IUnknown:Release (This=0x69f1000) returned 0x0
	[0265.481] IUnknown:Release (This=0x69efb48) returned 0x0
	[0265.481] IUnknown:Release (This=0x69f0b38) returned 0x0
	[0265.481] IUnknown:Release (This=0x69f0340) returned 0x0
	[0265.482] IUnknown:Release (This=0x69f0e68) returned 0x0
	[0265.482] IUnknown:Release (This=0x69f09a0) returned 0x0
	[0265.482] IUnknown:Release (This=0x69ef4e8) returned 0x0
	[0265.482] IUnknown:Release (This=0x69ef9b0) returned 0x0
	[0265.483] IUnknown:Release (This=0x69f0010) returned 0x0
	[0265.483] IUnknown:Release (This=0x69ef818) returned 0x0
	[0265.484] IUnknown:Release (This=0x69f01a8) returned 0x0
	[0265.484] IUnknown:Release (This=0x69efce0) returned 0x0
	[0265.484] IUnknown:Release (This=0x69efe78) returned 0x0
	[0265.485] IUnknown:Release (This=0x69f0808) returned 0x0
	[0265.485] IUnknown:Release (This=0x69e39d0) returned 0x0
	[0265.485] IUnknown:Release (This=0x69e4b58) returned 0x0
	[0265.486] IUnknown:Release (This=0x69e3838) returned 0x0
	[0265.486] IUnknown:Release (This=0x69e3508) returned 0x0
	[0265.486] IUnknown:Release (This=0x69e3370) returned 0x0
	[0265.487] IUnknown:Release (This=0x69e49c0) returned 0x0
	[0265.487] IUnknown:Release (This=0x69e41c8) returned 0x0
	[0265.495] IUnknown:Release (This=0x69e4030) returned 0x0
	[0265.495] IUnknown:Release (This=0x69e3d00) returned 0x0
	[0265.496] IUnknown:Release (This=0x69e44f8) returned 0x0
	[0265.496] IUnknown:Release (This=0x69e3b68) returned 0x0
	[0265.496] IUnknown:Release (This=0x69e4828) returned 0x0
	[0265.496] IUnknown:Release (This=0x69e31d8) returned 0x0
	[0265.496] IUnknown:Release (This=0x69e36a0) returned 0x0
	[0265.497] IUnknown:Release (This=0x69e4690) returned 0x0
	[0265.497] IUnknown:Release (This=0x69e3040) returned 0x0
	[0265.497] IUnknown:Release (This=0x69e4360) returned 0x0
	[0265.497] IUnknown:Release (This=0x69e3e98) returned 0x0
	[0265.498] IUnknown:Release (This=0x69e4cf0) returned 0x0
	[0265.498] IUnknown:Release (This=0x69e4e88) returned 0x0
	[0265.498] IUnknown:Release (This=0x716f38) returned 0x0
	[0265.498] IUnknown:Release (This=0x716c08) returned 0x0
	[0265.499] IUnknown:Release (This=0x716da0) returned 0x0
	[0265.499] IUnknown:Release (This=0x716a70) returned 0x0
	[0265.499] IUnknown:Release (This=0x7170d0) returned 0x0
	[0265.499] IUnknown:Release (This=0x717598) returned 0x0
	[0265.500] IUnknown:Release (This=0x69d8a38) returned 0x0
	[0265.500] IUnknown:Release (This=0x69d85b0) returned 0x0
	[0265.500] IUnknown:Release (This=0x69d6138) returned 0x0
	[0265.500] IUnknown:Release (This=0x69d5cf8) returned 0x0
	[0265.501] IUnknown:Release (This=0x69d58a0) returned 0x0
	[0265.501] IUnknown:Release (This=0x69dd548) returned 0x0
	[0265.501] IUnknown:Release (This=0x69dd860) returned 0x0
	[0265.501] IUnknown:Release (This=0x69b7890) returned 0x0
	[0265.502] IUnknown:Release (This=0x69b76f8) returned 0x0
	[0265.502] IUnknown:Release (This=0x69b6900) returned 0x0
	[0265.502] IUnknown:Release (This=0x69b7298) returned 0x0
	[0265.504] IUnknown:Release (This=0x69b6c20) returned 0x0
	[0265.504] IUnknown:Release (This=0x71d6e0) returned 0x0
	[0265.504] IUnknown:Release (This=0x71d548) returned 0x0
	[0265.505] IUnknown:Release (This=0x71d0f8) returned 0x0
	[0265.505] IUnknown:Release (This=0x6aacc8) returned 0x0
	[0265.505] IUnknown:Release (This=0x658cb8) returned 0x0
	[0265.505] IUnknown:Release (This=0x6a0c600) returned 0x0
	[0265.505] IUnknown:Release (This=0x6a0b148) returned 0x0
	[0265.509] IUnknown:Release (This=0x6a0bad8) returned 0x0
	[0265.509] IUnknown:Release (This=0x6a0cdf8) returned 0x0
	[0265.509] IUnknown:Release (This=0x6a0b2e0) returned 0x0
	[0265.510] IUnknown:Release (This=0x6a0b7a8) returned 0x0
	[0265.510] IUnknown:Release (This=0x6a0cc60) returned 0x0
	[0265.511] RegCloseKey (hKey=0x394) returned 0x0
	[0265.511] RegCloseKey (hKey=0x398) returned 0x0
	[0265.511] RegCloseKey (hKey=0x4dc) returned 0x0
	[0266.061] CoGetContextToken (in: pToken=0x285fc30 | out: pToken=0x285fc30) returned 0x0
	[0266.061] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.061] WbemDefPath:IUnknown:Release (This=0x63e760) returned 0x1
	[0266.061] WbemDefPath:IUnknown:Release (This=0x63e760) returned 0x0
	[0266.061] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.061] WbemDefPath:IUnknown:Release (This=0x63e4c0) returned 0x1
	[0266.061] WbemDefPath:IUnknown:Release (This=0x63e4c0) returned 0x0
	[0266.061] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.061] WbemDefPath:IUnknown:Release (This=0x63e840) returned 0x1
	[0266.061] WbemDefPath:IUnknown:Release (This=0x63e840) returned 0x0
	[0266.061] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.062] WbemDefPath:IUnknown:Release (This=0x63e8b0) returned 0x1
	[0266.062] WbemDefPath:IUnknown:Release (This=0x63e8b0) returned 0x0
	[0266.062] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.062] WbemDefPath:IUnknown:Release (This=0x63e300) returned 0x1
	[0266.062] WbemDefPath:IUnknown:Release (This=0x63e300) returned 0x0
	[0266.062] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.062] WbemDefPath:IUnknown:Release (This=0x69dbf50) returned 0x1
	[0266.062] WbemDefPath:IUnknown:Release (This=0x69dbf50) returned 0x0
	[0266.062] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.062] WbemDefPath:IUnknown:Release (This=0x69dbe70) returned 0x1
	[0266.062] WbemDefPath:IUnknown:Release (This=0x69dbe70) returned 0x0
	[0266.062] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.062] WbemDefPath:IUnknown:Release (This=0x69dbee0) returned 0x1
	[0266.062] WbemDefPath:IUnknown:Release (This=0x69dbee0) returned 0x0
	[0266.063] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.063] WbemDefPath:IUnknown:Release (This=0x69db8c0) returned 0x1
	[0266.063] WbemDefPath:IUnknown:Release (This=0x69db8c0) returned 0x0
	[0266.063] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.063] WbemDefPath:IUnknown:Release (This=0x69dbb60) returned 0x1
	[0266.063] WbemDefPath:IUnknown:Release (This=0x69dbb60) returned 0x0
	[0266.063] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69db310) returned 0x1
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69db310) returned 0x0
	[0266.064] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69dbd20) returned 0x1
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69dbd20) returned 0x0
	[0266.064] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69db930) returned 0x1
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69db930) returned 0x0
	[0266.064] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69db620) returned 0x1
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69db620) returned 0x0
	[0266.064] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69db3f0) returned 0x1
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69db3f0) returned 0x0
	[0266.064] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69dc030) returned 0x1
	[0266.064] WbemDefPath:IUnknown:Release (This=0x69dc030) returned 0x0
	[0266.064] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69dbfc0) returned 0x1
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69dbfc0) returned 0x0
	[0266.065] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69db9a0) returned 0x1
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69db9a0) returned 0x0
	[0266.065] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69dbc40) returned 0x1
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69dbc40) returned 0x0
	[0266.065] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69dbd90) returned 0x1
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69dbd90) returned 0x0
	[0266.065] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69db770) returned 0x1
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69db770) returned 0x0
	[0266.065] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69dbcb0) returned 0x1
	[0266.065] WbemDefPath:IUnknown:Release (This=0x69dbcb0) returned 0x0
	[0266.066] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69dba10) returned 0x1
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69dba10) returned 0x0
	[0266.066] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69dbe00) returned 0x1
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69dbe00) returned 0x0
	[0266.066] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db2a0) returned 0x1
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db2a0) returned 0x0
	[0266.066] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db380) returned 0x1
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db380) returned 0x0
	[0266.066] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db460) returned 0x1
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db460) returned 0x0
	[0266.066] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db690) returned 0x1
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db690) returned 0x0
	[0266.066] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.066] WbemDefPath:IUnknown:Release (This=0x69db4d0) returned 0x1
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db4d0) returned 0x0
	[0266.067] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db540) returned 0x1
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db540) returned 0x0
	[0266.067] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db5b0) returned 0x1
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db5b0) returned 0x0
	[0266.067] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69dba80) returned 0x1
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69dba80) returned 0x0
	[0266.067] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69dbbd0) returned 0x1
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69dbbd0) returned 0x0
	[0266.067] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db7e0) returned 0x1
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db7e0) returned 0x0
	[0266.067] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db700) returned 0x1
	[0266.067] WbemDefPath:IUnknown:Release (This=0x69db700) returned 0x0
	[0266.068] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dbaf0) returned 0x1
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dbaf0) returned 0x0
	[0266.068] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69db850) returned 0x1
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69db850) returned 0x0
	[0266.068] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dc0a0) returned 0x1
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dc0a0) returned 0x0
	[0266.068] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dc180) returned 0x1
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dc180) returned 0x0
	[0266.068] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dc1f0) returned 0x1
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dc1f0) returned 0x0
	[0266.068] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dc110) returned 0x1
	[0266.068] WbemDefPath:IUnknown:Release (This=0x69dc110) returned 0x0
	[0266.069] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.069] WbemDefPath:IUnknown:Release (This=0x69ee530) returned 0x1
	[0266.069] WbemDefPath:IUnknown:Release (This=0x69ee530) returned 0x0
	[0266.069] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69eebc0) returned 0x1
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69eebc0) returned 0x0
	[0266.070] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69ee760) returned 0x1
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69ee760) returned 0x0
	[0266.070] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69ee060) returned 0x1
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69ee060) returned 0x0
	[0266.070] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69eeca0) returned 0x1
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69eeca0) returned 0x0
	[0266.070] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69ee610) returned 0x1
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69ee610) returned 0x0
	[0266.070] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69ee3e0) returned 0x1
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69ee3e0) returned 0x0
	[0266.070] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69eea00) returned 0x1
	[0266.070] WbemDefPath:IUnknown:Release (This=0x69eea00) returned 0x0
	[0266.070] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69ee1b0) returned 0x1
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69ee1b0) returned 0x0
	[0266.071] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69ee370) returned 0x1
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69ee370) returned 0x0
	[0266.071] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69ee990) returned 0x1
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69ee990) returned 0x0
	[0266.071] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69eeb50) returned 0x1
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69eeb50) returned 0x0
	[0266.071] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69edff0) returned 0x1
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69edff0) returned 0x0
	[0266.071] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69edf10) returned 0x1
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69edf10) returned 0x0
	[0266.071] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69ee220) returned 0x1
	[0266.071] WbemDefPath:IUnknown:Release (This=0x69ee220) returned 0x0
	[0266.072] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69edf80) returned 0x1
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69edf80) returned 0x0
	[0266.072] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69ee8b0) returned 0x1
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69ee8b0) returned 0x0
	[0266.072] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69eec30) returned 0x1
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69eec30) returned 0x0
	[0266.072] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69ee0d0) returned 0x1
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69ee0d0) returned 0x0
	[0266.072] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69ee5a0) returned 0x1
	[0266.072] WbemDefPath:IUnknown:Release (This=0x69ee5a0) returned 0x0
	[0266.072] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69ee140) returned 0x1
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69ee140) returned 0x0
	[0266.073] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69ee290) returned 0x1
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69ee290) returned 0x0
	[0266.073] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69ee300) returned 0x1
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69ee300) returned 0x0
	[0266.073] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69eea70) returned 0x1
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69eea70) returned 0x0
	[0266.073] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69ee4c0) returned 0x1
	[0266.073] WbemDefPath:IUnknown:Release (This=0x69ee4c0) returned 0x0
	[0266.073] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.075] WbemDefPath:IUnknown:Release (This=0x69ee450) returned 0x1
	[0266.075] WbemDefPath:IUnknown:Release (This=0x69ee450) returned 0x0
	[0266.075] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.075] WbemDefPath:IUnknown:Release (This=0x69ee680) returned 0x1
	[0266.075] WbemDefPath:IUnknown:Release (This=0x69ee680) returned 0x0
	[0266.075] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.075] WbemDefPath:IUnknown:Release (This=0x69eeae0) returned 0x1
	[0266.075] WbemDefPath:IUnknown:Release (This=0x69eeae0) returned 0x0
	[0266.076] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.076] WbemDefPath:IUnknown:Release (This=0x69ee6f0) returned 0x1
	[0266.076] WbemDefPath:IUnknown:Release (This=0x69ee6f0) returned 0x0
	[0266.076] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.076] WbemDefPath:IUnknown:Release (This=0x69ee840) returned 0x1
	[0266.076] WbemDefPath:IUnknown:Release (This=0x69ee840) returned 0x0
	[0266.076] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.076] WbemDefPath:IUnknown:Release (This=0x69ee7d0) returned 0x1
	[0266.076] WbemDefPath:IUnknown:Release (This=0x69ee7d0) returned 0x0
	[0266.076] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.076] WbemDefPath:IUnknown:Release (This=0x69ee920) returned 0x1
	[0266.076] WbemDefPath:IUnknown:Release (This=0x69ee920) returned 0x0
	[0266.078] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.078] WbemDefPath:IUnknown:Release (This=0x69eee60) returned 0x1
	[0266.078] WbemDefPath:IUnknown:Release (This=0x69eee60) returned 0x0
	[0266.079] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.079] WbemDefPath:IUnknown:Release (This=0x69eedf0) returned 0x1
	[0266.079] WbemDefPath:IUnknown:Release (This=0x69eedf0) returned 0x0
	[0266.079] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.079] WbemDefPath:IUnknown:Release (This=0x69eed80) returned 0x1
	[0266.079] WbemDefPath:IUnknown:Release (This=0x69eed80) returned 0x0
	[0266.079] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.079] WbemDefPath:IUnknown:Release (This=0x69eed10) returned 0x1
	[0266.079] WbemDefPath:IUnknown:Release (This=0x69eed10) returned 0x0
	[0266.080] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a09408) returned 0x1
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a09408) returned 0x0
	[0266.080] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a09948) returned 0x1
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a09948) returned 0x0
	[0266.080] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a09788) returned 0x1
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a09788) returned 0x0
	[0266.080] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a08f38) returned 0x1
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a08f38) returned 0x0
	[0266.080] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a09018) returned 0x1
	[0266.080] WbemDefPath:IUnknown:Release (This=0x6a09018) returned 0x0
	[0266.080] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a095c8) returned 0x1
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a095c8) returned 0x0
	[0266.081] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a09328) returned 0x1
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a09328) returned 0x0
	[0266.081] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a097f8) returned 0x1
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a097f8) returned 0x0
	[0266.081] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a094e8) returned 0x1
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a094e8) returned 0x0
	[0266.081] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a09558) returned 0x1
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a09558) returned 0x0
	[0266.081] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a09868) returned 0x1
	[0266.081] WbemDefPath:IUnknown:Release (This=0x6a09868) returned 0x0
	[0266.082] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a09638) returned 0x1
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a09638) returned 0x0
	[0266.082] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a099b8) returned 0x1
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a099b8) returned 0x0
	[0266.082] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a09718) returned 0x1
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a09718) returned 0x0
	[0266.082] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a08d08) returned 0x1
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a08d08) returned 0x0
	[0266.082] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a09a28) returned 0x1
	[0266.082] WbemDefPath:IUnknown:Release (This=0x6a09a28) returned 0x0
	[0266.082] CoGetContextToken (in: pToken=0x285fc30 | out: pToken=0x285fc30) returned 0x0
	[0266.083] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.083] WbemLocator:IUnknown:Release (This=0x7060f8) returned 0x1
	[0266.083] WbemLocator:IUnknown:Release (This=0x70a0b8) returned 0x0
	[0266.084] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.084] WbemLocator:IUnknown:Release (This=0x705af8) returned 0x1
	[0266.084] WbemLocator:IUnknown:Release (This=0x709c58) returned 0x0
	[0266.085] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.085] WbemLocator:IUnknown:Release (This=0x704df8) returned 0x1
	[0266.085] WbemLocator:IUnknown:Release (This=0x6f90c8) returned 0x0
	[0266.086] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.086] WbemLocator:IUnknown:Release (This=0x7057f8) returned 0x1
	[0266.086] WbemLocator:IUnknown:Release (This=0x6f9208) returned 0x0
	[0266.087] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.087] WbemLocator:IUnknown:Release (This=0x7050f8) returned 0x1
	[0266.087] WbemLocator:IUnknown:Release (This=0x6f9258) returned 0x0
	[0266.089] CoGetContextToken (in: pToken=0x285fbb8 | out: pToken=0x285fbb8) returned 0x0
	[0266.089] WbemLocator:IUnknown:Release (This=0x7062f8) returned 0x1
	[0266.089] WbemLocator:IUnknown:Release (This=0x6f8b78) returned 0x0
	[0266.090] IUnknown:Release (This=0x66b658) returned 0x0
	[0266.091] GdipDisposeImage (image=0x6fc1f08) returned 0x0
	[0291.946] ??3@YAXPAX@Z () returned 0x1
	[0291.951] LocalFree (hMem=0x67c9f0) returned 0x0
	[0291.952] EtwEventUnregister (RegHandle=0x637738) returned 0x0
	[0291.952] EtwEventUnregister (RegHandle=0x69b1d8) returned 0x0
	[0291.956] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x378
	[0291.957] PostMessageW (hWnd=0xa00fc, Msg=0x12, wParam=0x0, lParam=0x0) returned 1
	[0291.957] CoGetContextToken (in: pToken=0x285f80c | out: pToken=0x285f80c) returned 0x0
	[0291.958] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x285f830 | out: ppvObject=0x285f830*=0x66b664) returned 0x0
	[0291.958] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x285f85c | out: pThreadType=0x285f85c*=0) returned 0x0
	[0291.958] IUnknown:Release (This=0x66b664) returned 0x0
	[0292.039] CoGetContextToken (in: pToken=0x285f824 | out: pToken=0x285f824) returned 0x0
	[0292.039] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x285f848 | out: ppvObject=0x285f848*=0x66b664) returned 0x0
	[0292.040] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x285f874 | out: pThreadType=0x285f874*=0) returned 0x0
	[0292.040] IUnknown:Release (This=0x66b664) returned 0x0
	[0292.084] EtwEventUnregister (RegHandle=0x69c148) returned 0x0
	[0292.086] CloseHandle (hObject=0x3c4) returned 1
	[0292.098] CloseHandle (hObject=0x378) returned 1
	[0292.099] CloseHandle (hObject=0x394) returned 1
	[0292.100] CloseHandle (hObject=0x45c) returned 1
	[0292.100] CloseHandle (hObject=0x3d0) returned 1
	[0292.101] CloseHandle (hObject=0x4b4) returned 1
	[0292.104] CloseHandle (hObject=0x4e0) returned 1
	[0292.105] setsockopt (s=0x464, level=65535, optname=128, optval="\x01", optlen=4) returned 0
	[0292.105] closesocket (s=0x464) returned 0
	[0292.107] RegCloseKey (hKey=0x80000004) returned 0x0
	[0292.110] CoGetContextToken (in: pToken=0x285f878 | out: pToken=0x285f878) returned 0x0
	[0292.110] CoGetContextToken (in: pToken=0x285f800 | out: pToken=0x285f800) returned 0x0
	[0292.110] WbemDefPath:IUnknown:Release (This=0x63e610) returned 0x1
	[0292.110] WbemDefPath:IUnknown:Release (This=0x63e610) returned 0x0
	[0292.110] CoGetContextToken (in: pToken=0x285f800 | out: pToken=0x285f800) returned 0x0
	[0292.110] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x2
	[0292.110] Release () returned 0x1

Thread:
	id = 6
	os_tid = 0x850


Thread:
	id = 7
	os_tid = 0x900


Thread:
	id = 8
	os_tid = 0x924


Thread:
	id = 9
	os_tid = 0x91c

	[0207.669] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0207.670] CoGetContextToken (in: pToken=0x4dafd44 | out: pToken=0x4dafd44) returned 0x0
	[0207.670] CObjectContext::QueryInterface () returned 0x0
	[0207.670] CObjectContext::GetCurrentThreadType () returned 0x0
	[0207.670] Release () returned 0x0
	[0207.670] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1
	[0207.671] CoUninitialize () 
	[0207.671] RoInitialize () returned 0x1
	[0207.671] RoUninitialize () returned 0x0
	[0207.867] GetActiveWindow () returned 0x0
	[0207.887] MessageBoxW (hWnd=0x0, lpText="Error ! Update NET 4.5", lpCaption="", uType=0x10) returned 1
	[0210.664] CloseHandle (hObject=0x3f8) returned 1
	[0232.863] CoUninitialize () 

Thread:
	id = 10
	os_tid = 0xb10

	[0209.939] CloseHandle (hObject=0x3a0) returned 1

Thread:
	id = 11
	os_tid = 0x934

	[0209.015] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0209.016] CoGetContextToken (in: pToken=0x6adfcc4 | out: pToken=0x6adfcc4) returned 0x0
	[0209.016] CObjectContext::QueryInterface () returned 0x0
	[0209.016] CObjectContext::GetCurrentThreadType () returned 0x0
	[0209.016] Release () returned 0x0
	[0209.016] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1
	[0209.016] CoUninitialize () 
	[0209.016] RoInitialize () returned 0x1
	[0209.016] RoUninitialize () returned 0x0
	[0231.768] CoUninitialize () 
	[0231.774] CloseHandle (hObject=0x3d0) returned 1
	[0231.813] CloseHandle (hObject=0x3c0) returned 1
	[0231.813] CloseHandle (hObject=0x3c4) returned 1
	[0231.900] CloseHandle (hObject=0x3c8) returned 1
	[0231.900] CloseHandle (hObject=0x3cc) returned 1

Thread:
	id = 12
	os_tid = 0x7d4

	[0212.536] CloseHandle (hObject=0x3f4) returned 1

Thread:
	id = 125
	os_tid = 0x510


Thread:
	id = 126
	os_tid = 0x84

	[0248.094] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0248.094] RoInitialize () returned 0x1
	[0248.094] RoUninitialize () returned 0x0
	[0248.099] SetConsoleCtrlHandler (HandlerRoutine=0x4920dde, Add=1) returned 1
	[0248.102] GetClassInfoW (in: hInstance=0xa00000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1f64013.0", lpWndClass=0x29e6cd4 | out: lpWndClass=0x29e6cd4) returned 0
	[0248.106] CoTaskMemAlloc (cb=0x58) returned 0x6860c0
	[0248.106] RegisterClassW (lpWndClass=0x70cf784) returned 0xc1dc
	[0248.106] CoTaskMemFree (pv=0x6860c0) 
	[0248.108] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1f64013.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.1f64013.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xa00000, lpParam=0x0) returned 0xa00fc
	[0248.115] SetEvent (hEvent=0x4b4) returned 1
	[0248.115] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0248.335] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0248.481] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0248.645] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0248.882] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0249.267] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0249.538] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0249.754] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0249.928] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0250.094] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0250.285] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0250.433] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0250.604] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0250.730] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0250.877] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0251.101] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0251.511] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0251.713] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0251.873] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0252.079] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0252.245] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0252.408] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0252.573] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0252.786] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0253.048] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0253.362] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0253.644] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0253.988] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0254.184] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0254.336] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0254.561] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0254.754] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0255.131] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0255.286] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0255.428] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0255.615] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0255.722] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0255.841] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0255.955] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0256.101] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0256.282] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0256.433] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0256.663] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0256.820] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0256.961] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0257.186] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0257.326] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0257.985] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0258.119] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0259.158] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0259.556] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0259.733] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0259.981] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0260.186] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0260.352] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0260.483] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0260.667] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0260.843] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.067] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.178] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.283] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.387] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.494] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.597] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.704] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.809] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0261.913] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0262.023] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0262.136] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0262.239] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0262.428] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0262.558] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0262.708] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0263.165] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0263.344] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0263.540] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0263.714] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0263.964] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0264.134] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0264.486] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0264.650] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0265.230] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0265.605] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0266.323] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0266.558] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0266.767] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0266.968] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0267.154] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0267.405] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0268.918] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0269.087] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0269.202] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0269.365] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0269.496] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0269.739] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0269.872] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0269.984] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0270.241] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0270.351] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0270.527] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0270.698] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0270.800] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0270.905] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0271.029] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0271.182] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0271.332] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0271.482] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0271.585] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0271.687] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0271.978] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.081] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.229] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.330] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.432] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.534] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.637] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.759] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.861] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0272.986] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0273.090] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0273.191] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0273.295] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0273.413] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.051] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.153] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.255] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.380] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.481] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.583] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.685] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.787] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.889] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0274.991] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0275.093] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0275.201] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0275.303] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0275.432] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0275.551] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0275.653] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0275.803] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0275.972] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.110] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.214] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.316] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.420] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.524] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.626] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.733] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.837] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0276.957] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.067] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.168] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.271] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.372] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.475] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.579] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.681] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.784] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.886] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0277.988] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.090] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.192] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.294] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.396] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.497] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.599] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.702] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.804] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0278.908] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.043] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.154] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.256] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.367] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.470] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.571] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.674] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.776] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.880] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0279.985] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.089] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.191] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.293] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.414] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.535] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.638] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.749] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.851] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0280.954] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.056] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.158] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.260] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.412] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.515] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.617] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.727] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.832] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0281.934] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0282.037] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0282.139] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0282.241] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
	[0282.432] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0
	[0291.959] PeekMessageW (in: lpMsg=0x70cf874, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x70cf874) returned 1
	[0291.959] IsWindow (hWnd=0xa00fc) returned 1
	[0291.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x70cf780, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWákP»\x95÷ «)kPø\x0c\x070M\x9b\x06\x01", lpUsedDefaultChar=0x0) returned 14
	[0291.980] SetClassLongW (hWnd=0xa00fc, nIndex=-24, dwNewLong=1951270880) returned 0x4920e06
	[0292.027] IsWindow (hWnd=0xa00fc) returned 1
	[0292.038] UnregisterClassW (lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1f64013.0", hInstance=0xa00000) returned 1
	[0292.038] SetConsoleCtrlHandler (HandlerRoutine=0x4920dde, Add=0) returned 1
	[0292.038] SetEvent (hEvent=0x378) returned 1
	[0292.040] CoGetContextToken (in: pToken=0x70cfbbc | out: pToken=0x70cfbbc) returned 0x0
	[0292.040] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x70cfbe0 | out: ppvObject=0x70cfbe0*=0x66b664) returned 0x0
	[0292.040] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x70cfc0c | out: pThreadType=0x70cfc0c*=0) returned 0x0
	[0292.040] IUnknown:Release (This=0x66b664) returned 0x0
	[0292.040] CoUninitialize () 

Thread:
	id = 127
	os_tid = 0x588

	[0286.211] CoGetContextToken (in: pToken=0x7dcfb8c | out: pToken=0x7dcfb8c) returned 0x0
	[0286.211] IUnknown:QueryInterface (in: This=0x66b658, riid=0x6b324564*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x7dcfbb0 | out: ppvObject=0x7dcfbb0*=0x66b664) returned 0x0
	[0286.212] IComThreadingInfo:GetCurrentThreadType (in: This=0x66b664, pThreadType=0x7dcfbdc | out: pThreadType=0x7dcfbdc*=0) returned 0x0
	[0286.212] IUnknown:Release (This=0x66b664) returned 0x0
	[0286.216] CloseHandle (hObject=0x420) returned 1
	[0286.255] CloseHandle (hObject=0x4dc) returned 1
	[0286.255] CloseHandle (hObject=0x398) returned 1
	[0286.256] CloseHandle (hObject=0x394) returned 1
	[0286.256] CloseHandle (hObject=0x45c) returned 1

Process:
	id = "2"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x7534a000"
	os_pid = "0x364"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "1"
	os_parent_pid = "0x214"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ac37" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2143
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2144
	        start_va = 0x20000
	          end_va = 0x21fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2145
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2146
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2147
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2148
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2149
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2150
	        start_va = 0x100000
	          end_va = 0x100fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 2151
	        start_va = 0x110000
	          end_va = 0x110fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000110000"
	        filename = ""

Region:
	              id = 2152
	        start_va = 0x120000
	          end_va = 0x121fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000120000"
	        filename = ""

Region:
	              id = 2153
	        start_va = 0x130000
	          end_va = 0x131fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000130000"
	        filename = ""

Region:
	              id = 2154
	        start_va = 0x140000
	          end_va = 0x141fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "dosvc.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui")

Region:
	              id = 2155
	        start_va = 0x150000
	          end_va = 0x156fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "newdev.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\newdev.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\newdev.dll.mui")

Region:
	              id = 2156
	        start_va = 0x160000
	          end_va = 0x160fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000160000"
	        filename = ""

Region:
	              id = 2157
	        start_va = 0x170000
	          end_va = 0x170fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 2158
	        start_va = 0x180000
	          end_va = 0x180fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000180000"
	        filename = ""

Region:
	              id = 2159
	        start_va = 0x190000
	          end_va = 0x190fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 2160
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 2161
	        start_va = 0x1b0000
	          end_va = 0x1b6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 2162
	        start_va = 0x1c0000
	          end_va = 0x1c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001c0000"
	        filename = ""

Region:
	              id = 2163
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2164
	        start_va = 0x1e0000
	          end_va = 0x1e3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 2165
	        start_va = 0x1f0000
	          end_va = 0x1f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 2166
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 2167
	        start_va = 0x400000
	          end_va = 0x4fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 2168
	        start_va = 0x500000
	          end_va = 0x5bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2169
	        start_va = 0x5c0000
	          end_va = 0x747fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005c0000"
	        filename = ""

Region:
	              id = 2170
	        start_va = 0x750000
	          end_va = 0x750fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 2171
	        start_va = 0x760000
	          end_va = 0x760fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000760000"
	        filename = ""

Region:
	              id = 2172
	        start_va = 0x770000
	          end_va = 0x773fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 2173
	        start_va = 0x780000
	          end_va = 0x783fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 2174
	        start_va = 0x790000
	          end_va = 0x796fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000790000"
	        filename = ""

Region:
	              id = 2175
	        start_va = 0x7a0000
	          end_va = 0x7e4fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db")

Region:
	              id = 2176
	        start_va = 0x7f0000
	          end_va = 0x7fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007f0000"
	        filename = ""

Region:
	              id = 2177
	        start_va = 0x800000
	          end_va = 0x8fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000800000"
	        filename = ""

Region:
	              id = 2178
	        start_va = 0x900000
	          end_va = 0xa80fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000900000"
	        filename = ""

Region:
	              id = 2179
	        start_va = 0xa90000
	          end_va = 0xb4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a90000"
	        filename = ""

Region:
	              id = 2180
	        start_va = 0xb50000
	          end_va = 0xf4afff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b50000"
	        filename = ""

Region:
	              id = 2181
	        start_va = 0xf50000
	          end_va = 0xfcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f50000"
	        filename = ""

Region:
	              id = 2182
	        start_va = 0xfd0000
	          end_va = 0x104ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000fd0000"
	        filename = ""

Region:
	              id = 2183
	        start_va = 0x1050000
	          end_va = 0x105ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001050000"
	        filename = ""

Region:
	              id = 2184
	        start_va = 0x1060000
	          end_va = 0x1060fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001060000"
	        filename = ""

Region:
	              id = 2185
	        start_va = 0x1070000
	          end_va = 0x1070fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001070000"
	        filename = ""

Region:
	              id = 2186
	        start_va = 0x1080000
	          end_va = 0x1086fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001080000"
	        filename = ""

Region:
	              id = 2187
	        start_va = 0x1090000
	          end_va = 0x1093fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001090000"
	        filename = ""

Region:
	              id = 2188
	        start_va = 0x10a0000
	          end_va = 0x10a1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010a0000"
	        filename = ""

Region:
	              id = 2189
	        start_va = 0x10b0000
	          end_va = 0x10b6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010b0000"
	        filename = ""

Region:
	              id = 2190
	        start_va = 0x10c0000
	          end_va = 0x10c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010c0000"
	        filename = ""

Region:
	              id = 2191
	        start_va = 0x10d0000
	          end_va = 0x10d6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010d0000"
	        filename = ""

Region:
	              id = 2192
	        start_va = 0x10e0000
	          end_va = 0x10effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010e0000"
	        filename = ""

Region:
	              id = 2193
	        start_va = 0x10f0000
	          end_va = 0x10f3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010f0000"
	        filename = ""

Region:
	              id = 2194
	        start_va = 0x1100000
	          end_va = 0x1106fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001100000"
	        filename = ""

Region:
	              id = 2195
	        start_va = 0x1110000
	          end_va = 0x118ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001110000"
	        filename = ""

Region:
	              id = 2196
	        start_va = 0x1190000
	          end_va = 0x11d2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001190000"
	        filename = ""

Region:
	              id = 2197
	        start_va = 0x11e0000
	          end_va = 0x11fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011e0000"
	        filename = ""

Region:
	              id = 2198
	        start_va = 0x1200000
	          end_va = 0x12fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001200000"
	        filename = ""

Region:
	              id = 2199
	        start_va = 0x1300000
	          end_va = 0x13fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 2200
	        start_va = 0x1400000
	          end_va = 0x14fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001400000"
	        filename = ""

Region:
	              id = 2201
	        start_va = 0x1500000
	          end_va = 0x15fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001500000"
	        filename = ""

Region:
	              id = 2202
	        start_va = 0x1600000
	          end_va = 0x1936fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2203
	        start_va = 0x1940000
	          end_va = 0x1a3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001940000"
	        filename = ""

Region:
	              id = 2204
	        start_va = 0x1a40000
	          end_va = 0x1b3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a40000"
	        filename = ""

Region:
	              id = 2205
	        start_va = 0x1b40000
	          end_va = 0x1c3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b40000"
	        filename = ""

Region:
	              id = 2206
	        start_va = 0x1c40000
	          end_va = 0x1ccdfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db")

Region:
	              id = 2207
	        start_va = 0x1cd0000
	          end_va = 0x1cdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001cd0000"
	        filename = ""

Region:
	              id = 2208
	        start_va = 0x1ce0000
	          end_va = 0x1ceffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ce0000"
	        filename = ""

Region:
	              id = 2209
	        start_va = 0x1cf0000
	          end_va = 0x1cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001cf0000"
	        filename = ""

Region:
	              id = 2210
	        start_va = 0x1d00000
	          end_va = 0x1d0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001d00000"
	        filename = ""

Region:
	              id = 2211
	        start_va = 0x1d10000
	          end_va = 0x1d1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001d10000"
	        filename = ""

Region:
	              id = 2212
	        start_va = 0x1d20000
	          end_va = 0x1d2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001d20000"
	        filename = ""

Region:
	              id = 2213
	        start_va = 0x1d30000
	          end_va = 0x1d31fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d30000"
	        filename = ""

Region:
	              id = 2214
	        start_va = 0x1d40000
	          end_va = 0x1e3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d40000"
	        filename = ""

Region:
	              id = 2215
	        start_va = 0x1e40000
	          end_va = 0x1f3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e40000"
	        filename = ""

Region:
	              id = 2216
	        start_va = 0x1f40000
	          end_va = 0x203ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f40000"
	        filename = ""

Region:
	              id = 2217
	        start_va = 0x2040000
	          end_va = 0x20bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002040000"
	        filename = ""

Region:
	              id = 2218
	        start_va = 0x20c0000
	          end_va = 0x20cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2219
	        start_va = 0x20d0000
	          end_va = 0x20dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020d0000"
	        filename = ""

Region:
	              id = 2220
	        start_va = 0x20e0000
	          end_va = 0x20effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020e0000"
	        filename = ""

Region:
	              id = 2221
	        start_va = 0x20f0000
	          end_va = 0x20f6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020f0000"
	        filename = ""

Region:
	              id = 2222
	        start_va = 0x2100000
	          end_va = 0x21fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002100000"
	        filename = ""

Region:
	              id = 2223
	        start_va = 0x2200000
	          end_va = 0x22fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002200000"
	        filename = ""

Region:
	              id = 2224
	        start_va = 0x2300000
	          end_va = 0x23fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 2225
	        start_va = 0x2400000
	          end_va = 0x24fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002400000"
	        filename = ""

Region:
	              id = 2226
	        start_va = 0x2500000
	          end_va = 0x25fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002500000"
	        filename = ""

Region:
	              id = 2227
	        start_va = 0x2600000
	          end_va = 0x26fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002600000"
	        filename = ""

Region:
	              id = 2228
	        start_va = 0x2700000
	          end_va = 0x27fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002700000"
	        filename = ""

Region:
	              id = 2229
	        start_va = 0x2800000
	          end_va = 0x28fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002800000"
	        filename = ""

Region:
	              id = 2230
	        start_va = 0x2900000
	          end_va = 0x29fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002900000"
	        filename = ""

Region:
	              id = 2231
	        start_va = 0x2a00000
	          end_va = 0x2afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a00000"
	        filename = ""

Region:
	              id = 2232
	        start_va = 0x2b00000
	          end_va = 0x2bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b00000"
	        filename = ""

Region:
	              id = 2233
	        start_va = 0x2c00000
	          end_va = 0x2cdffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2234
	        start_va = 0x2ce0000
	          end_va = 0x2ddffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ce0000"
	        filename = ""

Region:
	              id = 2235
	        start_va = 0x2de0000
	          end_va = 0x2edffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002de0000"
	        filename = ""

Region:
	              id = 2236
	        start_va = 0x2ee0000
	          end_va = 0x2fdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ee0000"
	        filename = ""

Region:
	              id = 2237
	        start_va = 0x2fe0000
	          end_va = 0x2feffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fe0000"
	        filename = ""

Region:
	              id = 2238
	        start_va = 0x2ff0000
	          end_va = 0x2ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ff0000"
	        filename = ""

Region:
	              id = 2239
	        start_va = 0x3000000
	          end_va = 0x30fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003000000"
	        filename = ""

Region:
	              id = 2240
	        start_va = 0x3100000
	          end_va = 0x317ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003100000"
	        filename = ""

Region:
	              id = 2241
	        start_va = 0x3180000
	          end_va = 0x31fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003180000"
	        filename = ""

Region:
	              id = 2242
	        start_va = 0x3200000
	          end_va = 0x3206fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003200000"
	        filename = ""

Region:
	              id = 2243
	        start_va = 0x3210000
	          end_va = 0x330ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003210000"
	        filename = ""

Region:
	              id = 2244
	        start_va = 0x3310000
	          end_va = 0x340ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003310000"
	        filename = ""

Region:
	              id = 2245
	        start_va = 0x3410000
	          end_va = 0x348ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003410000"
	        filename = ""

Region:
	              id = 2246
	        start_va = 0x3490000
	          end_va = 0x358ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003490000"
	        filename = ""

Region:
	              id = 2247
	        start_va = 0x3590000
	          end_va = 0x360ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003590000"
	        filename = ""

Region:
	              id = 2248
	        start_va = 0x3610000
	          end_va = 0x370ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003610000"
	        filename = ""

Region:
	              id = 2249
	        start_va = 0x3710000
	          end_va = 0x378ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003710000"
	        filename = ""

Region:
	              id = 2250
	        start_va = 0x3790000
	          end_va = 0x388ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003790000"
	        filename = ""

Region:
	              id = 2251
	        start_va = 0x3890000
	          end_va = 0x38ddfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003890000"
	        filename = ""

Region:
	              id = 2252
	        start_va = 0x38e0000
	          end_va = 0x38effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000038e0000"
	        filename = ""

Region:
	              id = 2253
	        start_va = 0x38f0000
	          end_va = 0x38fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2254
	        start_va = 0x3900000
	          end_va = 0x39fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003900000"
	        filename = ""

Region:
	              id = 2255
	        start_va = 0x3a00000
	          end_va = 0x3a0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2256
	        start_va = 0x3a10000
	          end_va = 0x3a13fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a10000"
	        filename = ""

Region:
	              id = 2257
	        start_va = 0x3a20000
	          end_va = 0x3a26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a20000"
	        filename = ""

Region:
	              id = 2258
	        start_va = 0x3a30000
	          end_va = 0x3aaffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a30000"
	        filename = ""

Region:
	              id = 2259
	        start_va = 0x3ab0000
	          end_va = 0x3afdfff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003ab0000"
	        filename = ""

Region:
	              id = 2260
	        start_va = 0x3b00000
	          end_va = 0x3bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b00000"
	        filename = ""

Region:
	              id = 2261
	        start_va = 0x3c00000
	          end_va = 0x3cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c00000"
	        filename = ""

Region:
	              id = 2262
	        start_va = 0x3d00000
	          end_va = 0x3d0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003d00000"
	        filename = ""

Region:
	              id = 2263
	        start_va = 0x3d10000
	          end_va = 0x3d1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003d10000"
	        filename = ""

Region:
	              id = 2264
	        start_va = 0x3d20000
	          end_va = 0x3d2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003d20000"
	        filename = ""

Region:
	              id = 2265
	        start_va = 0x3d30000
	          end_va = 0x3d3ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003d30000"
	        filename = ""

Region:
	              id = 2266
	        start_va = 0x3d40000
	          end_va = 0x3d4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003d40000"
	        filename = ""

Region:
	              id = 2267
	        start_va = 0x3d50000
	          end_va = 0x3d5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003d50000"
	        filename = ""

Region:
	              id = 2268
	        start_va = 0x3d60000
	          end_va = 0x3d66fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d60000"
	        filename = ""

Region:
	              id = 2269
	        start_va = 0x3d70000
	          end_va = 0x3deffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d70000"
	        filename = ""

Region:
	              id = 2270
	        start_va = 0x3df0000
	          end_va = 0x3dfffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2271
	        start_va = 0x3e00000
	          end_va = 0x3efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e00000"
	        filename = ""

Region:
	              id = 2272
	        start_va = 0x3f00000
	          end_va = 0x3ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f00000"
	        filename = ""

Region:
	              id = 2273
	        start_va = 0x4000000
	          end_va = 0x40fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004000000"
	        filename = ""

Region:
	              id = 2274
	        start_va = 0x4100000
	          end_va = 0x41fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004100000"
	        filename = ""

Region:
	              id = 2275
	        start_va = 0x4200000
	          end_va = 0x42fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004200000"
	        filename = ""

Region:
	              id = 2276
	        start_va = 0x4300000
	          end_va = 0x43fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004300000"
	        filename = ""

Region:
	              id = 2277
	        start_va = 0x4400000
	          end_va = 0x44fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004400000"
	        filename = ""

Region:
	              id = 2278
	        start_va = 0x4500000
	          end_va = 0x45fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004500000"
	        filename = ""

Region:
	              id = 2279
	        start_va = 0x4600000
	          end_va = 0x46fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004600000"
	        filename = ""

Region:
	              id = 2280
	        start_va = 0x4700000
	          end_va = 0x47fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004700000"
	        filename = ""

Region:
	              id = 2281
	        start_va = 0x4800000
	          end_va = 0x48fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004800000"
	        filename = ""

Region:
	              id = 2282
	        start_va = 0x4900000
	          end_va = 0x49fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004900000"
	        filename = ""

Region:
	              id = 2283
	        start_va = 0x4a00000
	          end_va = 0x4afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a00000"
	        filename = ""

Region:
	              id = 2284
	        start_va = 0x4b00000
	          end_va = 0x4bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b00000"
	        filename = ""

Region:
	              id = 2285
	        start_va = 0x4c00000
	          end_va = 0x4cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c00000"
	        filename = ""

Region:
	              id = 2286
	        start_va = 0x4d00000
	          end_va = 0x4d0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2287
	        start_va = 0x4d10000
	          end_va = 0x4d1ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2288
	        start_va = 0x4d20000
	          end_va = 0x4d2ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d20000"
	        filename = ""

Region:
	              id = 2289
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2290
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2291
	        start_va = 0x4d50000
	          end_va = 0x4d5ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2292
	        start_va = 0x4d60000
	          end_va = 0x4d6ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2293
	        start_va = 0x4d70000
	          end_va = 0x4d7ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2294
	        start_va = 0x4d80000
	          end_va = 0x4d80fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "msxml6r.dll"
	        filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll")

Region:
	              id = 2295
	        start_va = 0x4d90000
	          end_va = 0x4e8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d90000"
	        filename = ""

Region:
	              id = 2296
	        start_va = 0x4e90000
	          end_va = 0x4e91fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "activeds.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui")

Region:
	              id = 2297
	        start_va = 0x4ea0000
	          end_va = 0x4eaffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2298
	        start_va = 0x4eb0000
	          end_va = 0x4eb0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004eb0000"
	        filename = ""

Region:
	              id = 2299
	        start_va = 0x4ec0000
	          end_va = 0x4ec4fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll"
	        filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll")

Region:
	              id = 2300
	        start_va = 0x4ed0000
	          end_va = 0x4ed6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ed0000"
	        filename = ""

Region:
	              id = 2301
	        start_va = 0x4ee0000
	          end_va = 0x4eeffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "winnlsres.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui")

Region:
	              id = 2302
	        start_va = 0x4ef0000
	          end_va = 0x4ef0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "usocore.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui")

Region:
	              id = 2303
	        start_va = 0x4f00000
	          end_va = 0x4ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004f00000"
	        filename = ""

Region:
	              id = 2304
	        start_va = 0x5000000
	          end_va = 0x500ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2305
	        start_va = 0x5010000
	          end_va = 0x501ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2306
	        start_va = 0x5020000
	          end_va = 0x502ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2307
	        start_va = 0x5030000
	          end_va = 0x503ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2308
	        start_va = 0x5040000
	          end_va = 0x504ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2309
	        start_va = 0x5050000
	          end_va = 0x505ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2310
	        start_va = 0x5060000
	          end_va = 0x506ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2311
	        start_va = 0x5070000
	          end_va = 0x507ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2312
	        start_va = 0x5080000
	          end_va = 0x508ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2313
	        start_va = 0x5090000
	          end_va = 0x509ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2314
	        start_va = 0x50a0000
	          end_va = 0x50affff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2315
	        start_va = 0x50b0000
	          end_va = 0x50bffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2316
	        start_va = 0x50c0000
	          end_va = 0x50cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2317
	        start_va = 0x50d0000
	          end_va = 0x50dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2318
	        start_va = 0x50e0000
	          end_va = 0x50effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2319
	        start_va = 0x50f0000
	          end_va = 0x50fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2320
	        start_va = 0x5100000
	          end_va = 0x51fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005100000"
	        filename = ""

Region:
	              id = 2321
	        start_va = 0x5200000
	          end_va = 0x52fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005200000"
	        filename = ""

Region:
	              id = 2322
	        start_va = 0x5300000
	          end_va = 0x53fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005300000"
	        filename = ""

Region:
	              id = 2323
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2324
	        start_va = 0x5410000
	          end_va = 0x541ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2325
	        start_va = 0x5420000
	          end_va = 0x549ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005420000"
	        filename = ""

Region:
	              id = 2326
	        start_va = 0x54a0000
	          end_va = 0x54affff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2327
	        start_va = 0x54b0000
	          end_va = 0x54bffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2328
	        start_va = 0x54c0000
	          end_va = 0x54cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2329
	        start_va = 0x54d0000
	          end_va = 0x54dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2330
	        start_va = 0x54e0000
	          end_va = 0x54effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2331
	        start_va = 0x54f0000
	          end_va = 0x54fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2332
	        start_va = 0x5500000
	          end_va = 0x55fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005500000"
	        filename = ""

Region:
	              id = 2333
	        start_va = 0x5600000
	          end_va = 0x5601fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005600000"
	        filename = ""

Region:
	              id = 2334
	        start_va = 0x5610000
	          end_va = 0x561ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2335
	        start_va = 0x5620000
	          end_va = 0x5630fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1256.nls"
	        filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls")

Region:
	              id = 2336
	        start_va = 0x5640000
	          end_va = 0x5650fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1251.nls"
	        filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls")

Region:
	              id = 2337
	        start_va = 0x5660000
	          end_va = 0x5670fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1254.nls"
	        filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls")

Region:
	              id = 2338
	        start_va = 0x5680000
	          end_va = 0x5690fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1250.nls"
	        filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls")

Region:
	              id = 2339
	        start_va = 0x56a0000
	          end_va = 0x56b0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1253.nls"
	        filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls")

Region:
	              id = 2340
	        start_va = 0x56c0000
	          end_va = 0x56d0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1257.nls"
	        filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls")

Region:
	              id = 2341
	        start_va = 0x56e0000
	          end_va = 0x56effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2342
	        start_va = 0x56f0000
	          end_va = 0x56f6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056f0000"
	        filename = ""

Region:
	              id = 2343
	        start_va = 0x5700000
	          end_va = 0x57fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005700000"
	        filename = ""

Region:
	              id = 2344
	        start_va = 0x5800000
	          end_va = 0x58fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005800000"
	        filename = ""

Region:
	              id = 2345
	        start_va = 0x5900000
	          end_va = 0x59fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005900000"
	        filename = ""

Region:
	              id = 2346
	        start_va = 0x5a00000
	          end_va = 0x5a10fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1255.nls"
	        filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls")

Region:
	              id = 2347
	        start_va = 0x5a20000
	          end_va = 0x5a30fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_874.nls"
	        filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls")

Region:
	              id = 2348
	        start_va = 0x5a40000
	          end_va = 0x5a4ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2349
	        start_va = 0x5a50000
	          end_va = 0x5acffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a50000"
	        filename = ""

Region:
	              id = 2350
	        start_va = 0x5ad0000
	          end_va = 0x5b4ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ad0000"
	        filename = ""

Region:
	              id = 2351
	        start_va = 0x5b50000
	          end_va = 0x5bcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005b50000"
	        filename = ""

Region:
	              id = 2352
	        start_va = 0x5bd0000
	          end_va = 0x5bd6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005bd0000"
	        filename = ""

Region:
	              id = 2353
	        start_va = 0x5be0000
	          end_va = 0x5bf0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_1258.nls"
	        filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls")

Region:
	              id = 2354
	        start_va = 0x5c00000
	          end_va = 0x5c0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2355
	        start_va = 0x5c10000
	          end_va = 0x5c37fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_932.nls"
	        filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls")

Region:
	              id = 2356
	        start_va = 0x5c40000
	          end_va = 0x5c70fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_949.nls"
	        filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls")

Region:
	              id = 2357
	        start_va = 0x5c80000
	          end_va = 0x5cb0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_936.nls"
	        filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls")

Region:
	              id = 2358
	        start_va = 0x5cc0000
	          end_va = 0x5cf0fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "c_950.nls"
	        filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls")

Region:
	              id = 2359
	        start_va = 0x5d00000
	          end_va = 0x5d0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2360
	        start_va = 0x5d10000
	          end_va = 0x5e0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005d10000"
	        filename = ""

Region:
	              id = 2361
	        start_va = 0x5e10000
	          end_va = 0x5f0ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005e10000"
	        filename = ""

Region:
	              id = 2362
	        start_va = 0x5f10000
	          end_va = 0x5f8ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005f10000"
	        filename = ""

Region:
	              id = 2363
	        start_va = 0x5f90000
	          end_va = 0x608ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005f90000"
	        filename = ""

Region:
	              id = 2364
	        start_va = 0x6090000
	          end_va = 0x60a7fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006090000"
	        filename = ""

Region:
	              id = 2365
	        start_va = 0x60b0000
	          end_va = 0x60bffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2366
	        start_va = 0x60c0000
	          end_va = 0x60cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2367
	        start_va = 0x60d0000
	          end_va = 0x60dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2368
	        start_va = 0x60e0000
	          end_va = 0x60effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2369
	        start_va = 0x60f0000
	          end_va = 0x60fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2370
	        start_va = 0x6100000
	          end_va = 0x610ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2371
	        start_va = 0x6110000
	          end_va = 0x620ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006110000"
	        filename = ""

Region:
	              id = 2372
	        start_va = 0x6210000
	          end_va = 0x630ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006210000"
	        filename = ""

Region:
	              id = 2373
	        start_va = 0x6310000
	          end_va = 0x640ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006310000"
	        filename = ""

Region:
	              id = 2374
	        start_va = 0x6410000
	          end_va = 0x650ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006410000"
	        filename = ""

Region:
	              id = 2375
	        start_va = 0x6510000
	          end_va = 0x660ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006510000"
	        filename = ""

Region:
	              id = 2376
	        start_va = 0x6610000
	          end_va = 0x670ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006610000"
	        filename = ""

Region:
	              id = 2377
	        start_va = 0x6710000
	          end_va = 0x680ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006710000"
	        filename = ""

Region:
	              id = 2378
	        start_va = 0x6810000
	          end_va = 0x681ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2379
	        start_va = 0x6820000
	          end_va = 0x682ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2380
	        start_va = 0x6830000
	          end_va = 0x683ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2381
	        start_va = 0x6840000
	          end_va = 0x684ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2382
	        start_va = 0x6850000
	          end_va = 0x685ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2383
	        start_va = 0x6860000
	          end_va = 0x686ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2384
	        start_va = 0x6870000
	          end_va = 0x687ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2385
	        start_va = 0x6880000
	          end_va = 0x688ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2386
	        start_va = 0x6890000
	          end_va = 0x689ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2387
	        start_va = 0x68a0000
	          end_va = 0x68affff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2388
	        start_va = 0x68b0000
	          end_va = 0x68bffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2389
	        start_va = 0x68c0000
	          end_va = 0x68cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2390
	        start_va = 0x68d0000
	          end_va = 0x68dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2391
	        start_va = 0x68e0000
	          end_va = 0x68effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2392
	        start_va = 0x68f0000
	          end_va = 0x68fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2393
	        start_va = 0x6900000
	          end_va = 0x69fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006900000"
	        filename = ""

Region:
	              id = 2394
	        start_va = 0x6a00000
	          end_va = 0x6afffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006a00000"
	        filename = ""

Region:
	              id = 2395
	        start_va = 0x6b00000
	          end_va = 0x6bfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b00000"
	        filename = ""

Region:
	              id = 2396
	        start_va = 0x6c00000
	          end_va = 0x6cfffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c00000"
	        filename = ""

Region:
	              id = 2397
	        start_va = 0x6d00000
	          end_va = 0x6d0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2398
	        start_va = 0x6d10000
	          end_va = 0x6d1ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2399
	        start_va = 0x6d20000
	          end_va = 0x6d2ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2400
	        start_va = 0x6d30000
	          end_va = 0x6d3ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2401
	        start_va = 0x6d40000
	          end_va = 0x6d4ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2402
	        start_va = 0x6d50000
	          end_va = 0x6d5ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2403
	        start_va = 0x6d60000
	          end_va = 0x6d6ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2404
	        start_va = 0x6d70000
	          end_va = 0x6d7ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2405
	        start_va = 0x6d80000
	          end_va = 0x6d8ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2406
	        start_va = 0x6d90000
	          end_va = 0x6d9ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2407
	        start_va = 0x6da0000
	          end_va = 0x6daffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2408
	        start_va = 0x6db0000
	          end_va = 0x6dbffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2409
	        start_va = 0x6dc0000
	          end_va = 0x6dcffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2410
	        start_va = 0x6dd0000
	          end_va = 0x6ddffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2411
	        start_va = 0x6de0000
	          end_va = 0x6deffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2412
	        start_va = 0x6df0000
	          end_va = 0x6dfffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2413
	        start_va = 0x6e00000
	          end_va = 0x6efffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e00000"
	        filename = ""

Region:
	              id = 2414
	        start_va = 0x6f00000
	          end_va = 0x6ffffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006f00000"
	        filename = ""

Region:
	              id = 2415
	        start_va = 0x7000000
	          end_va = 0x70fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007000000"
	        filename = ""

Region:
	              id = 2416
	        start_va = 0x7100000
	          end_va = 0x710ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2417
	        start_va = 0x7110000
	          end_va = 0x711ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2418
	        start_va = 0x7120000
	          end_va = 0x712ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2419
	        start_va = 0x7130000
	          end_va = 0x713ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2420
	        start_va = 0x7140000
	          end_va = 0x714ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2421
	        start_va = 0x7150000
	          end_va = 0x715ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2422
	        start_va = 0x7160000
	          end_va = 0x716ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2423
	        start_va = 0x7200000
	          end_va = 0x72fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007200000"
	        filename = ""

Region:
	              id = 2424
	        start_va = 0x7300000
	          end_va = 0x73fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007300000"
	        filename = ""

Region:
	              id = 2425
	        start_va = 0x7400000
	          end_va = 0x74fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007400000"
	        filename = ""

Region:
	              id = 2426
	        start_va = 0x7500000
	          end_va = 0x75fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007500000"
	        filename = ""

Region:
	              id = 2427
	        start_va = 0x7600000
	          end_va = 0x760ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2428
	        start_va = 0x7610000
	          end_va = 0x761ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2429
	        start_va = 0x7620000
	          end_va = 0x762ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2430
	        start_va = 0x7630000
	          end_va = 0x763ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2431
	        start_va = 0x7640000
	          end_va = 0x764ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2432
	        start_va = 0x7650000
	          end_va = 0x765ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2433
	        start_va = 0x7670000
	          end_va = 0x7671fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000007670000"
	        filename = ""

Region:
	              id = 2434
	        start_va = 0x7690000
	          end_va = 0x76defff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000007690000"
	        filename = ""

Region:
	              id = 2435
	        start_va = 0x7720000
	          end_va = 0x781ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007720000"
	        filename = ""

Region:
	              id = 2436
	        start_va = 0x7b20000
	          end_va = 0x7c1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007b20000"
	        filename = ""

Region:
	              id = 2437
	        start_va = 0x7d20000
	          end_va = 0x7e1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007d20000"
	        filename = ""

Region:
	              id = 2438
	        start_va = 0x7e20000
	          end_va = 0x7f1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007e20000"
	        filename = ""

Region:
	              id = 2439
	        start_va = 0x8220000
	          end_va = 0x831ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008220000"
	        filename = ""

Region:
	              id = 2440
	        start_va = 0x8320000
	          end_va = 0x841ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008320000"
	        filename = ""

Region:
	              id = 2441
	        start_va = 0x8720000
	          end_va = 0x881ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008720000"
	        filename = ""

Region:
	              id = 2442
	        start_va = 0x9220000
	          end_va = 0x931ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009220000"
	        filename = ""

Region:
	              id = 2443
	        start_va = 0x9320000
	          end_va = 0x941ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009320000"
	        filename = ""

Region:
	              id = 2444
	        start_va = 0x9420000
	          end_va = 0x951ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009420000"
	        filename = ""

Region:
	              id = 2445
	        start_va = 0x9520000
	          end_va = 0x961ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009520000"
	        filename = ""

Region:
	              id = 2446
	        start_va = 0x9620000
	          end_va = 0x971ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009620000"
	        filename = ""

Region:
	              id = 2447
	        start_va = 0x9720000
	          end_va = 0x981ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009720000"
	        filename = ""

Region:
	              id = 2448
	        start_va = 0x9820000
	          end_va = 0xb81ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009820000"
	        filename = ""

Region:
	              id = 2449
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2450
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 2451
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 2452
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 2453
	        start_va = 0x7ff73cbd0000
	          end_va = 0x7ff73cbdcfff
	       monitored = 0
	     entry_point = 0x7ff73cbd3980
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 2454
	        start_va = 0x7ffd8e8d0000
	          end_va = 0x7ffd8eb05fff
	       monitored = 0
	     entry_point = 0x7ffd8e95a450
	     region_type = mapped_file
	            name = "wuaueng.dll"
	        filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll")

Region:
	              id = 2455
	        start_va = 0x7ffd8ecc0000
	          end_va = 0x7ffd8ef6ffff
	       monitored = 0
	     entry_point = 0x7ffd8ecc1cf0
	     region_type = mapped_file
	            name = "netshell.dll"
	        filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll")

Region:
	              id = 2456
	        start_va = 0x7ffd8fd30000
	          end_va = 0x7ffd8fd73fff
	       monitored = 0
	     entry_point = 0x7ffd8fd583e0
	     region_type = mapped_file
	            name = "updatehandlers.dll"
	        filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll")

Region:
	              id = 2457
	        start_va = 0x7ffd8fd80000
	          end_va = 0x7ffd8fddcfff
	       monitored = 0
	     entry_point = 0x7ffd8fdae510
	     region_type = mapped_file
	            name = "usocore.dll"
	        filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll")

Region:
	              id = 2458
	        start_va = 0x7ffd8fde0000
	          end_va = 0x7ffd8fe61fff
	       monitored = 0
	     entry_point = 0x7ffd8fde1790
	     region_type = mapped_file
	            name = "newdev.dll"
	        filename = "\\Windows\\System32\\newdev.dll" (normalized: "c:\\windows\\system32\\newdev.dll")

Region:
	              id = 2459
	        start_va = 0x7ffd96960000
	          end_va = 0x7ffd96991fff
	       monitored = 0
	     entry_point = 0x7ffd9696b0c0
	     region_type = mapped_file
	            name = "shacct.dll"
	        filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll")

Region:
	              id = 2460
	        start_va = 0x7ffd96c60000
	          end_va = 0x7ffd96c9efff
	       monitored = 0
	     entry_point = 0x7ffd96c882d0
	     region_type = mapped_file
	            name = "tcpipcfg.dll"
	        filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll")

Region:
	              id = 2461
	        start_va = 0x7ffd96d00000
	          end_va = 0x7ffd96d13fff
	       monitored = 0
	     entry_point = 0x7ffd96d03710
	     region_type = mapped_file
	            name = "mskeyprotect.dll"
	        filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll")

Region:
	              id = 2462
	        start_va = 0x7ffd96d20000
	          end_va = 0x7ffd96d47fff
	       monitored = 0
	     entry_point = 0x7ffd96d2efc0
	     region_type = mapped_file
	            name = "dssenh.dll"
	        filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll")

Region:
	              id = 2463
	        start_va = 0x7ffd96db0000
	          end_va = 0x7ffd96dcdfff
	       monitored = 0
	     entry_point = 0x7ffd96dbef80
	     region_type = mapped_file
	            name = "ncryptsslp.dll"
	        filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll")

Region:
	              id = 2464
	        start_va = 0x7ffd96dd0000
	          end_va = 0x7ffd96e4ffff
	       monitored = 0
	     entry_point = 0x7ffd96dfd280
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 2465
	        start_va = 0x7ffd96e50000
	          end_va = 0x7ffd96e85fff
	       monitored = 0
	     entry_point = 0x7ffd96e527f0
	     region_type = mapped_file
	            name = "windows.networking.hostname.dll"
	        filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll")

Region:
	              id = 2466
	        start_va = 0x7ffd96ef0000
	          end_va = 0x7ffd96f05fff
	       monitored = 0
	     entry_point = 0x7ffd96ef1d50
	     region_type = mapped_file
	            name = "wwapi.dll"
	        filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll")

Region:
	              id = 2467
	        start_va = 0x7ffd96fc0000
	          end_va = 0x7ffd96fd0fff
	       monitored = 0
	     entry_point = 0x7ffd96fc7480
	     region_type = mapped_file
	            name = "tetheringclient.dll"
	        filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll")

Region:
	              id = 2468
	        start_va = 0x7ffd96fe0000
	          end_va = 0x7ffd97063fff
	       monitored = 0
	     entry_point = 0x7ffd96ff8d50
	     region_type = mapped_file
	            name = "wbemess.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll")

Region:
	              id = 2469
	        start_va = 0x7ffd97150000
	          end_va = 0x7ffd97165fff
	       monitored = 0
	     entry_point = 0x7ffd971555e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2470
	        start_va = 0x7ffd97170000
	          end_va = 0x7ffd97245fff
	       monitored = 0
	     entry_point = 0x7ffd9719a800
	     region_type = mapped_file
	            name = "wmiprvsd.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll")

Region:
	              id = 2471
	        start_va = 0x7ffd97250000
	          end_va = 0x7ffd972b3fff
	       monitored = 0
	     entry_point = 0x7ffd9726bed0
	     region_type = mapped_file
	            name = "repdrvfs.dll"
	        filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll")

Region:
	              id = 2472
	        start_va = 0x7ffd972c0000
	          end_va = 0x7ffd972e4fff
	       monitored = 0
	     entry_point = 0x7ffd972c9900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 2473
	        start_va = 0x7ffd972f0000
	          end_va = 0x7ffd97303fff
	       monitored = 0
	     entry_point = 0x7ffd972f1800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2474
	        start_va = 0x7ffd97310000
	          end_va = 0x7ffd97325fff
	       monitored = 0
	     entry_point = 0x7ffd97311af0
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll")

Region:
	              id = 2475
	        start_va = 0x7ffd97330000
	          end_va = 0x7ffd97349fff
	       monitored = 0
	     entry_point = 0x7ffd97332330
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll")

Region:
	              id = 2476
	        start_va = 0x7ffd97350000
	          end_va = 0x7ffd97445fff
	       monitored = 0
	     entry_point = 0x7ffd97389590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2477
	        start_va = 0x7ffd97450000
	          end_va = 0x7ffd974c3fff
	       monitored = 0
	     entry_point = 0x7ffd97465eb0
	     region_type = mapped_file
	            name = "esscli.dll"
	        filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll")

Region:
	              id = 2478
	        start_va = 0x7ffd974d0000
	          end_va = 0x7ffd97606fff
	       monitored = 0
	     entry_point = 0x7ffd97510480
	     region_type = mapped_file
	            name = "wbemcore.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll")

Region:
	              id = 2479
	        start_va = 0x7ffd97630000
	          end_va = 0x7ffd97640fff
	       monitored = 0
	     entry_point = 0x7ffd97632fc0
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2480
	        start_va = 0x7ffd97650000
	          end_va = 0x7ffd9766dfff
	       monitored = 0
	     entry_point = 0x7ffd97653a40
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll")

Region:
	              id = 2481
	        start_va = 0x7ffd97670000
	          end_va = 0x7ffd976f1fff
	       monitored = 0
	     entry_point = 0x7ffd97672a10
	     region_type = mapped_file
	            name = "hnetcfg.dll"
	        filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll")

Region:
	              id = 2482
	        start_va = 0x7ffd98150000
	          end_va = 0x7ffd9815efff
	       monitored = 0
	     entry_point = 0x7ffd98154960
	     region_type = mapped_file
	            name = "nci.dll"
	        filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll")

Region:
	              id = 2483
	        start_va = 0x7ffd98160000
	          end_va = 0x7ffd981a5fff
	       monitored = 0
	     entry_point = 0x7ffd981679a0
	     region_type = mapped_file
	            name = "adsldp.dll"
	        filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll")

Region:
	              id = 2484
	        start_va = 0x7ffd981b0000
	          end_va = 0x7ffd981effff
	       monitored = 0
	     entry_point = 0x7ffd981bcbe0
	     region_type = mapped_file
	            name = "adsldpc.dll"
	        filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll")

Region:
	              id = 2485
	        start_va = 0x7ffd981f0000
	          end_va = 0x7ffd98236fff
	       monitored = 0
	     entry_point = 0x7ffd981f1d10
	     region_type = mapped_file
	            name = "activeds.dll"
	        filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll")

Region:
	              id = 2486
	        start_va = 0x7ffd98290000
	          end_va = 0x7ffd9829cfff
	       monitored = 0
	     entry_point = 0x7ffd98291420
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll")

Region:
	              id = 2487
	        start_va = 0x7ffd984f0000
	          end_va = 0x7ffd98531fff
	       monitored = 0
	     entry_point = 0x7ffd984f3670
	     region_type = mapped_file
	            name = "wdscore.dll"
	        filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll")

Region:
	              id = 2488
	        start_va = 0x7ffd985b0000
	          end_va = 0x7ffd985cefff
	       monitored = 0
	     entry_point = 0x7ffd985b37e0
	     region_type = mapped_file
	            name = "netsetupapi.dll"
	        filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll")

Region:
	              id = 2489
	        start_va = 0x7ffd985d0000
	          end_va = 0x7ffd98648fff
	       monitored = 0
	     entry_point = 0x7ffd985d76a0
	     region_type = mapped_file
	            name = "netsetupshim.dll"
	        filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll")

Region:
	              id = 2490
	        start_va = 0x7ffd98830000
	          end_va = 0x7ffd98847fff
	       monitored = 0
	     entry_point = 0x7ffd98832000
	     region_type = mapped_file
	            name = "vsstrace.dll"
	        filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll")

Region:
	              id = 2491
	        start_va = 0x7ffd98850000
	          end_va = 0x7ffd989d1fff
	       monitored = 0
	     entry_point = 0x7ffd988682a0
	     region_type = mapped_file
	            name = "vssapi.dll"
	        filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll")

Region:
	              id = 2492
	        start_va = 0x7ffd989e0000
	          end_va = 0x7ffd989f7fff
	       monitored = 0
	     entry_point = 0x7ffd989e4e10
	     region_type = mapped_file
	            name = "adhsvc.dll"
	        filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll")

Region:
	              id = 2493
	        start_va = 0x7ffd98a00000
	          end_va = 0x7ffd98a24fff
	       monitored = 0
	     entry_point = 0x7ffd98a05ca0
	     region_type = mapped_file
	            name = "httpprxm.dll"
	        filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll")

Region:
	              id = 2494
	        start_va = 0x7ffd98b40000
	          end_va = 0x7ffd98be2fff
	       monitored = 0
	     entry_point = 0x7ffd98b42c10
	     region_type = mapped_file
	            name = "clusapi.dll"
	        filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll")

Region:
	              id = 2495
	        start_va = 0x7ffd98bf0000
	          end_va = 0x7ffd98c41fff
	       monitored = 0
	     entry_point = 0x7ffd98bf5770
	     region_type = mapped_file
	            name = "resutils.dll"
	        filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll")

Region:
	              id = 2496
	        start_va = 0x7ffd98c50000
	          end_va = 0x7ffd98c7dfff
	       monitored = 1
	     entry_point = 0x7ffd98c52300
	     region_type = mapped_file
	            name = "wmidcom.dll"
	        filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll")

Region:
	              id = 2497
	        start_va = 0x7ffd98c80000
	          end_va = 0x7ffd98cddfff
	       monitored = 0
	     entry_point = 0x7ffd98c85080
	     region_type = mapped_file
	            name = "miutils.dll"
	        filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll")

Region:
	              id = 2498
	        start_va = 0x7ffd98ce0000
	          end_va = 0x7ffd98cfffff
	       monitored = 0
	     entry_point = 0x7ffd98ce1f50
	     region_type = mapped_file
	            name = "mi.dll"
	        filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll")

Region:
	              id = 2499
	        start_va = 0x7ffd98d00000
	          end_va = 0x7ffd98d08fff
	       monitored = 0
	     entry_point = 0x7ffd98d018f0
	     region_type = mapped_file
	            name = "sscoreext.dll"
	        filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll")

Region:
	              id = 2500
	        start_va = 0x7ffd98d10000
	          end_va = 0x7ffd98d20fff
	       monitored = 0
	     entry_point = 0x7ffd98d11d30
	     region_type = mapped_file
	            name = "sscore.dll"
	        filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll")

Region:
	              id = 2501
	        start_va = 0x7ffd98d30000
	          end_va = 0x7ffd98d70fff
	       monitored = 0
	     entry_point = 0x7ffd98d33750
	     region_type = mapped_file
	            name = "sqmapi.dll"
	        filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll")

Region:
	              id = 2502
	        start_va = 0x7ffd98d80000
	          end_va = 0x7ffd98e72fff
	       monitored = 0
	     entry_point = 0x7ffd98da5d80
	     region_type = mapped_file
	            name = "iphlpsvc.dll"
	        filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll")

Region:
	              id = 2503
	        start_va = 0x7ffd9b190000
	          end_va = 0x7ffd9b1dbfff
	       monitored = 0
	     entry_point = 0x7ffd9b1a5310
	     region_type = mapped_file
	            name = "srvsvc.dll"
	        filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll")

Region:
	              id = 2504
	        start_va = 0x7ffd9b2a0000
	          end_va = 0x7ffd9b2a9fff
	       monitored = 0
	     entry_point = 0x7ffd9b2a1350
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 2505
	        start_va = 0x7ffd9b340000
	          end_va = 0x7ffd9b3befff
	       monitored = 0
	     entry_point = 0x7ffd9b357110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2506
	        start_va = 0x7ffd9b3c0000
	          end_va = 0x7ffd9b3fbfff
	       monitored = 0
	     entry_point = 0x7ffd9b3c6aa0
	     region_type = mapped_file
	            name = "wmisvc.dll"
	        filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll")

Region:
	              id = 2507
	        start_va = 0x7ffd9b400000
	          end_va = 0x7ffd9b40bfff
	       monitored = 0
	     entry_point = 0x7ffd9b4035c0
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 2508
	        start_va = 0x7ffd9ca20000
	          end_va = 0x7ffd9ca28fff
	       monitored = 0
	     entry_point = 0x7ffd9ca221d0
	     region_type = mapped_file
	            name = "httpprxc.dll"
	        filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll")

Region:
	              id = 2509
	        start_va = 0x7ffd9ca30000
	          end_va = 0x7ffd9ca64fff
	       monitored = 0
	     entry_point = 0x7ffd9ca3a270
	     region_type = mapped_file
	            name = "fwpolicyiomgr.dll"
	        filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll")

Region:
	              id = 2510
	        start_va = 0x7ffd9cb70000
	          end_va = 0x7ffd9cde9fff
	       monitored = 0
	     entry_point = 0x7ffd9cb8a7a0
	     region_type = mapped_file
	            name = "msxml6.dll"
	        filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll")

Region:
	              id = 2511
	        start_va = 0x7ffd9cf60000
	          end_va = 0x7ffd9cf71fff
	       monitored = 0
	     entry_point = 0x7ffd9cf61a80
	     region_type = mapped_file
	            name = "bitsproxy.dll"
	        filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll")

Region:
	              id = 2512
	        start_va = 0x7ffd9d000000
	          end_va = 0x7ffd9d00ffff
	       monitored = 0
	     entry_point = 0x7ffd9d001690
	     region_type = mapped_file
	            name = "wups.dll"
	        filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll")

Region:
	              id = 2513
	        start_va = 0x7ffd9d030000
	          end_va = 0x7ffd9d094fff
	       monitored = 0
	     entry_point = 0x7ffd9d043170
	     region_type = mapped_file
	            name = "wuuhext.dll"
	        filename = "\\Windows\\System32\\wuuhext.dll" (normalized: "c:\\windows\\system32\\wuuhext.dll")

Region:
	              id = 2514
	        start_va = 0x7ffd9d0a0000
	          end_va = 0x7ffd9d3d9fff
	       monitored = 0
	     entry_point = 0x7ffd9d0a8520
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll")

Region:
	              id = 2515
	        start_va = 0x7ffd9d3e0000
	          end_va = 0x7ffd9d463fff
	       monitored = 0
	     entry_point = 0x7ffd9d3f2830
	     region_type = mapped_file
	            name = "winspool.drv"
	        filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv")

Region:
	              id = 2516
	        start_va = 0x7ffd9d4e0000
	          end_va = 0x7ffd9d7d8fff
	       monitored = 0
	     entry_point = 0x7ffd9d5a7280
	     region_type = mapped_file
	            name = "esent.dll"
	        filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll")

Region:
	              id = 2517
	        start_va = 0x7ffd9da20000
	          end_va = 0x7ffd9da41fff
	       monitored = 0
	     entry_point = 0x7ffd9da32540
	     region_type = mapped_file
	            name = "updatepolicy.dll"
	        filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll")

Region:
	              id = 2518
	        start_va = 0x7ffd9da50000
	          end_va = 0x7ffd9db24fff
	       monitored = 0
	     entry_point = 0x7ffd9da6cf80
	     region_type = mapped_file
	            name = "wuapi.dll"
	        filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll")

Region:
	              id = 2519
	        start_va = 0x7ffd9e610000
	          end_va = 0x7ffd9e61ffff
	       monitored = 0
	     entry_point = 0x7ffd9e611700
	     region_type = mapped_file
	            name = "proximityservicepal.dll"
	        filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll")

Region:
	              id = 2520
	        start_va = 0x7ffd9e620000
	          end_va = 0x7ffd9e628fff
	       monitored = 0
	     entry_point = 0x7ffd9e621ed0
	     region_type = mapped_file
	            name = "proximitycommonpal.dll"
	        filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll")

Region:
	              id = 2521
	        start_va = 0x7ffd9e630000
	          end_va = 0x7ffd9e65cfff
	       monitored = 0
	     entry_point = 0x7ffd9e632290
	     region_type = mapped_file
	            name = "proximitycommon.dll"
	        filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll")

Region:
	              id = 2522
	        start_va = 0x7ffd9e660000
	          end_va = 0x7ffd9e6b1fff
	       monitored = 0
	     entry_point = 0x7ffd9e6638e0
	     region_type = mapped_file
	            name = "proximityservice.dll"
	        filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll")

Region:
	              id = 2523
	        start_va = 0x7ffd9ece0000
	          end_va = 0x7ffd9ece9fff
	       monitored = 0
	     entry_point = 0x7ffd9ece14c0
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 2524
	        start_va = 0x7ffd9f020000
	          end_va = 0x7ffd9f031fff
	       monitored = 0
	     entry_point = 0x7ffd9f023580
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 2525
	        start_va = 0x7ffd9f1b0000
	          end_va = 0x7ffd9f1c4fff
	       monitored = 0
	     entry_point = 0x7ffd9f1b2dc0
	     region_type = mapped_file
	            name = "ondemandconnroutehelper.dll"
	        filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll")

Region:
	              id = 2526
	        start_va = 0x7ffd9f1d0000
	          end_va = 0x7ffd9f1e2fff
	       monitored = 0
	     entry_point = 0x7ffd9f1d1b10
	     region_type = mapped_file
	            name = "devrtl.dll"
	        filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll")

Region:
	              id = 2527
	        start_va = 0x7ffd9f1f0000
	          end_va = 0x7ffd9f28ffff
	       monitored = 0
	     entry_point = 0x7ffd9f260910
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll")

Region:
	              id = 2528
	        start_va = 0x7ffd9f290000
	          end_va = 0x7ffd9f2b5fff
	       monitored = 0
	     entry_point = 0x7ffd9f2a9020
	     region_type = mapped_file
	            name = "devicemetadataretrievalclient.dll"
	        filename = "\\Windows\\System32\\DeviceMetadataRetrievalClient.dll" (normalized: "c:\\windows\\system32\\devicemetadataretrievalclient.dll")

Region:
	              id = 2529
	        start_va = 0x7ffd9f2d0000
	          end_va = 0x7ffd9f2e6fff
	       monitored = 0
	     entry_point = 0x7ffd9f2d7520
	     region_type = mapped_file
	            name = "usoapi.dll"
	        filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll")

Region:
	              id = 2530
	        start_va = 0x7ffd9f2f0000
	          end_va = 0x7ffd9f307fff
	       monitored = 0
	     entry_point = 0x7ffd9f2fb850
	     region_type = mapped_file
	            name = "dmcmnutils.dll"
	        filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll")

Region:
	              id = 2531
	        start_va = 0x7ffd9f380000
	          end_va = 0x7ffd9f390fff
	       monitored = 0
	     entry_point = 0x7ffd9f3828d0
	     region_type = mapped_file
	            name = "credentialmigrationhandler.dll"
	        filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll")

Region:
	              id = 2532
	        start_va = 0x7ffd9f460000
	          end_va = 0x7ffd9f56efff
	       monitored = 0
	     entry_point = 0x7ffd9f49c010
	     region_type = mapped_file
	            name = "dosvc.dll"
	        filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll")

Region:
	              id = 2533
	        start_va = 0x7ffd9f940000
	          end_va = 0x7ffd9fa5cfff
	       monitored = 0
	     entry_point = 0x7ffd9f96fe60
	     region_type = mapped_file
	            name = "qmgr.dll"
	        filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll")

Region:
	              id = 2534
	        start_va = 0x7ffd9fdf0000
	          end_va = 0x7ffd9fe0cfff
	       monitored = 0
	     entry_point = 0x7ffd9fdf4f60
	     region_type = mapped_file
	            name = "appinfo.dll"
	        filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll")

Region:
	              id = 2535
	        start_va = 0x7ffd9fe10000
	          end_va = 0x7ffd9fe76fff
	       monitored = 0
	     entry_point = 0x7ffd9fe1b160
	     region_type = mapped_file
	            name = "upnp.dll"
	        filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll")

Region:
	              id = 2536
	        start_va = 0x7ffd9fe80000
	          end_va = 0x7ffd9fe93fff
	       monitored = 0
	     entry_point = 0x7ffd9fe82a00
	     region_type = mapped_file
	            name = "bitsigd.dll"
	        filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll")

Region:
	              id = 2537
	        start_va = 0x7ffda0120000
	          end_va = 0x7ffda012cfff
	       monitored = 0
	     entry_point = 0x7ffda0125020
	     region_type = mapped_file
	            name = "devicedriverretrievalclient.dll"
	        filename = "\\Windows\\System32\\DeviceDriverRetrievalClient.dll" (normalized: "c:\\windows\\system32\\devicedriverretrievalclient.dll")

Region:
	              id = 2538
	        start_va = 0x7ffda0130000
	          end_va = 0x7ffda0153fff
	       monitored = 0
	     entry_point = 0x7ffda0146390
	     region_type = mapped_file
	            name = "devpropmgr.dll"
	        filename = "\\Windows\\System32\\DevPropMgr.dll" (normalized: "c:\\windows\\system32\\devpropmgr.dll")

Region:
	              id = 2539
	        start_va = 0x7ffda0160000
	          end_va = 0x7ffda01f9fff
	       monitored = 0
	     entry_point = 0x7ffda017ada0
	     region_type = mapped_file
	            name = "shsvcs.dll"
	        filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll")

Region:
	              id = 2540
	        start_va = 0x7ffda02f0000
	          end_va = 0x7ffda02fdfff
	       monitored = 0
	     entry_point = 0x7ffda02f1460
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 2541
	        start_va = 0x7ffda0310000
	          end_va = 0x7ffda0376fff
	       monitored = 0
	     entry_point = 0x7ffda03163e0
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 2542
	        start_va = 0x7ffda0530000
	          end_va = 0x7ffda05effff
	       monitored = 0
	     entry_point = 0x7ffda055fd20
	     region_type = mapped_file
	            name = "fveapi.dll"
	        filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll")

Region:
	              id = 2543
	        start_va = 0x7ffda07a0000
	          end_va = 0x7ffda084dfff
	       monitored = 0
	     entry_point = 0x7ffda07b80c0
	     region_type = mapped_file
	            name = "windows.networking.connectivity.dll"
	        filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll")

Region:
	              id = 2544
	        start_va = 0x7ffda0850000
	          end_va = 0x7ffda0861fff
	       monitored = 0
	     entry_point = 0x7ffda0859260
	     region_type = mapped_file
	            name = "rilproxy.dll"
	        filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll")

Region:
	              id = 2545
	        start_va = 0x7ffda0870000
	          end_va = 0x7ffda0920fff
	       monitored = 0
	     entry_point = 0x7ffda08e88b0
	     region_type = mapped_file
	            name = "cellularapi.dll"
	        filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll")

Region:
	              id = 2546
	        start_va = 0x7ffda0930000
	          end_va = 0x7ffda0954fff
	       monitored = 0
	     entry_point = 0x7ffda0942f20
	     region_type = mapped_file
	            name = "wificonnapi.dll"
	        filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll")

Region:
	              id = 2547
	        start_va = 0x7ffda0960000
	          end_va = 0x7ffda0970fff
	       monitored = 0
	     entry_point = 0x7ffda0967ea0
	     region_type = mapped_file
	            name = "dcpapi.dll"
	        filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll")

Region:
	              id = 2548
	        start_va = 0x7ffda0980000
	          end_va = 0x7ffda0999fff
	       monitored = 0
	     entry_point = 0x7ffda0982cf0
	     region_type = mapped_file
	            name = "locationpelegacywinlocation.dll"
	        filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll")

Region:
	              id = 2549
	        start_va = 0x7ffda09a0000
	          end_va = 0x7ffda09abfff
	       monitored = 0
	     entry_point = 0x7ffda09a14d0
	     region_type = mapped_file
	            name = "locationframeworkps.dll"
	        filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll")

Region:
	              id = 2550
	        start_va = 0x7ffda09b0000
	          end_va = 0x7ffda09c4fff
	       monitored = 0
	     entry_point = 0x7ffda09b3460
	     region_type = mapped_file
	            name = "ssdpapi.dll"
	        filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll")

Region:
	              id = 2551
	        start_va = 0x7ffda0aa0000
	          end_va = 0x7ffda0af4fff
	       monitored = 0
	     entry_point = 0x7ffda0aa3fb0
	     region_type = mapped_file
	            name = "policymanager.dll"
	        filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll")

Region:
	              id = 2552
	        start_va = 0x7ffda0b00000
	          end_va = 0x7ffda0b36fff
	       monitored = 0
	     entry_point = 0x7ffda0b06020
	     region_type = mapped_file
	            name = "gnssadapter.dll"
	        filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll")

Region:
	              id = 2553
	        start_va = 0x7ffda0b40000
	          end_va = 0x7ffda0b5ffff
	       monitored = 0
	     entry_point = 0x7ffda0b439a0
	     region_type = mapped_file
	            name = "locationwinpalmisc.dll"
	        filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll")

Region:
	              id = 2554
	        start_va = 0x7ffda0b60000
	          end_va = 0x7ffda0ba0fff
	       monitored = 0
	     entry_point = 0x7ffda0b64840
	     region_type = mapped_file
	            name = "usermgrproxy.dll"
	        filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll")

Region:
	              id = 2555
	        start_va = 0x7ffda0bd0000
	          end_va = 0x7ffda0bd7fff
	       monitored = 0
	     entry_point = 0x7ffda0bd13b0
	     region_type = mapped_file
	            name = "dmiso8601utils.dll"
	        filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll")

Region:
	              id = 2556
	        start_va = 0x7ffda0d10000
	          end_va = 0x7ffda0d23fff
	       monitored = 0
	     entry_point = 0x7ffda0d12d50
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 2557
	        start_va = 0x7ffda0d70000
	          end_va = 0x7ffda0d8efff
	       monitored = 0
	     entry_point = 0x7ffda0d74960
	     region_type = mapped_file
	            name = "ncprov.dll"
	        filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll")

Region:
	              id = 2558
	        start_va = 0x7ffda0de0000
	          end_va = 0x7ffda0df7fff
	       monitored = 0
	     entry_point = 0x7ffda0de1b10
	     region_type = mapped_file
	            name = "locationframeworkinternalps.dll"
	        filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll")

Region:
	              id = 2559
	        start_va = 0x7ffda1010000
	          end_va = 0x7ffda10a2fff
	       monitored = 0
	     entry_point = 0x7ffda1019680
	     region_type = mapped_file
	            name = "msvcp_win.dll"
	        filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")

Region:
	              id = 2560
	        start_va = 0x7ffda11c0000
	          end_va = 0x7ffda11d8fff
	       monitored = 0
	     entry_point = 0x7ffda11c4520
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 2561
	        start_va = 0x7ffda1290000
	          end_va = 0x7ffda1357fff
	       monitored = 0
	     entry_point = 0x7ffda12d13f0
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 2562
	        start_va = 0x7ffda1360000
	          end_va = 0x7ffda13c0fff
	       monitored = 0
	     entry_point = 0x7ffda1364b50
	     region_type = mapped_file
	            name = "wlanapi.dll"
	        filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll")

Region:
	              id = 2563
	        start_va = 0x7ffda13d0000
	          end_va = 0x7ffda154bfff
	       monitored = 0
	     entry_point = 0x7ffda1421650
	     region_type = mapped_file
	            name = "locationframework.dll"
	        filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll")

Region:
	              id = 2564
	        start_va = 0x7ffda1550000
	          end_va = 0x7ffda155afff
	       monitored = 0
	     entry_point = 0x7ffda1551770
	     region_type = mapped_file
	            name = "lfsvc.dll"
	        filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll")

Region:
	              id = 2565
	        start_va = 0x7ffda1560000
	          end_va = 0x7ffda158dfff
	       monitored = 0
	     entry_point = 0x7ffda1567550
	     region_type = mapped_file
	            name = "netjoin.dll"
	        filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll")

Region:
	              id = 2566
	        start_va = 0x7ffda1590000
	          end_va = 0x7ffda15a6fff
	       monitored = 0
	     entry_point = 0x7ffda1595630
	     region_type = mapped_file
	            name = "sens.dll"
	        filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll")

Region:
	              id = 2567
	        start_va = 0x7ffda1790000
	          end_va = 0x7ffda17a9fff
	       monitored = 0
	     entry_point = 0x7ffda1792430
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 2568
	        start_va = 0x7ffda17b0000
	          end_va = 0x7ffda17c5fff
	       monitored = 0
	     entry_point = 0x7ffda17b19f0
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 2569
	        start_va = 0x7ffda17d0000
	          end_va = 0x7ffda1807fff
	       monitored = 0
	     entry_point = 0x7ffda17e8cc0
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 2570
	        start_va = 0x7ffda1810000
	          end_va = 0x7ffda181afff
	       monitored = 0
	     entry_point = 0x7ffda1811d30
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 2571
	        start_va = 0x7ffda1820000
	          end_va = 0x7ffda182cfff
	       monitored = 0
	     entry_point = 0x7ffda1822ca0
	     region_type = mapped_file
	            name = "csystemeventsbrokerclient.dll"
	        filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll")

Region:
	              id = 2572
	        start_va = 0x7ffda1830000
	          end_va = 0x7ffda185efff
	       monitored = 0
	     entry_point = 0x7ffda1838910
	     region_type = mapped_file
	            name = "wptaskscheduler.dll"
	        filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll")

Region:
	              id = 2573
	        start_va = 0x7ffda18b0000
	          end_va = 0x7ffda18c5fff
	       monitored = 0
	     entry_point = 0x7ffda18b1b60
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 2574
	        start_va = 0x7ffda1930000
	          end_va = 0x7ffda1a15fff
	       monitored = 0
	     entry_point = 0x7ffda194cf10
	     region_type = mapped_file
	            name = "usermgr.dll"
	        filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll")

Region:
	              id = 2575
	        start_va = 0x7ffda1a20000
	          end_va = 0x7ffda1a99fff
	       monitored = 0
	     entry_point = 0x7ffda1a47630
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 2576
	        start_va = 0x7ffda1aa0000
	          end_va = 0x7ffda1aaafff
	       monitored = 0
	     entry_point = 0x7ffda1aa1de0
	     region_type = mapped_file
	            name = "bitsperf.dll"
	        filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll")

Region:
	              id = 2577
	        start_va = 0x7ffda1cd0000
	          end_va = 0x7ffda1d3dfff
	       monitored = 0
	     entry_point = 0x7ffda1cd7f60
	     region_type = mapped_file
	            name = "taskcomp.dll"
	        filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll")

Region:
	              id = 2578
	        start_va = 0x7ffda1d80000
	          end_va = 0x7ffda1e11fff
	       monitored = 0
	     entry_point = 0x7ffda1dca780
	     region_type = mapped_file
	            name = "msvcp110_win.dll"
	        filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll")

Region:
	              id = 2579
	        start_va = 0x7ffda1ea0000
	          end_va = 0x7ffda1eb0fff
	       monitored = 0
	     entry_point = 0x7ffda1ea3320
	     region_type = mapped_file
	            name = "wmiclnt.dll"
	        filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll")

Region:
	              id = 2580
	        start_va = 0x7ffda22b0000
	          end_va = 0x7ffda22f0fff
	       monitored = 0
	     entry_point = 0x7ffda22c7eb0
	     region_type = mapped_file
	            name = "ubpm.dll"
	        filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll")

Region:
	              id = 2581
	        start_va = 0x7ffda2300000
	          end_va = 0x7ffda23fbfff
	       monitored = 0
	     entry_point = 0x7ffda2336df0
	     region_type = mapped_file
	            name = "schedsvc.dll"
	        filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll")

Region:
	              id = 2582
	        start_va = 0x7ffda25e0000
	          end_va = 0x7ffda2961fff
	       monitored = 0
	     entry_point = 0x7ffda2631220
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 2583
	        start_va = 0x7ffda2970000
	          end_va = 0x7ffda2aa5fff
	       monitored = 0
	     entry_point = 0x7ffda299f350
	     region_type = mapped_file
	            name = "wintypes.dll"
	        filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll")

Region:
	              id = 2584
	        start_va = 0x7ffda3ba0000
	          end_va = 0x7ffda3cadfff
	       monitored = 0
	     entry_point = 0x7ffda3beeaa0
	     region_type = mapped_file
	            name = "mrmcorer.dll"
	        filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll")

Region:
	              id = 2585
	        start_va = 0x7ffda3fb0000
	          end_va = 0x7ffda3fbffff
	       monitored = 0
	     entry_point = 0x7ffda3fb2c60
	     region_type = mapped_file
	            name = "usermgrcli.dll"
	        filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll")

Region:
	              id = 2586
	        start_va = 0x7ffda3fc0000
	          end_va = 0x7ffda3fd2fff
	       monitored = 0
	     entry_point = 0x7ffda3fc57f0
	     region_type = mapped_file
	            name = "themeservice.dll"
	        filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll")

Region:
	              id = 2587
	        start_va = 0x7ffda3fe0000
	          end_va = 0x7ffda401dfff
	       monitored = 0
	     entry_point = 0x7ffda3fea050
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 2588
	        start_va = 0x7ffda4020000
	          end_va = 0x7ffda4046fff
	       monitored = 0
	     entry_point = 0x7ffda4023bf0
	     region_type = mapped_file
	            name = "profsvcext.dll"
	        filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll")

Region:
	              id = 2589
	        start_va = 0x7ffda4050000
	          end_va = 0x7ffda405bfff
	       monitored = 0
	     entry_point = 0x7ffda4052830
	     region_type = mapped_file
	            name = "bi.dll"
	        filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll")

Region:
	              id = 2590
	        start_va = 0x7ffda4060000
	          end_va = 0x7ffda40b4fff
	       monitored = 0
	     entry_point = 0x7ffda406fc00
	     region_type = mapped_file
	            name = "profsvc.dll"
	        filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll")

Region:
	              id = 2591
	        start_va = 0x7ffda40c0000
	          end_va = 0x7ffda4123fff
	       monitored = 0
	     entry_point = 0x7ffda40d5ae0
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 2592
	        start_va = 0x7ffda42f0000
	          end_va = 0x7ffda43aefff
	       monitored = 0
	     entry_point = 0x7ffda4311c50
	     region_type = mapped_file
	            name = "taskschd.dll"
	        filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll")

Region:
	              id = 2593
	        start_va = 0x7ffda43b0000
	          end_va = 0x7ffda43effff
	       monitored = 0
	     entry_point = 0x7ffda43c6c60
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 2594
	        start_va = 0x7ffda43f0000
	          end_va = 0x7ffda4418fff
	       monitored = 0
	     entry_point = 0x7ffda43fca00
	     region_type = mapped_file
	            name = "cabinet.dll"
	        filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll")

Region:
	              id = 2595
	        start_va = 0x7ffda4420000
	          end_va = 0x7ffda4455fff
	       monitored = 0
	     entry_point = 0x7ffda4430070
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 2596
	        start_va = 0x7ffda4d20000
	          end_va = 0x7ffda4d29fff
	       monitored = 0
	     entry_point = 0x7ffda4d21660
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 2597
	        start_va = 0x7ffda4d30000
	          end_va = 0x7ffda4d47fff
	       monitored = 0
	     entry_point = 0x7ffda4d35910
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 2598
	        start_va = 0x7ffda4d50000
	          end_va = 0x7ffda4e9cfff
	       monitored = 0
	     entry_point = 0x7ffda4d93da0
	     region_type = mapped_file
	            name = "gpsvc.dll"
	        filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll")

Region:
	              id = 2599
	        start_va = 0x7ffda5930000
	          end_va = 0x7ffda59a8fff
	       monitored = 0
	     entry_point = 0x7ffda594fb90
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")

Region:
	              id = 2600
	        start_va = 0x7ffda5b60000
	          end_va = 0x7ffda5ff2fff
	       monitored = 0
	     entry_point = 0x7ffda5b6f760
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 2601
	        start_va = 0x7ffda6000000
	          end_va = 0x7ffda6066fff
	       monitored = 0
	     entry_point = 0x7ffda601e710
	     region_type = mapped_file
	            name = "bcp47langs.dll"
	        filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll")

Region:
	              id = 2602
	        start_va = 0x7ffda60c0000
	          end_va = 0x7ffda60c7fff
	       monitored = 0
	     entry_point = 0x7ffda60c13e0
	     region_type = mapped_file
	            name = "dabapi.dll"
	        filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll")

Region:
	              id = 2603
	        start_va = 0x7ffda6100000
	          end_va = 0x7ffda6285fff
	       monitored = 0
	     entry_point = 0x7ffda614d700
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 2604
	        start_va = 0x7ffda6290000
	          end_va = 0x7ffda62abfff
	       monitored = 0
	     entry_point = 0x7ffda62937a0
	     region_type = mapped_file
	            name = "samlib.dll"
	        filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll")

Region:
	              id = 2605
	        start_va = 0x7ffda62f0000
	          end_va = 0x7ffda6302fff
	       monitored = 0
	     entry_point = 0x7ffda62f2760
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 2606
	        start_va = 0x7ffda6460000
	          end_va = 0x7ffda649ffff
	       monitored = 0
	     entry_point = 0x7ffda6471960
	     region_type = mapped_file
	            name = "brokerlib.dll"
	        filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll")

Region:
	              id = 2607
	        start_va = 0x7ffda6530000
	          end_va = 0x7ffda65c5fff
	       monitored = 0
	     entry_point = 0x7ffda6555570
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 2608
	        start_va = 0x7ffda65d0000
	          end_va = 0x7ffda65f6fff
	       monitored = 0
	     entry_point = 0x7ffda65d7940
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 2609
	        start_va = 0x7ffda6620000
	          end_va = 0x7ffda66c9fff
	       monitored = 0
	     entry_point = 0x7ffda6647910
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 2610
	        start_va = 0x7ffda66d0000
	          end_va = 0x7ffda67cffff
	       monitored = 0
	     entry_point = 0x7ffda6710f80
	     region_type = mapped_file
	            name = "twinapi.appcore.dll"
	        filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll")

Region:
	              id = 2611
	        start_va = 0x7ffda6860000
	          end_va = 0x7ffda686bfff
	       monitored = 0
	     entry_point = 0x7ffda6862480
	     region_type = mapped_file
	            name = "sysntfy.dll"
	        filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll")

Region:
	              id = 2612
	        start_va = 0x7ffda6a30000
	          end_va = 0x7ffda6a61fff
	       monitored = 0
	     entry_point = 0x7ffda6a42340
	     region_type = mapped_file
	            name = "fwbase.dll"
	        filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll")

Region:
	              id = 2613
	        start_va = 0x7ffda6ba0000
	          end_va = 0x7ffda6babfff
	       monitored = 0
	     entry_point = 0x7ffda6ba2790
	     region_type = mapped_file
	            name = "hid.dll"
	        filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll")

Region:
	              id = 2614
	        start_va = 0x7ffda6bb0000
	          end_va = 0x7ffda6bd3fff
	       monitored = 0
	     entry_point = 0x7ffda6bb3260
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 2615
	        start_va = 0x7ffda6d50000
	          end_va = 0x7ffda6e43fff
	       monitored = 0
	     entry_point = 0x7ffda6d5a960
	     region_type = mapped_file
	            name = "ucrtbase.dll"
	        filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")

Region:
	              id = 2616
	        start_va = 0x7ffda6ea0000
	          end_va = 0x7ffda6ee8fff
	       monitored = 0
	     entry_point = 0x7ffda6eaa090
	     region_type = mapped_file
	            name = "authz.dll"
	        filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll")

Region:
	              id = 2617
	        start_va = 0x7ffda6fc0000
	          end_va = 0x7ffda6fcbfff
	       monitored = 0
	     entry_point = 0x7ffda6fc27e0
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 2618
	        start_va = 0x7ffda70a0000
	          end_va = 0x7ffda70d0fff
	       monitored = 0
	     entry_point = 0x7ffda70a7d10
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2619
	        start_va = 0x7ffda7100000
	          end_va = 0x7ffda7179fff
	       monitored = 0
	     entry_point = 0x7ffda7121a50
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 2620
	        start_va = 0x7ffda71c0000
	          end_va = 0x7ffda71f3fff
	       monitored = 0
	     entry_point = 0x7ffda71dae70
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2621
	        start_va = 0x7ffda7200000
	          end_va = 0x7ffda7209fff
	       monitored = 0
	     entry_point = 0x7ffda7201830
	     region_type = mapped_file
	            name = "dpapi.dll"
	        filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll")

Region:
	              id = 2622
	        start_va = 0x7ffda7310000
	          end_va = 0x7ffda732efff
	       monitored = 0
	     entry_point = 0x7ffda7315d30
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 2623
	        start_va = 0x7ffda7480000
	          end_va = 0x7ffda74dbfff
	       monitored = 0
	     entry_point = 0x7ffda7496f70
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 2624
	        start_va = 0x7ffda7530000
	          end_va = 0x7ffda7546fff
	       monitored = 0
	     entry_point = 0x7ffda75379d0
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2625
	        start_va = 0x7ffda7650000
	          end_va = 0x7ffda765afff
	       monitored = 0
	     entry_point = 0x7ffda76519a0
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2626
	        start_va = 0x7ffda7690000
	          end_va = 0x7ffda76b0fff
	       monitored = 0
	     entry_point = 0x7ffda76a0250
	     region_type = mapped_file
	            name = "joinutil.dll"
	        filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll")

Region:
	              id = 2627
	        start_va = 0x7ffda76e0000
	          end_va = 0x7ffda7719fff
	       monitored = 0
	     entry_point = 0x7ffda76e8d20
	     region_type = mapped_file
	            name = "ntasn1.dll"
	        filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll")

Region:
	              id = 2628
	        start_va = 0x7ffda7720000
	          end_va = 0x7ffda7746fff
	       monitored = 0
	     entry_point = 0x7ffda7730aa0
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll")

Region:
	              id = 2629
	        start_va = 0x7ffda7830000
	          end_va = 0x7ffda785cfff
	       monitored = 0
	     entry_point = 0x7ffda7849d40
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2630
	        start_va = 0x7ffda79c0000
	          end_va = 0x7ffda7a15fff
	       monitored = 0
	     entry_point = 0x7ffda79d0bf0
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 2631
	        start_va = 0x7ffda7a20000
	          end_va = 0x7ffda7a38fff
	       monitored = 0
	     entry_point = 0x7ffda7a25e10
	     region_type = mapped_file
	            name = "eventaggregation.dll"
	        filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll")

Region:
	              id = 2632
	        start_va = 0x7ffda7a40000
	          end_va = 0x7ffda7a68fff
	       monitored = 0
	     entry_point = 0x7ffda7a54530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 2633
	        start_va = 0x7ffda7a70000
	          end_va = 0x7ffda7b08fff
	       monitored = 0
	     entry_point = 0x7ffda7a9f4e0
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 2634
	        start_va = 0x7ffda7bb0000
	          end_va = 0x7ffda7bfafff
	       monitored = 0
	     entry_point = 0x7ffda7bb35f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 2635
	        start_va = 0x7ffda7c00000
	          end_va = 0x7ffda7c0efff
	       monitored = 0
	     entry_point = 0x7ffda7c03210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 2636
	        start_va = 0x7ffda7c10000
	          end_va = 0x7ffda7c23fff
	       monitored = 0
	     entry_point = 0x7ffda7c152e0
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 2637
	        start_va = 0x7ffda7c30000
	          end_va = 0x7ffda7c3ffff
	       monitored = 0
	     entry_point = 0x7ffda7c356e0
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2638
	        start_va = 0x7ffda7c40000
	          end_va = 0x7ffda7cc5fff
	       monitored = 0
	     entry_point = 0x7ffda7c4d8f0
	     region_type = mapped_file
	            name = "firewallapi.dll"
	        filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll")

Region:
	              id = 2639
	        start_va = 0x7ffda7cd0000
	          end_va = 0x7ffda7d39fff
	       monitored = 0
	     entry_point = 0x7ffda7d06d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 2640
	        start_va = 0x7ffda7d40000
	          end_va = 0x7ffda7f27fff
	       monitored = 0
	     entry_point = 0x7ffda7d6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2641
	        start_va = 0x7ffda7f30000
	          end_va = 0x7ffda80f6fff
	       monitored = 0
	     entry_point = 0x7ffda7f8db80
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2642
	        start_va = 0x7ffda8100000
	          end_va = 0x7ffda8142fff
	       monitored = 0
	     entry_point = 0x7ffda8114b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2643
	        start_va = 0x7ffda8150000
	          end_va = 0x7ffda81a4fff
	       monitored = 0
	     entry_point = 0x7ffda8167970
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 2644
	        start_va = 0x7ffda8260000
	          end_va = 0x7ffda8314fff
	       monitored = 0
	     entry_point = 0x7ffda82a22e0
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll")

Region:
	              id = 2645
	        start_va = 0x7ffda8320000
	          end_va = 0x7ffda8963fff
	       monitored = 0
	     entry_point = 0x7ffda84e64b0
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll")

Region:
	              id = 2646
	        start_va = 0x7ffda8970000
	          end_va = 0x7ffda8986fff
	       monitored = 0
	     entry_point = 0x7ffda8971390
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 2647
	        start_va = 0x7ffda8990000
	          end_va = 0x7ffda89ebfff
	       monitored = 0
	     entry_point = 0x7ffda89ab720
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2648
	        start_va = 0x7ffda8a30000
	          end_va = 0x7ffda8adcfff
	       monitored = 0
	     entry_point = 0x7ffda8a481a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2649
	        start_va = 0x7ffda8ae0000
	          end_va = 0x7ffda8b86fff
	       monitored = 0
	     entry_point = 0x7ffda8aeb4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2650
	        start_va = 0x7ffda8b90000
	          end_va = 0x7ffda8b97fff
	       monitored = 0
	     entry_point = 0x7ffda8b91ea0
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2651
	        start_va = 0x7ffda8ba0000
	          end_va = 0x7ffda8cbbfff
	       monitored = 0
	     entry_point = 0x7ffda8be02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2652
	        start_va = 0x7ffda8cc0000
	          end_va = 0x7ffda8d80fff
	       monitored = 0
	     entry_point = 0x7ffda8ce0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2653
	        start_va = 0x7ffda8ea0000
	          end_va = 0x7ffda8ff5fff
	       monitored = 0
	     entry_point = 0x7ffda8eaa8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2654
	        start_va = 0x7ffda9000000
	          end_va = 0x7ffda927cfff
	       monitored = 0
	     entry_point = 0x7ffda90d4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 2655
	        start_va = 0x7ffda9280000
	          end_va = 0x7ffda96a8fff
	       monitored = 0
	     entry_point = 0x7ffda92a8740
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 2656
	        start_va = 0x7ffda96b0000
	          end_va = 0x7ffda97f2fff
	       monitored = 0
	     entry_point = 0x7ffda96d8210
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2657
	        start_va = 0x7ffda9800000
	          end_va = 0x7ffda986afff
	       monitored = 0
	     entry_point = 0x7ffda98190c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2658
	        start_va = 0x7ffda9870000
	          end_va = 0x7ffdaadcefff
	       monitored = 0
	     entry_point = 0x7ffda99d11f0
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 2659
	        start_va = 0x7ffdaadd0000
	          end_va = 0x7ffdaae21fff
	       monitored = 0
	     entry_point = 0x7ffdaaddf530
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2660
	        start_va = 0x7ffdaae30000
	          end_va = 0x7ffdaaeccfff
	       monitored = 0
	     entry_point = 0x7ffdaae378a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2661
	        start_va = 0x7ffdaaee0000
	          end_va = 0x7ffdaaf86fff
	       monitored = 0
	     entry_point = 0x7ffdaaef58d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2662
	        start_va = 0x7ffdab030000
	          end_va = 0x7ffdab08afff
	       monitored = 0
	     entry_point = 0x7ffdab0438b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2663
	        start_va = 0x7ffdab400000
	          end_va = 0x7ffdab585fff
	       monitored = 0
	     entry_point = 0x7ffdab44ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2664
	        start_va = 0x7ffdab590000
	          end_va = 0x7ffdab750fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2668
	        start_va = 0x7820000
	          end_va = 0x791ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007820000"
	        filename = ""

Region:
	              id = 2669
	        start_va = 0x7100000
	          end_va = 0x710ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2670
	        start_va = 0x7920000
	          end_va = 0x7a1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007920000"
	        filename = ""

Region:
	              id = 2671
	        start_va = 0x7110000
	          end_va = 0x711ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2672
	        start_va = 0x7a20000
	          end_va = 0x7b1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007a20000"
	        filename = ""

Region:
	              id = 2673
	        start_va = 0x7c20000
	          end_va = 0x7d1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007c20000"
	        filename = ""

Region:
	              id = 2674
	        start_va = 0x7f20000
	          end_va = 0x801ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007f20000"
	        filename = ""

Region:
	              id = 2675
	        start_va = 0x8020000
	          end_va = 0x811ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008020000"
	        filename = ""

Region:
	              id = 2791
	        start_va = 0x3590000
	          end_va = 0x3592fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003590000"
	        filename = ""

Region:
	              id = 2792
	        start_va = 0x3590000
	          end_va = 0x3597fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003590000"
	        filename = ""

Region:
	              id = 2795
	        start_va = 0x3590000
	          end_va = 0x3595fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003590000"
	        filename = ""

Region:
	              id = 2796
	        start_va = 0x3590000
	          end_va = 0x359ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2797
	        start_va = 0x35a0000
	          end_va = 0x35affff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2798
	        start_va = 0x35b0000
	          end_va = 0x35bffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2799
	        start_va = 0x35c0000
	          end_va = 0x35cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2884
	        start_va = 0x35d0000
	          end_va = 0x35d4fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000035d0000"
	        filename = ""

Region:
	              id = 2924
	        start_va = 0x35d0000
	          end_va = 0x35dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2925
	        start_va = 0x35e0000
	          end_va = 0x35effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2928
	        start_va = 0x35f0000
	          end_va = 0x35f2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000035f0000"
	        filename = ""

Region:
	              id = 2937
	        start_va = 0x35f0000
	          end_va = 0x35fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2938
	        start_va = 0x3600000
	          end_va = 0x360ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2939
	        start_va = 0x38f0000
	          end_va = 0x38fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2940
	        start_va = 0x3a00000
	          end_va = 0x3a0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2941
	        start_va = 0x4d00000
	          end_va = 0x4d0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2948
	        start_va = 0x8120000
	          end_va = 0x821ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008120000"
	        filename = ""

Region:
	              id = 2949
	        start_va = 0x4d10000
	          end_va = 0x4d13fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004d10000"
	        filename = ""

Region:
	              id = 2950
	        start_va = 0x4d10000
	          end_va = 0x4d14fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004d10000"
	        filename = ""

Region:
	              id = 2965
	        start_va = 0x4d10000
	          end_va = 0x4d1ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2966
	        start_va = 0x4d30000
	          end_va = 0x4d3ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2967
	        start_va = 0x4d40000
	          end_va = 0x4d4ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2968
	        start_va = 0x4d50000
	          end_va = 0x4d5ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2969
	        start_va = 0x4d60000
	          end_va = 0x4d6ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2970
	        start_va = 0x4ea0000
	          end_va = 0x4eaffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2971
	        start_va = 0x5400000
	          end_va = 0x540ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2986
	        start_va = 0x5410000
	          end_va = 0x541ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2987
	        start_va = 0x54a0000
	          end_va = 0x54affff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2988
	        start_va = 0x54b0000
	          end_va = 0x54bffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2989
	        start_va = 0x54c0000
	          end_va = 0x54cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2990
	        start_va = 0x54d0000
	          end_va = 0x54dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2991
	        start_va = 0x54e0000
	          end_va = 0x54effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2992
	        start_va = 0x54f0000
	          end_va = 0x54fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2993
	        start_va = 0x5610000
	          end_va = 0x561ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2994
	        start_va = 0x56e0000
	          end_va = 0x56effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2995
	        start_va = 0x5a40000
	          end_va = 0x5a4ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2996
	        start_va = 0x5c00000
	          end_va = 0x5c0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2997
	        start_va = 0x5d00000
	          end_va = 0x5d0ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2998
	        start_va = 0x60b0000
	          end_va = 0x60bffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 2999
	        start_va = 0x60c0000
	          end_va = 0x60cffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3000
	        start_va = 0x60d0000
	          end_va = 0x60dffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3004
	        start_va = 0x60e0000
	          end_va = 0x60effff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3005
	        start_va = 0x60f0000
	          end_va = 0x60fffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3006
	        start_va = 0x6100000
	          end_va = 0x610ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3007
	        start_va = 0x6810000
	          end_va = 0x681ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3008
	        start_va = 0x6880000
	          end_va = 0x688ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3009
	        start_va = 0x6d60000
	          end_va = 0x6d6ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3010
	        start_va = 0x6d70000
	          end_va = 0x6d7ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3011
	        start_va = 0x6d80000
	          end_va = 0x6d8ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3012
	        start_va = 0x6d90000
	          end_va = 0x6d9ffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3013
	        start_va = 0x6da0000
	          end_va = 0x6daffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3014
	        start_va = 0x6db0000
	          end_va = 0x6dbffff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 3015
	        start_va = 0x7ffd9f0b0000
	          end_va = 0x7ffd9f0cafff
	       monitored = 0
	     entry_point = 0x7ffd9f0b1040
	     region_type = mapped_file
	            name = "mpr.dll"
	        filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll")

Region:
	              id = 3016
	        start_va = 0x7170000
	          end_va = 0x71effff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007170000"
	        filename = ""

Region:
	              id = 3017
	        start_va = 0x6dc0000
	          end_va = 0x6dc1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006dc0000"
	        filename = ""

Region:
	              id = 3018
	        start_va = 0x6dd0000
	          end_va = 0x6dd1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006dd0000"
	        filename = ""

Region:
	              id = 3019
	        start_va = 0x7a20000
	          end_va = 0x7b1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007a20000"
	        filename = ""

Region:
	              id = 3020
	        start_va = 0x6dc0000
	          end_va = 0x6dc1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000006dc0000"
	        filename = ""

Region:
	              id = 3026
	        start_va = 0x5900000
	          end_va = 0x5900fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005900000"
	        filename = ""

Region:
	              id = 3027
	        start_va = 0x5900000
	          end_va = 0x5900fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000005900000"
	        filename = ""


Thread:
	id = 13
	os_tid = 0x630


Thread:
	id = 14
	os_tid = 0xe10


Thread:
	id = 15
	os_tid = 0x1308


Thread:
	id = 16
	os_tid = 0x1318


Thread:
	id = 17
	os_tid = 0xec8


Thread:
	id = 18
	os_tid = 0x8ec


Thread:
	id = 19
	os_tid = 0x13c


Thread:
	id = 20
	os_tid = 0x1354


Thread:
	id = 21
	os_tid = 0xbf0


Thread:
	id = 22
	os_tid = 0x1350


Thread:
	id = 23
	os_tid = 0x1084


Thread:
	id = 24
	os_tid = 0x414


Thread:
	id = 25
	os_tid = 0xfdc


Thread:
	id = 26
	os_tid = 0x99c


Thread:
	id = 27
	os_tid = 0x7b4


Thread:
	id = 28
	os_tid = 0x5d8


Thread:
	id = 29
	os_tid = 0x7b8


Thread:
	id = 30
	os_tid = 0xa94


Thread:
	id = 31
	os_tid = 0xa10


Thread:
	id = 32
	os_tid = 0x9e8


Thread:
	id = 33
	os_tid = 0xec4


Thread:
	id = 34
	os_tid = 0xe8


Thread:
	id = 35
	os_tid = 0xb6c


Thread:
	id = 36
	os_tid = 0xda8


Thread:
	id = 37
	os_tid = 0x650


Thread:
	id = 38
	os_tid = 0x904


Thread:
	id = 39
	os_tid = 0x234


Thread:
	id = 40
	os_tid = 0xf20


Thread:
	id = 41
	os_tid = 0xaf8


Thread:
	id = 42
	os_tid = 0xea0


Thread:
	id = 43
	os_tid = 0xc78


Thread:
	id = 44
	os_tid = 0xeb4


Thread:
	id = 45
	os_tid = 0xe00


Thread:
	id = 46
	os_tid = 0xa88


Thread:
	id = 47
	os_tid = 0x504


Thread:
	id = 48
	os_tid = 0xd6c


Thread:
	id = 49
	os_tid = 0x31c


Thread:
	id = 50
	os_tid = 0xc0c


Thread:
	id = 51
	os_tid = 0x318


Thread:
	id = 52
	os_tid = 0xd40


Thread:
	id = 53
	os_tid = 0xd00


Thread:
	id = 54
	os_tid = 0xcec


Thread:
	id = 55
	os_tid = 0xbb4


Thread:
	id = 56
	os_tid = 0xc20


Thread:
	id = 57
	os_tid = 0x874


Thread:
	id = 58
	os_tid = 0xffc


Thread:
	id = 59
	os_tid = 0xfd8


Thread:
	id = 60
	os_tid = 0xcac


Thread:
	id = 61
	os_tid = 0x6c4


Thread:
	id = 62
	os_tid = 0x8ac


Thread:
	id = 63
	os_tid = 0x8a4


Thread:
	id = 64
	os_tid = 0x8a0


Thread:
	id = 65
	os_tid = 0x878


Thread:
	id = 66
	os_tid = 0x860


Thread:
	id = 67
	os_tid = 0x858


Thread:
	id = 68
	os_tid = 0x854


Thread:
	id = 69
	os_tid = 0x814


Thread:
	id = 70
	os_tid = 0x808


Thread:
	id = 71
	os_tid = 0x500


Thread:
	id = 72
	os_tid = 0x554


Thread:
	id = 73
	os_tid = 0x4f4


Thread:
	id = 74
	os_tid = 0x520


Thread:
	id = 75
	os_tid = 0x524


Thread:
	id = 76
	os_tid = 0x774


Thread:
	id = 77
	os_tid = 0x460


Thread:
	id = 78
	os_tid = 0x574


Thread:
	id = 79
	os_tid = 0x4e8


Thread:
	id = 80
	os_tid = 0x760


Thread:
	id = 81
	os_tid = 0x718


Thread:
	id = 82
	os_tid = 0x6c0


Thread:
	id = 83
	os_tid = 0x618


Thread:
	id = 84
	os_tid = 0x608


Thread:
	id = 85
	os_tid = 0x59c


Thread:
	id = 86
	os_tid = 0x4fc


Thread:
	id = 87
	os_tid = 0x4bc


Thread:
	id = 88
	os_tid = 0x4a8


Thread:
	id = 89
	os_tid = 0x478


Thread:
	id = 90
	os_tid = 0x2e4


Thread:
	id = 91
	os_tid = 0x8


Thread:
	id = 92
	os_tid = 0x2f0


Thread:
	id = 93
	os_tid = 0x308


Thread:
	id = 94
	os_tid = 0x270


Thread:
	id = 95
	os_tid = 0x210


Thread:
	id = 96
	os_tid = 0x18c


Thread:
	id = 97
	os_tid = 0x140


Thread:
	id = 98
	os_tid = 0x3f4


Thread:
	id = 99
	os_tid = 0x3ec


Thread:
	id = 100
	os_tid = 0x3e4


Thread:
	id = 101
	os_tid = 0x368


Thread:
	id = 119
	os_tid = 0x688


Thread:
	id = 120
	os_tid = 0x6a0


Thread:
	id = 121
	os_tid = 0x684


Thread:
	id = 122
	os_tid = 0xd7c


Thread:
	id = 123
	os_tid = 0x768


Thread:
	id = 124
	os_tid = 0xd80


Thread:
	id = 128
	os_tid = 0x6a4


Thread:
	id = 129
	os_tid = 0x1398


Thread:
	id = 130
	os_tid = 0x12c4


Process:
	id = "3"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x24cd3000"
	os_pid = "0x1204"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "2"
	os_parent_pid = "0x274"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00068ac7" [0xc000000f]

Region:
	              id = 2676
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2677
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 2678
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2679
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2680
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2681
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2682
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2683
	        start_va = 0x100000
	          end_va = 0x1bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2684
	        start_va = 0x1c0000
	          end_va = 0x1c6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 2685
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2686
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 2687
	        start_va = 0x1f0000
	          end_va = 0x1f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 2688
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 2689
	        start_va = 0x480000
	          end_va = 0x480fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 2690
	        start_va = 0x490000
	          end_va = 0x494fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 2691
	        start_va = 0x4a0000
	          end_va = 0x4a0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004a0000"
	        filename = ""

Region:
	              id = 2692
	        start_va = 0x4b0000
	          end_va = 0x4b0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004b0000"
	        filename = ""

Region:
	              id = 2693
	        start_va = 0x4c0000
	          end_va = 0x4c0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004c0000"
	        filename = ""

Region:
	              id = 2694
	        start_va = 0x4e0000
	          end_va = 0x4e2fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "security.dll"
	        filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll")

Region:
	              id = 2695
	        start_va = 0x500000
	          end_va = 0x5fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000500000"
	        filename = ""

Region:
	              id = 2696
	        start_va = 0x600000
	          end_va = 0x67ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 2697
	        start_va = 0x690000
	          end_va = 0x692fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "cimwin32.dll.mui"
	        filename = "\\Windows\\System32\\wbem\\en-US\\cimwin32.dll.mui" (normalized: "c:\\windows\\system32\\wbem\\en-us\\cimwin32.dll.mui")

Region:
	              id = 2698
	        start_va = 0x6b0000
	          end_va = 0x6bffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006b0000"
	        filename = ""

Region:
	              id = 2699
	        start_va = 0x6c0000
	          end_va = 0x9f6fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2700
	        start_va = 0xa00000
	          end_va = 0xb87fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a00000"
	        filename = ""

Region:
	              id = 2701
	        start_va = 0xb90000
	          end_va = 0xd10fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b90000"
	        filename = ""

Region:
	              id = 2702
	        start_va = 0xd20000
	          end_va = 0xddffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d20000"
	        filename = ""

Region:
	              id = 2703
	        start_va = 0xde0000
	          end_va = 0xedffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000de0000"
	        filename = ""

Region:
	              id = 2704
	        start_va = 0xee0000
	          end_va = 0xf5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ee0000"
	        filename = ""

Region:
	              id = 2705
	        start_va = 0xf60000
	          end_va = 0xfdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f60000"
	        filename = ""

Region:
	              id = 2706
	        start_va = 0xfe0000
	          end_va = 0x105ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000fe0000"
	        filename = ""

Region:
	              id = 2707
	        start_va = 0x1060000
	          end_va = 0x10dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001060000"
	        filename = ""

Region:
	              id = 2708
	        start_va = 0x10e0000
	          end_va = 0x115ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010e0000"
	        filename = ""

Region:
	              id = 2709
	        start_va = 0x1160000
	          end_va = 0x11dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001160000"
	        filename = ""

Region:
	              id = 2710
	        start_va = 0x11e0000
	          end_va = 0x125ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011e0000"
	        filename = ""

Region:
	              id = 2711
	        start_va = 0x1260000
	          end_va = 0x135ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001260000"
	        filename = ""

Region:
	              id = 2712
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2713
	        start_va = 0x180000000
	          end_va = 0x180002fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "wmi.dll"
	        filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll")

Region:
	              id = 2714
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 2715
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 2716
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 2717
	        start_va = 0x7ff61e550000
	          end_va = 0x7ff61e5cffff
	       monitored = 0
	     entry_point = 0x7ff61e565f50
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 2718
	        start_va = 0x7ffd8bd60000
	          end_va = 0x7ffd8bf2efff
	       monitored = 1
	     entry_point = 0x7ffd8bd87df0
	     region_type = mapped_file
	            name = "cimwin32.dll"
	        filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll")

Region:
	              id = 2719
	        start_va = 0x7ffd91320000
	          end_va = 0x7ffd9136dfff
	       monitored = 0
	     entry_point = 0x7ffd91331ce0
	     region_type = mapped_file
	            name = "framedynos.dll"
	        filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll")

Region:
	              id = 2720
	        start_va = 0x7ffd92210000
	          end_va = 0x7ffd9221dfff
	       monitored = 0
	     entry_point = 0x7ffd92211da0
	     region_type = mapped_file
	            name = "winbrand.dll"
	        filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll")

Region:
	              id = 2721
	        start_va = 0x7ffd96f10000
	          end_va = 0x7ffd96f23fff
	       monitored = 0
	     entry_point = 0x7ffd96f11310
	     region_type = mapped_file
	            name = "browcli.dll"
	        filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll")

Region:
	              id = 2722
	        start_va = 0x7ffd97150000
	          end_va = 0x7ffd97165fff
	       monitored = 0
	     entry_point = 0x7ffd971555e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2723
	        start_va = 0x7ffd972c0000
	          end_va = 0x7ffd972e4fff
	       monitored = 0
	     entry_point = 0x7ffd972c9900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 2724
	        start_va = 0x7ffd972f0000
	          end_va = 0x7ffd97303fff
	       monitored = 0
	     entry_point = 0x7ffd972f1800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2725
	        start_va = 0x7ffd97350000
	          end_va = 0x7ffd97445fff
	       monitored = 0
	     entry_point = 0x7ffd97389590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2726
	        start_va = 0x7ffd97630000
	          end_va = 0x7ffd97640fff
	       monitored = 0
	     entry_point = 0x7ffd97632fc0
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2727
	        start_va = 0x7ffd982b0000
	          end_va = 0x7ffd982d5fff
	       monitored = 0
	     entry_point = 0x7ffd982b1cf0
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 2728
	        start_va = 0x7ffd9b340000
	          end_va = 0x7ffd9b3befff
	       monitored = 1
	     entry_point = 0x7ffd9b357110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2729
	        start_va = 0x7ffd9b400000
	          end_va = 0x7ffd9b40bfff
	       monitored = 0
	     entry_point = 0x7ffd9b4035c0
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 2730
	        start_va = 0x7ffd9f020000
	          end_va = 0x7ffd9f031fff
	       monitored = 0
	     entry_point = 0x7ffd9f023580
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 2731
	        start_va = 0x7ffda11c0000
	          end_va = 0x7ffda11d8fff
	       monitored = 0
	     entry_point = 0x7ffda11c4520
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 2732
	        start_va = 0x7ffda18b0000
	          end_va = 0x7ffda18c5fff
	       monitored = 0
	     entry_point = 0x7ffda18b1b60
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 2733
	        start_va = 0x7ffda1ab0000
	          end_va = 0x7ffda1abafff
	       monitored = 0
	     entry_point = 0x7ffda1ab12b0
	     region_type = mapped_file
	            name = "schedcli.dll"
	        filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll")

Region:
	              id = 2734
	        start_va = 0x7ffda1ea0000
	          end_va = 0x7ffda1eb0fff
	       monitored = 0
	     entry_point = 0x7ffda1ea3320
	     region_type = mapped_file
	            name = "wmiclnt.dll"
	        filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll")

Region:
	              id = 2735
	        start_va = 0x7ffda3fe0000
	          end_va = 0x7ffda401dfff
	       monitored = 0
	     entry_point = 0x7ffda3fea050
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 2736
	        start_va = 0x7ffda4d20000
	          end_va = 0x7ffda4d29fff
	       monitored = 0
	     entry_point = 0x7ffda4d21660
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 2737
	        start_va = 0x7ffda62f0000
	          end_va = 0x7ffda6302fff
	       monitored = 0
	     entry_point = 0x7ffda62f2760
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 2738
	        start_va = 0x7ffda65d0000
	          end_va = 0x7ffda65f6fff
	       monitored = 0
	     entry_point = 0x7ffda65d7940
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 2739
	        start_va = 0x7ffda6fc0000
	          end_va = 0x7ffda6fcbfff
	       monitored = 0
	     entry_point = 0x7ffda6fc27e0
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 2740
	        start_va = 0x7ffda7100000
	          end_va = 0x7ffda7179fff
	       monitored = 0
	     entry_point = 0x7ffda7121a50
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 2741
	        start_va = 0x7ffda7830000
	          end_va = 0x7ffda785cfff
	       monitored = 0
	     entry_point = 0x7ffda7849d40
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2742
	        start_va = 0x7ffda79c0000
	          end_va = 0x7ffda7a15fff
	       monitored = 0
	     entry_point = 0x7ffda79d0bf0
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 2743
	        start_va = 0x7ffda7a40000
	          end_va = 0x7ffda7a68fff
	       monitored = 0
	     entry_point = 0x7ffda7a54530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 2744
	        start_va = 0x7ffda7bb0000
	          end_va = 0x7ffda7bfafff
	       monitored = 0
	     entry_point = 0x7ffda7bb35f0
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 2745
	        start_va = 0x7ffda7c00000
	          end_va = 0x7ffda7c0efff
	       monitored = 0
	     entry_point = 0x7ffda7c03210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 2746
	        start_va = 0x7ffda7c30000
	          end_va = 0x7ffda7c3ffff
	       monitored = 0
	     entry_point = 0x7ffda7c356e0
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2747
	        start_va = 0x7ffda7cd0000
	          end_va = 0x7ffda7d39fff
	       monitored = 0
	     entry_point = 0x7ffda7d06d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 2748
	        start_va = 0x7ffda7d40000
	          end_va = 0x7ffda7f27fff
	       monitored = 0
	     entry_point = 0x7ffda7d6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2749
	        start_va = 0x7ffda7f30000
	          end_va = 0x7ffda80f6fff
	       monitored = 0
	     entry_point = 0x7ffda7f8db80
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2750
	        start_va = 0x7ffda8100000
	          end_va = 0x7ffda8142fff
	       monitored = 0
	     entry_point = 0x7ffda8114b50
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2751
	        start_va = 0x7ffda8970000
	          end_va = 0x7ffda8986fff
	       monitored = 0
	     entry_point = 0x7ffda8971390
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 2752
	        start_va = 0x7ffda8a30000
	          end_va = 0x7ffda8adcfff
	       monitored = 0
	     entry_point = 0x7ffda8a481a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2753
	        start_va = 0x7ffda8ae0000
	          end_va = 0x7ffda8b86fff
	       monitored = 0
	     entry_point = 0x7ffda8aeb4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2754
	        start_va = 0x7ffda8ba0000
	          end_va = 0x7ffda8cbbfff
	       monitored = 0
	     entry_point = 0x7ffda8be02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2755
	        start_va = 0x7ffda8cc0000
	          end_va = 0x7ffda8d80fff
	       monitored = 0
	     entry_point = 0x7ffda8ce0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2756
	        start_va = 0x7ffda8ea0000
	          end_va = 0x7ffda8ff5fff
	       monitored = 0
	     entry_point = 0x7ffda8eaa8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2757
	        start_va = 0x7ffda9000000
	          end_va = 0x7ffda927cfff
	       monitored = 0
	     entry_point = 0x7ffda90d4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 2758
	        start_va = 0x7ffda9800000
	          end_va = 0x7ffda986afff
	       monitored = 0
	     entry_point = 0x7ffda98190c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2759
	        start_va = 0x7ffdaae30000
	          end_va = 0x7ffdaaeccfff
	       monitored = 0
	     entry_point = 0x7ffdaae378a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2760
	        start_va = 0x7ffdaaee0000
	          end_va = 0x7ffdaaf86fff
	       monitored = 0
	     entry_point = 0x7ffdaaef58d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2761
	        start_va = 0x7ffdab030000
	          end_va = 0x7ffdab08afff
	       monitored = 0
	     entry_point = 0x7ffdab0438b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2762
	        start_va = 0x7ffdab400000
	          end_va = 0x7ffdab585fff
	       monitored = 0
	     entry_point = 0x7ffdab44ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2763
	        start_va = 0x7ffdab590000
	          end_va = 0x7ffdab750fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2793
	        start_va = 0x400000
	          end_va = 0x402fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 2794
	        start_va = 0x410000
	          end_va = 0x417fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 2885
	        start_va = 0x420000
	          end_va = 0x425fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 2886
	        start_va = 0x1360000
	          end_va = 0x145ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001360000"
	        filename = ""

Region:
	              id = 2887
	        start_va = 0x430000
	          end_va = 0x445fff
	       monitored = 0
	     entry_point = 0x440420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 2888
	        start_va = 0x450000
	          end_va = 0x452fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 2889
	        start_va = 0x430000
	          end_va = 0x445fff
	       monitored = 0
	     entry_point = 0x440420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 2890
	        start_va = 0x450000
	          end_va = 0x452fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 2891
	        start_va = 0x430000
	          end_va = 0x445fff
	       monitored = 0
	     entry_point = 0x440420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 2892
	        start_va = 0x450000
	          end_va = 0x452fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 2893
	        start_va = 0x430000
	          end_va = 0x445fff
	       monitored = 0
	     entry_point = 0x440420
	     region_type = mapped_file
	            name = "synth3dvsc.sys"
	        filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys")

Region:
	              id = 2894
	        start_va = 0x450000
	          end_va = 0x452fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "synth3dvsc.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui")

Region:
	              id = 2895
	        start_va = 0x430000
	          end_va = 0x449fff
	       monitored = 1
	     entry_point = 0x431190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 2896
	        start_va = 0x450000
	          end_va = 0x455fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 2897
	        start_va = 0x430000
	          end_va = 0x449fff
	       monitored = 1
	     entry_point = 0x431190
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll")

Region:
	              id = 2898
	        start_va = 0x450000
	          end_va = 0x455fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "workflowservicehostperformancecounters.dll.mui"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui")

Region:
	              id = 2899
	        start_va = 0x430000
	          end_va = 0x45afff
	       monitored = 0
	     entry_point = 0x44d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 2900
	        start_va = 0x460000
	          end_va = 0x464fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 2901
	        start_va = 0x1520000
	          end_va = 0x191afff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001520000"
	        filename = ""

Region:
	              id = 2902
	        start_va = 0x430000
	          end_va = 0x45afff
	       monitored = 0
	     entry_point = 0x44d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 2903
	        start_va = 0x460000
	          end_va = 0x464fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 2904
	        start_va = 0x430000
	          end_va = 0x45afff
	       monitored = 0
	     entry_point = 0x44d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 2905
	        start_va = 0x460000
	          end_va = 0x464fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 2906
	        start_va = 0x430000
	          end_va = 0x45afff
	       monitored = 0
	     entry_point = 0x44d000
	     region_type = mapped_file
	            name = "pacer.sys"
	        filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys")

Region:
	              id = 2907
	        start_va = 0x460000
	          end_va = 0x464fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "pacer.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui")

Region:
	              id = 2908
	        start_va = 0x430000
	          end_va = 0x458fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 2909
	        start_va = 0x1920000
	          end_va = 0x1a03fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 2910
	        start_va = 0x430000
	          end_va = 0x458fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui")

Region:
	              id = 2911
	        start_va = 0x1920000
	          end_va = 0x1a03fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fxsresm.dll"
	        filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll")

Region:
	              id = 2912
	        start_va = 0x430000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 2913
	        start_va = 0x1460000
	          end_va = 0x14f2fff
	       monitored = 0
	     entry_point = 0x14d9000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 2914
	        start_va = 0x430000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "afd.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui")

Region:
	              id = 2915
	        start_va = 0x1460000
	          end_va = 0x14f2fff
	       monitored = 0
	     entry_point = 0x14d9000
	     region_type = mapped_file
	            name = "afd.sys"
	        filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys")

Region:
	              id = 2916
	        start_va = 0x430000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 2917
	        start_va = 0x1460000
	          end_va = 0x1500fff
	       monitored = 0
	     entry_point = 0x14f3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 2918
	        start_va = 0x430000
	          end_va = 0x435fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "fvevol.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui")

Region:
	              id = 2919
	        start_va = 0x1460000
	          end_va = 0x1500fff
	       monitored = 0
	     entry_point = 0x14f3000
	     region_type = mapped_file
	            name = "fvevol.sys"
	        filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys")

Region:
	              id = 2920
	        start_va = 0x430000
	          end_va = 0x43afff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "spaceport.sys.mui"
	        filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui")

Region:
	              id = 2921
	        start_va = 0x1460000
	          end_va = 0x14e5fff
	       monitored = 0
	     entry_point = 0x14d1000
	     region_type = mapped_file
	            name = "spaceport.sys"
	        filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys")

Region:
	              id = 2926
	        start_va = 0x1920000
	          end_va = 0x1b1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001920000"
	        filename = ""

Region:
	              id = 2927
	        start_va = 0x7ffda1ab0000
	          end_va = 0x7ffda1abdfff
	       monitored = 0
	     entry_point = 0x7ffda1ab2b10
	     region_type = mapped_file
	            name = "perfos.dll"
	        filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll")


Thread:
	id = 102
	os_tid = 0x128c

	[0249.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff60 | out: lpSystemTimeAsFileTime=0x125ff60*(dwLowDateTime=0xe46b6a4d, dwHighDateTime=0x1d85ff1)) 
	[0249.954] free (_Block=0xdff740) 
	[0249.954] FreeLibrary (hLibModule=0x180000000) returned 1
	[0249.956] free (_Block=0xe031c0) 
	[0249.956] free (_Block=0xdfca60) 
	[0249.956] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff60 | out: lpSystemTimeAsFileTime=0x125ff60*(dwLowDateTime=0xe46bdf11, dwHighDateTime=0x1d85ff1)) 
	[0249.957] free (_Block=0xe063f0) 
	[0249.957] FreeLibrary (hLibModule=0x4e0000) returned 1
	[0249.958] free (_Block=0xdfcb50) 
	[0249.958] free (_Block=0xe02000) 
	[0249.959] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff60 | out: lpSystemTimeAsFileTime=0x125ff60*(dwLowDateTime=0xe46c2d25, dwHighDateTime=0x1d85ff1)) 
	[0249.959] free (_Block=0xe06030) 
	[0249.959] FreeLibrary (hLibModule=0x7ffda8a30000) returned 1
	[0249.959] free (_Block=0xe05780) 
	[0249.959] free (_Block=0xe01c90) 
	[0249.959] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff60 | out: lpSystemTimeAsFileTime=0x125ff60*(dwLowDateTime=0xe46c408f, dwHighDateTime=0x1d85ff1)) 
	[0249.959] free (_Block=0xdff780) 
	[0249.959] FreeLibrary (hLibModule=0x7ffda8970000) returned 1
	[0249.968] free (_Block=0xe04e80) 
	[0249.978] free (_Block=0xe01970) 
	[0249.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff60 | out: lpSystemTimeAsFileTime=0x125ff60*(dwLowDateTime=0xe46f3b8f, dwHighDateTime=0x1d85ff1)) 
	[0249.979] free (_Block=0xe06410) 
	[0249.979] FreeLibrary (hLibModule=0x7ffda8100000) returned 1
	[0249.979] free (_Block=0xe067f0) 
	[0249.979] free (_Block=0xe01d80) 
	[0249.979] WaitForSingleObjectEx (hHandle=0x258, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0
	[0255.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff60 | out: lpSystemTimeAsFileTime=0x125ff60*(dwLowDateTime=0xe79aa924, dwHighDateTime=0x1d85ff1)) 
	[0255.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff68 | out: lpSystemTimeAsFileTime=0x125ff68*(dwLowDateTime=0xe79aa924, dwHighDateTime=0x1d85ff1)) 
	[0255.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff70 | out: lpSystemTimeAsFileTime=0x125ff70*(dwLowDateTime=0xe79abcd5, dwHighDateTime=0x1d85ff1)) 
	[0255.297] WaitForSingleObjectEx (hHandle=0x258, dwMilliseconds=0x493de, bAlertable=0) returned 0x102
	[0265.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x125ff60 | out: lpSystemTimeAsFileTime=0x125ff60*(dwLowDateTime=0xed95efc7, dwHighDateTime=0x1d85ff1)) 
	[0265.332] free (_Block=0xe06230) 
	[0265.332] FreeLibrary (hLibModule=0x7ffdab590000) returned 1
	[0265.332] free (_Block=0xe070e0) 
	[0265.333] free (_Block=0xdfcfb0) 
	[0265.333] WaitForSingleObjectEx (hHandle=0x258, dwMilliseconds=0xffffffff, bAlertable=0) 

Thread:
	id = 103
	os_tid = 0x1280

	[0245.498] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2

Thread:
	id = 104
	os_tid = 0x1278

	[0245.508] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2
	[0249.889] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2
	[0249.948] RtlRestoreLastWin32Error () returned 0x2c9000
	[0249.948] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1
	[0249.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x528910
	[0249.948] RtlRestoreLastWin32Error () returned 0x2c9000
	[0249.948] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x528910, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x528910, pcchLanguagesBuffer=0x115dff0) returned 1
	[0249.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x528790
	[0249.948] RtlFreeHeap (HeapHandle=0x500000, Flags=0x0, BaseAddress=0x528910) returned 1
	[0249.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x57c630
	[0249.949] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x57c630, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1
	[0249.949] RtlFreeHeap (HeapHandle=0x500000, Flags=0x0, BaseAddress=0x57c630) returned 1
	[0249.953] SetEvent (hEvent=0x258) returned 1
	[0249.979] free (_Block=0xe01b00) 
	[0249.979] GetCurrentThread () returned 0xfffffffffffffffe
	[0249.979] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x280) returned 1
	[0249.979] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1
	[0249.982] RtlRestoreLastWin32Error () returned 0x2c9000
	[0249.982] AdjustTokenPrivileges (in: TokenHandle=0x280, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0249.982] GetLastError () returned 0x0
	[0249.982] CloseHandle (hObject=0x280) returned 1
	[0249.982] malloc (_Size=0x8000) returned 0xe091d0
	[0249.982] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xe091d0, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xe091d0, ResultLength=0x0) returned 0xc0000004
	[0250.015] free (_Block=0xe091d0) 
	[0250.016] malloc (_Size=0x10000) returned 0xe091d0
	[0250.017] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xe091d0, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xe091d0, ResultLength=0x0) returned 0xc0000004
	[0250.020] free (_Block=0xe091d0) 
	[0250.021] malloc (_Size=0x18000) returned 0xe091d0
	[0250.022] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xe091d0, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xe091d0, ResultLength=0x0) returned 0xc0000004
	[0250.026] free (_Block=0xe091d0) 
	[0250.026] malloc (_Size=0x20000) returned 0xe091d0
	[0250.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xe091d0, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0xe091d0, ResultLength=0x0) returned 0x0
	[0250.029] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0
	[0250.048] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1
	[0250.049] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0xab5b2958, dwBuildNumber=0x7ffd, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.050] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.065] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0
	[0250.065] CloseHandle (hObject=0x0) returned 0
	[0250.066] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0
	[0250.071] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1
	[0250.072] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.072] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.101] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0
	[0250.101] CloseHandle (hObject=0x0) returned 0
	[0250.102] _ui64tow_s (in: _Value=0x12c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="300") returned 0x0
	[0250.162] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="300") returned 3
	[0250.163] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.164] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.178] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x12c) returned 0x0
	[0250.178] CloseHandle (hObject=0x0) returned 0
	[0250.179] _ui64tow_s (in: _Value=0x174, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="372") returned 0x0
	[0250.182] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="372") returned 3
	[0250.183] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.183] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.203] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x174) returned 0x0
	[0250.203] CloseHandle (hObject=0x0) returned 0
	[0250.204] _ui64tow_s (in: _Value=0x1bc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0
	[0250.208] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="444") returned 3
	[0250.227] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.227] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.241] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0
	[0250.241] CloseHandle (hObject=0x0) returned 0
	[0250.242] _ui64tow_s (in: _Value=0x1c8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0
	[0250.249] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="456") returned 3
	[0250.250] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.250] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.265] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0
	[0250.265] CloseHandle (hObject=0x0) returned 0
	[0250.266] _ui64tow_s (in: _Value=0x1fc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0
	[0250.271] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="508") returned 3
	[0250.272] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.272] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.289] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x280
	[0250.289] GetLastError () returned 0x0
	[0250.289] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.289] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x398018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.289] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.290] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1630, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.290] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1340, lpBuffer=0x115c580, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.291] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.292] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.292] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x398020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.292] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b0d20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.292] malloc (_Size=0x1c) returned 0xe06dd0
	[0250.292] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1382, lpBuffer=0xe06dd0, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe06dd0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.292] free (_Block=0xe06dd0) 
	[0250.293] CloseHandle (hObject=0x280) returned 1
	[0250.293] _ui64tow_s (in: _Value=0x214, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0
	[0250.298] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="532") returned 3
	[0250.298] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.298] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.313] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0
	[0250.313] CloseHandle (hObject=0x0) returned 0
	[0250.314] _ui64tow_s (in: _Value=0x21c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0
	[0250.317] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="540") returned 3
	[0250.318] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.318] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.335] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x280
	[0250.335] GetLastError () returned 0x0
	[0250.335] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.335] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x303018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.336] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.336] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603240, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.336] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602e98, lpBuffer=0x115c580, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.337] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.338] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.338] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x303020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.338] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602880, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.338] malloc (_Size=0x3e) returned 0xdfcfb0
	[0250.338] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602ed4, lpBuffer=0xdfcfb0, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfcfb0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.339] free (_Block=0xdfcfb0) 
	[0250.340] CloseHandle (hObject=0x280) returned 1
	[0250.341] _ui64tow_s (in: _Value=0x274, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0
	[0250.344] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="628") returned 3
	[0250.345] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.345] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.362] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x280
	[0250.362] GetLastError () returned 0x0
	[0250.362] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.363] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3a0018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.363] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.363] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403370, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.363] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x402fd8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.364] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.365] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.365] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3a0020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.365] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4029c0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.365] malloc (_Size=0x5e) returned 0xe003b0
	[0250.365] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403018, lpBuffer=0xe003b0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.366] free (_Block=0xe003b0) 
	[0250.366] CloseHandle (hObject=0x280) returned 1
	[0250.367] _ui64tow_s (in: _Value=0x294, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="660") returned 0x0
	[0250.371] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="660") returned 3
	[0250.372] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.372] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.386] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x280
	[0250.386] GetLastError () returned 0x0
	[0250.386] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.386] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2d0018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.386] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.386] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4033e0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.386] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403058, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.387] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.388] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.388] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2d0020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.388] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x402a40, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.388] malloc (_Size=0x54) returned 0xe084e0
	[0250.388] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403098, lpBuffer=0xe084e0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe084e0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.389] free (_Block=0xe084e0) 
	[0250.390] CloseHandle (hObject=0x280) returned 1
	[0250.391] _ui64tow_s (in: _Value=0x32c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="812") returned 0x0
	[0250.397] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="812") returned 3
	[0250.398] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.398] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.412] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x32c) returned 0x280
	[0250.413] GetLastError () returned 0x0
	[0250.413] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.413] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x316018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.413] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.413] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x581980, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.413] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x581678, lpBuffer=0x115c580, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.414] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.416] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.416] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x316020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.417] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x581060, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.417] malloc (_Size=0x16) returned 0xe060b0
	[0250.417] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5816b0, lpBuffer=0xe060b0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe060b0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.417] free (_Block=0xe060b0) 
	[0250.418] CloseHandle (hObject=0x280) returned 1
	[0250.418] _ui64tow_s (in: _Value=0x364, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="868") returned 0x0
	[0250.423] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="868") returned 3
	[0250.424] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.424] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.438] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x364) returned 0x280
	[0250.439] GetLastError () returned 0x0
	[0250.439] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.439] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x381018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.439] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.439] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403370, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.439] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x402fd8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.440] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.441] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.441] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x381020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.441] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4029c0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.441] malloc (_Size=0x58) returned 0xe08000
	[0250.441] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403018, lpBuffer=0xe08000, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe08000*, lpNumberOfBytesRead=0x0) returned 1
	[0250.442] free (_Block=0xe08000) 
	[0250.443] CloseHandle (hObject=0x280) returned 1
	[0250.444] _ui64tow_s (in: _Value=0x36c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="876") returned 0x0
	[0250.449] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="876") returned 3
	[0250.450] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.450] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.464] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x280
	[0250.464] GetLastError () returned 0x0
	[0250.464] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.464] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x20b018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.465] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.465] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403400, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.465] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403058, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.466] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.467] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.467] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x20b020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.467] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x402a40, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.467] malloc (_Size=0x74) returned 0xe031c0
	[0250.467] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403098, lpBuffer=0xe031c0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe031c0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.468] free (_Block=0xe031c0) 
	[0250.470] CloseHandle (hObject=0x280) returned 1
	[0250.471] _ui64tow_s (in: _Value=0x394, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="916") returned 0x0
	[0250.475] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="916") returned 3
	[0250.476] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.476] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.490] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x394) returned 0x280
	[0250.491] GetLastError () returned 0x0
	[0250.491] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.491] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x369018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.491] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.491] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603410, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.491] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603058, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.492] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.496] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.496] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x369020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.496] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602a40, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.496] malloc (_Size=0x84) returned 0xe031c0
	[0250.496] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603098, lpBuffer=0xe031c0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe031c0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.497] free (_Block=0xe031c0) 
	[0250.498] CloseHandle (hObject=0x280) returned 1
	[0250.510] _ui64tow_s (in: _Value=0x3a4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="932") returned 0x0
	[0250.514] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="932") returned 3
	[0250.515] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.515] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.532] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a4) returned 0x280
	[0250.532] GetLastError () returned 0x0
	[0250.533] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.533] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x204018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.533] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.533] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603410, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.533] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603058, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.534] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.535] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.535] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x204020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.535] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602a40, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.535] malloc (_Size=0x86) returned 0xe031c0
	[0250.535] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603098, lpBuffer=0xe031c0, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe031c0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.536] free (_Block=0xe031c0) 
	[0250.537] CloseHandle (hObject=0x280) returned 1
	[0250.537] _ui64tow_s (in: _Value=0x150, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="336") returned 0x0
	[0250.542] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="336") returned 3
	[0250.543] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.543] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.569] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x150) returned 0x280
	[0250.569] GetLastError () returned 0x0
	[0250.569] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.569] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c2018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.570] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.570] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6033f0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.570] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603058, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.571] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.573] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.573] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c2020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.573] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602a40, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.573] malloc (_Size=0x62) returned 0xe003b0
	[0250.573] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603098, lpBuffer=0xe003b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.574] free (_Block=0xe003b0) 
	[0250.575] CloseHandle (hObject=0x280) returned 1
	[0250.575] _ui64tow_s (in: _Value=0x190, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="400") returned 0x0
	[0250.579] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="400") returned 3
	[0250.580] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.580] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.597] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x190) returned 0x280
	[0250.597] GetLastError () returned 0x0
	[0250.597] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.597] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2e9018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.597] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.597] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603390, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.597] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602fd8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.598] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.599] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.599] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2e9020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.599] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6029c0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.599] malloc (_Size=0x82) returned 0xe031c0
	[0250.599] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603018, lpBuffer=0xe031c0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe031c0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.600] free (_Block=0xe031c0) 
	[0250.601] CloseHandle (hObject=0x280) returned 1
	[0250.601] _ui64tow_s (in: _Value=0x44c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1100") returned 0x0
	[0250.608] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1100") returned 4
	[0250.608] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.609] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.622] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x280
	[0250.622] GetLastError () returned 0x0
	[0250.622] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.623] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3b8018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.623] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.623] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6033f0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.623] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603058, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.624] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.625] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.625] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3b8020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.625] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602a40, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.625] malloc (_Size=0x66) returned 0xe003b0
	[0250.625] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603098, lpBuffer=0xe003b0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.626] free (_Block=0xe003b0) 
	[0250.628] CloseHandle (hObject=0x280) returned 1
	[0250.628] _ui64tow_s (in: _Value=0x544, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1348") returned 0x0
	[0250.632] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1348") returned 4
	[0250.633] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.633] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.651] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x544) returned 0x280
	[0250.651] GetLastError () returned 0x0
	[0250.651] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b5018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0xf1b00, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.652] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0xf17a8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.653] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.654] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.654] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b5020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.654] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0xf1190, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.654] malloc (_Size=0x42) returned 0xdfcb50
	[0250.654] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0xf17e8, lpBuffer=0xdfcb50, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfcb50*, lpNumberOfBytesRead=0x0) returned 1
	[0250.655] free (_Block=0xdfcb50) 
	[0250.656] CloseHandle (hObject=0x280) returned 1
	[0250.657] _ui64tow_s (in: _Value=0x5a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1448") returned 0x0
	[0250.661] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1448") returned 4
	[0250.662] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.662] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.677] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5a8) returned 0x280
	[0250.677] GetLastError () returned 0x0
	[0250.677] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.677] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x382018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.677] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.677] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x581b70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.677] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x581848, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.679] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.680] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.680] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x382020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.680] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x581230, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.681] malloc (_Size=0x18) returned 0xe06250
	[0250.681] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x581886, lpBuffer=0xe06250, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe06250*, lpNumberOfBytesRead=0x0) returned 1
	[0250.681] free (_Block=0xe06250) 
	[0250.681] CloseHandle (hObject=0x280) returned 1
	[0250.682] _ui64tow_s (in: _Value=0x648, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1608") returned 0x0
	[0250.686] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1608") returned 4
	[0250.687] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.687] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.703] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x648) returned 0x280
	[0250.703] GetLastError () returned 0x0
	[0250.703] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.703] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x390018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.703] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.703] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403370, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.704] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x402fd8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.704] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.705] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.706] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x390020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.706] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4029c0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.706] malloc (_Size=0x5a) returned 0xe003b0
	[0250.706] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403018, lpBuffer=0xe003b0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.707] free (_Block=0xe003b0) 
	[0250.707] CloseHandle (hObject=0x280) returned 1
	[0250.708] _ui64tow_s (in: _Value=0x6ac, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1708") returned 0x0
	[0250.711] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1708") returned 4
	[0250.713] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.713] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.728] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6ac) returned 0x280
	[0250.728] GetLastError () returned 0x0
	[0250.728] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.728] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x395018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.732] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.735] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x503920, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.736] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x50345c, lpBuffer=0x115c580, nSize=0xbe, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.738] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.740] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.740] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x395020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.752] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x502b80, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.815] malloc (_Size=0x10a) returned 0xe04e80
	[0250.815] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x50351a, lpBuffer=0xe04e80, nSize=0x108, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe04e80*, lpNumberOfBytesRead=0x0) returned 1
	[0250.818] free (_Block=0xe04e80) 
	[0250.819] CloseHandle (hObject=0x280) returned 1
	[0250.820] _ui64tow_s (in: _Value=0x700, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1792") returned 0x0
	[0250.824] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1792") returned 4
	[0250.826] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.826] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.848] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x700) returned 0x280
	[0250.848] GetLastError () returned 0x0
	[0250.848] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.848] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x300018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.848] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.848] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591c30, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.849] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5917a8, lpBuffer=0x115c580, nSize=0x9e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.850] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.852] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.852] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x300020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.852] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591190, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.852] malloc (_Size=0xb6) returned 0xe04e80
	[0250.852] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591846, lpBuffer=0xe04e80, nSize=0xb4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe04e80*, lpNumberOfBytesRead=0x0) returned 1
	[0250.853] free (_Block=0xe04e80) 
	[0250.854] CloseHandle (hObject=0x280) returned 1
	[0250.854] _ui64tow_s (in: _Value=0x78c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1932") returned 0x0
	[0250.859] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1932") returned 4
	[0250.860] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.860] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.882] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x78c) returned 0x280
	[0250.882] GetLastError () returned 0x0
	[0250.882] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.882] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3a1018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.882] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.882] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1be0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.882] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1878, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.883] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.884] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.884] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3a1020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.884] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1260, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.884] malloc (_Size=0x32) returned 0xe00680
	[0250.884] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c18a8, lpBuffer=0xe00680, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00680*, lpNumberOfBytesRead=0x0) returned 1
	[0250.885] free (_Block=0xe00680) 
	[0250.886] CloseHandle (hObject=0x280) returned 1
	[0250.886] _ui64tow_s (in: _Value=0x7f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2040") returned 0x0
	[0250.890] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2040") returned 4
	[0250.891] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.891] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.905] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7f8) returned 0x280
	[0250.905] GetLastError () returned 0x0
	[0250.905] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.905] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3dd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.905] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.905] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603430, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.905] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603078, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.906] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.907] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.907] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3dd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.907] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602a60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.908] malloc (_Size=0x64) returned 0xe003b0
	[0250.908] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6030c4, lpBuffer=0xe003b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.908] free (_Block=0xe003b0) 
	[0250.909] CloseHandle (hObject=0x280) returned 1
	[0250.910] _ui64tow_s (in: _Value=0x820, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2080") returned 0x0
	[0250.913] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2080") returned 4
	[0250.918] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.918] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0250.946] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x820) returned 0x280
	[0250.946] GetLastError () returned 0x0
	[0250.946] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0250.946] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x390018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0250.946] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0250.946] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0250.947] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481848, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0250.947] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0250.948] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0250.948] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x390020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0250.949] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481230, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0250.949] malloc (_Size=0x6c) returned 0xe031c0
	[0250.949] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x48188c, lpBuffer=0xe031c0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe031c0*, lpNumberOfBytesRead=0x0) returned 1
	[0250.949] free (_Block=0xe031c0) 
	[0250.953] CloseHandle (hObject=0x280) returned 1
	[0250.954] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0
	[0250.958] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4
	[0250.959] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0250.959] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.012] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x280
	[0251.012] GetLastError () returned 0x0
	[0251.012] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.012] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x34e018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.012] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.012] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603710, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.013] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603278, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.013] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.014] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.015] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x34e020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.015] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602bf0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.015] malloc (_Size=0x118) returned 0xe04e80
	[0251.015] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603318, lpBuffer=0xe04e80, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe04e80*, lpNumberOfBytesRead=0x0) returned 1
	[0251.016] free (_Block=0xe04e80) 
	[0251.016] CloseHandle (hObject=0x280) returned 1
	[0251.017] _ui64tow_s (in: _Value=0xa08, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2568") returned 0x0
	[0251.021] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2568") returned 4
	[0251.023] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.024] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.039] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa08) returned 0x280
	[0251.039] GetLastError () returned 0x0
	[0251.039] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.039] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x324018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.040] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.041] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5036b0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.041] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x503234, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.058] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.060] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.060] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x324020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.060] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x502ba0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.061] malloc (_Size=0x11a) returned 0xe04e80
	[0251.061] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5032ca, lpBuffer=0xe04e80, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe04e80*, lpNumberOfBytesRead=0x0) returned 1
	[0251.061] free (_Block=0xe04e80) 
	[0251.062] CloseHandle (hObject=0x280) returned 1
	[0251.063] _ui64tow_s (in: _Value=0xd58, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3416") returned 0x0
	[0251.072] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3416") returned 4
	[0251.073] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.073] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.092] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd58) returned 0x280
	[0251.092] GetLastError () returned 0x0
	[0251.093] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.093] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x382018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.093] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.093] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403420, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.093] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x403078, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.094] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.095] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.095] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x382020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.095] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x402a60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.095] malloc (_Size=0x6a) returned 0xe031c0
	[0251.095] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4030b8, lpBuffer=0xe031c0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe031c0*, lpNumberOfBytesRead=0x0) returned 1
	[0251.096] free (_Block=0xe031c0) 
	[0251.097] CloseHandle (hObject=0x280) returned 1
	[0251.183] _ui64tow_s (in: _Value=0xee4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3812") returned 0x0
	[0251.189] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3812") returned 4
	[0251.190] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0xa908ec4f, dwBuildNumber=0x7ffd, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.190] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.210] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee4) returned 0x280
	[0251.210] GetLastError () returned 0x0
	[0251.210] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.210] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x38d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.210] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.211] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491c20, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.211] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491848, lpBuffer=0x115c580, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.211] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.212] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.213] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x38d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.213] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491230, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.213] malloc (_Size=0x72) returned 0xe031c0
	[0251.213] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4918a2, lpBuffer=0xe031c0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe031c0*, lpNumberOfBytesRead=0x0) returned 1
	[0251.213] free (_Block=0xe031c0) 
	[0251.214] CloseHandle (hObject=0x280) returned 1
	[0251.215] _ui64tow_s (in: _Value=0xca8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3240") returned 0x0
	[0251.263] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3240") returned 4
	[0251.264] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.264] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.286] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xca8) returned 0x280
	[0251.286] GetLastError () returned 0x0
	[0251.286] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.286] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x365018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.286] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.286] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x431b10, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.287] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4317a8, lpBuffer=0x115c580, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.287] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.289] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.289] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x365020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.289] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x431190, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.289] malloc (_Size=0x2c) returned 0xe00b80
	[0251.289] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4317fa, lpBuffer=0xe00b80, nSize=0x2a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00b80*, lpNumberOfBytesRead=0x0) returned 1
	[0251.290] free (_Block=0xe00b80) 
	[0251.412] CloseHandle (hObject=0x280) returned 1
	[0251.413] _ui64tow_s (in: _Value=0xadc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2780") returned 0x0
	[0251.534] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2780") returned 4
	[0251.536] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.536] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.559] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xadc) returned 0x280
	[0251.560] GetLastError () returned 0x0
	[0251.560] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.560] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3ae018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.560] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.560] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491b60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.561] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4917a8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.562] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.566] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.566] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3ae020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.566] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491190, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.566] malloc (_Size=0x64) returned 0xe00500
	[0251.566] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4917f4, lpBuffer=0xe00500, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00500*, lpNumberOfBytesRead=0x0) returned 1
	[0251.567] free (_Block=0xe00500) 
	[0251.568] CloseHandle (hObject=0x280) returned 1
	[0251.569] _ui64tow_s (in: _Value=0xef0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3824") returned 0x0
	[0251.631] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3824") returned 4
	[0251.632] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.632] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.651] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xef0) returned 0x280
	[0251.651] GetLastError () returned 0x0
	[0251.651] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c3018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x451cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4518d8, lpBuffer=0x115c580, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.652] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.654] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.654] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c3020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.654] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4512c0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.654] malloc (_Size=0x7e) returned 0xe067f0
	[0251.654] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x451938, lpBuffer=0xe067f0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0251.655] free (_Block=0xe067f0) 
	[0251.656] CloseHandle (hObject=0x280) returned 1
	[0251.657] _ui64tow_s (in: _Value=0xde4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3556") returned 0x0
	[0251.662] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3556") returned 4
	[0251.663] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.663] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.693] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xde4) returned 0x280
	[0251.694] GetLastError () returned 0x0
	[0251.694] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.694] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x59c018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.694] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.694] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x251c30, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.694] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x251888, lpBuffer=0x115c580, nSize=0x50, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.695] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.697] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.697] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x59c020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.697] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x251270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.698] malloc (_Size=0x58) returned 0xe08180
	[0251.698] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2518d8, lpBuffer=0xe08180, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe08180*, lpNumberOfBytesRead=0x0) returned 1
	[0251.698] free (_Block=0xe08180) 
	[0251.699] CloseHandle (hObject=0x280) returned 1
	[0251.700] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0
	[0251.705] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4
	[0251.706] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.706] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.727] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x280
	[0251.728] GetLastError () returned 0x0
	[0251.728] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.728] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x271018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.728] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.728] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.728] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1888, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.730] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.731] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.731] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x271020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.731] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.731] malloc (_Size=0x6e) returned 0xe067f0
	[0251.731] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e18ee, lpBuffer=0xe067f0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0251.732] free (_Block=0xe067f0) 
	[0251.734] CloseHandle (hObject=0x280) returned 1
	[0251.735] _ui64tow_s (in: _Value=0xa20, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2592") returned 0x0
	[0251.741] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2592") returned 4
	[0251.742] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.742] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.762] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa20) returned 0x280
	[0251.762] GetLastError () returned 0x0
	[0251.762] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.762] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b1018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.763] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.763] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x441c90, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.763] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x441888, lpBuffer=0x115c580, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.764] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.765] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.766] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b1020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.766] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x441270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.766] malloc (_Size=0x76) returned 0xe067f0
	[0251.766] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4418f6, lpBuffer=0xe067f0, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0251.767] free (_Block=0xe067f0) 
	[0251.768] CloseHandle (hObject=0x280) returned 1
	[0251.770] _ui64tow_s (in: _Value=0x534, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1332") returned 0x0
	[0251.775] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1332") returned 4
	[0251.777] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.777] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.799] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x534) returned 0x280
	[0251.799] GetLastError () returned 0x0
	[0251.799] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.799] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x466018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.799] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.799] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a1c40, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.800] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a1888, lpBuffer=0x115c580, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.801] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.802] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.802] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x466020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.802] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.803] malloc (_Size=0x60) returned 0xdfff50
	[0251.803] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a18e0, lpBuffer=0xdfff50, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfff50*, lpNumberOfBytesRead=0x0) returned 1
	[0251.803] free (_Block=0xdfff50) 
	[0251.804] CloseHandle (hObject=0x280) returned 1
	[0251.805] _ui64tow_s (in: _Value=0x230, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="560") returned 0x0
	[0251.810] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="560") returned 3
	[0251.811] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.811] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.831] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x230) returned 0x280
	[0251.831] GetLastError () returned 0x0
	[0251.831] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.831] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.831] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.831] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3b1c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.832] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3b1888, lpBuffer=0x115c580, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.835] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.837] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.837] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.837] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3b1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.837] malloc (_Size=0x66) returned 0xdfff50
	[0251.837] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3b18e6, lpBuffer=0xdfff50, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfff50*, lpNumberOfBytesRead=0x0) returned 1
	[0251.838] free (_Block=0xdfff50) 
	[0251.839] CloseHandle (hObject=0x280) returned 1
	[0251.839] _ui64tow_s (in: _Value=0x2ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="748") returned 0x0
	[0251.844] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="748") returned 3
	[0251.845] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.845] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.863] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2ec) returned 0x280
	[0251.863] GetLastError () returned 0x0
	[0251.864] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.864] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3e6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.864] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.864] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531cf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.864] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531888, lpBuffer=0x115c580, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.866] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.867] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.867] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3e6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.867] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.868] malloc (_Size=0x9a) returned 0xe067f0
	[0251.868] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x53191a, lpBuffer=0xe067f0, nSize=0x98, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0251.869] free (_Block=0xe067f0) 
	[0251.870] CloseHandle (hObject=0x280) returned 1
	[0251.870] _ui64tow_s (in: _Value=0x46c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1132") returned 0x0
	[0251.879] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1132") returned 4
	[0251.880] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.880] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.901] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x46c) returned 0x280
	[0251.901] GetLastError () returned 0x0
	[0251.901] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.901] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x389018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.901] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.901] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4c1cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.902] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4c1888, lpBuffer=0x115c580, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.903] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.904] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.904] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x389020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.904] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4c1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.905] malloc (_Size=0x8a) returned 0xe067f0
	[0251.905] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4c190a, lpBuffer=0xe067f0, nSize=0x88, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0251.905] free (_Block=0xe067f0) 
	[0251.906] CloseHandle (hObject=0x280) returned 1
	[0251.907] _ui64tow_s (in: _Value=0x9cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2508") returned 0x0
	[0251.916] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2508") returned 4
	[0251.918] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.918] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.936] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9cc) returned 0x280
	[0251.936] GetLastError () returned 0x0
	[0251.936] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.936] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x247018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.936] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.936] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.936] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531888, lpBuffer=0x115c580, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.937] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.939] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.939] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x247020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.939] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.939] malloc (_Size=0x6c) returned 0xe067f0
	[0251.939] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5318ec, lpBuffer=0xe067f0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0251.940] free (_Block=0xe067f0) 
	[0251.941] CloseHandle (hObject=0x280) returned 1
	[0251.941] _ui64tow_s (in: _Value=0x7dc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2012") returned 0x0
	[0251.945] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2012") returned 4
	[0251.946] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.946] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0251.965] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7dc) returned 0x280
	[0251.965] GetLastError () returned 0x0
	[0251.965] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0251.965] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x349018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0251.966] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0251.966] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6f1c20, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0251.966] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6f1888, lpBuffer=0x115c580, nSize=0x4a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0251.967] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0251.968] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0251.968] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x349020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0251.968] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6f1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0251.968] malloc (_Size=0x52) returned 0xe08720
	[0251.968] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6f18d2, lpBuffer=0xe08720, nSize=0x50, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe08720*, lpNumberOfBytesRead=0x0) returned 1
	[0251.981] free (_Block=0xe08720) 
	[0251.982] CloseHandle (hObject=0x280) returned 1
	[0251.982] _ui64tow_s (in: _Value=0xc28, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3112") returned 0x0
	[0251.987] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3112") returned 4
	[0251.989] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0251.989] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.006] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc28) returned 0x280
	[0252.006] GetLastError () returned 0x0
	[0252.006] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.006] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x223018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.007] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.007] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1d1cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.007] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1d1888, lpBuffer=0x115c580, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.008] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.009] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.009] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x223020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.009] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1d1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.009] malloc (_Size=0x88) returned 0xe067f0
	[0252.009] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1d1908, lpBuffer=0xe067f0, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.010] free (_Block=0xe067f0) 
	[0252.011] CloseHandle (hObject=0x280) returned 1
	[0252.011] _ui64tow_s (in: _Value=0xc70, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3184") returned 0x0
	[0252.052] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3184") returned 4
	[0252.053] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.053] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.068] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc70) returned 0x280
	[0252.068] GetLastError () returned 0x0
	[0252.068] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.069] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2fe018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.069] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.069] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x501c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.069] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x501888, lpBuffer=0x115c580, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.070] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.072] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.072] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2fe020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.072] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x501270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.072] malloc (_Size=0x70) returned 0xe067f0
	[0252.072] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5018f0, lpBuffer=0xe067f0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.073] free (_Block=0xe067f0) 
	[0252.075] CloseHandle (hObject=0x280) returned 1
	[0252.075] _ui64tow_s (in: _Value=0x894, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2196") returned 0x0
	[0252.082] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2196") returned 4
	[0252.084] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.084] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.102] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x894) returned 0x280
	[0252.102] GetLastError () returned 0x0
	[0252.102] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.102] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2de018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.102] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.103] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4c1c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.103] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4c1888, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.104] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.105] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.105] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2de020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.105] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4c1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.106] malloc (_Size=0x6e) returned 0xe067f0
	[0252.106] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4c18ee, lpBuffer=0xe067f0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.106] free (_Block=0xe067f0) 
	[0252.108] CloseHandle (hObject=0x280) returned 1
	[0252.108] _ui64tow_s (in: _Value=0x1e0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="480") returned 0x0
	[0252.113] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="480") returned 3
	[0252.115] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.115] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.136] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e0) returned 0x280
	[0252.136] GetLastError () returned 0x0
	[0252.137] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.137] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x41f018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.137] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.137] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x761c90, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.137] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x761888, lpBuffer=0x115c580, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.142] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.143] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.144] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x41f020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.144] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x761270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.144] malloc (_Size=0x78) returned 0xe067f0
	[0252.144] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7618f8, lpBuffer=0xe067f0, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.145] free (_Block=0xe067f0) 
	[0252.146] CloseHandle (hObject=0x280) returned 1
	[0252.147] _ui64tow_s (in: _Value=0x664, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1636") returned 0x0
	[0252.152] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1636") returned 4
	[0252.153] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.153] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.178] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x664) returned 0x280
	[0252.179] GetLastError () returned 0x0
	[0252.179] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.179] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x20a018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.179] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.179] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4d1c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.179] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4d1888, lpBuffer=0x115c580, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.180] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.182] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.182] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x20a020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.182] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4d1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.182] malloc (_Size=0x66) returned 0xdfff50
	[0252.183] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4d18e6, lpBuffer=0xdfff50, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfff50*, lpNumberOfBytesRead=0x0) returned 1
	[0252.183] free (_Block=0xdfff50) 
	[0252.184] CloseHandle (hObject=0x280) returned 1
	[0252.187] _ui64tow_s (in: _Value=0xcf4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3316") returned 0x0
	[0252.192] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3316") returned 4
	[0252.193] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.193] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.218] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcf4) returned 0x280
	[0252.219] GetLastError () returned 0x0
	[0252.219] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.219] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x20f018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.219] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.219] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1cb0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.219] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1888, lpBuffer=0x115c580, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.221] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.222] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.222] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x20f020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.223] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.223] malloc (_Size=0x84) returned 0xe067f0
	[0252.223] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1904, lpBuffer=0xe067f0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.224] free (_Block=0xe067f0) 
	[0252.224] CloseHandle (hObject=0x280) returned 1
	[0252.225] _ui64tow_s (in: _Value=0xba4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2980") returned 0x0
	[0252.231] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2980") returned 4
	[0252.232] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.232] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xba4) returned 0x280
	[0252.256] GetLastError () returned 0x0
	[0252.256] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.256] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.257] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.257] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481c90, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.257] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481888, lpBuffer=0x115c580, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.258] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.260] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.260] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.260] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.260] malloc (_Size=0x7a) returned 0xe067f0
	[0252.260] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4818fa, lpBuffer=0xe067f0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.261] free (_Block=0xe067f0) 
	[0252.262] CloseHandle (hObject=0x280) returned 1
	[0252.263] _ui64tow_s (in: _Value=0xba0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2976") returned 0x0
	[0252.268] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2976") returned 4
	[0252.270] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.270] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.292] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xba0) returned 0x280
	[0252.292] GetLastError () returned 0x0
	[0252.292] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.292] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c8018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.293] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.293] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1c80, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.293] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1888, lpBuffer=0x115c580, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.294] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.296] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.296] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c8020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.296] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.296] malloc (_Size=0x74) returned 0xe067f0
	[0252.296] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b18f4, lpBuffer=0xe067f0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.297] free (_Block=0xe067f0) 
	[0252.298] CloseHandle (hObject=0x280) returned 1
	[0252.304] _ui64tow_s (in: _Value=0xd10, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3344") returned 0x0
	[0252.310] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3344") returned 4
	[0252.311] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.311] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.332] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd10) returned 0x280
	[0252.332] GetLastError () returned 0x0
	[0252.333] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.333] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x30b018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.333] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.333] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571c40, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.333] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571888, lpBuffer=0x115c580, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.334] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.336] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.336] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x30b020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.336] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.336] malloc (_Size=0x60) returned 0xdfffc0
	[0252.337] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5718e0, lpBuffer=0xdfffc0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfffc0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.337] free (_Block=0xdfffc0) 
	[0252.338] CloseHandle (hObject=0x280) returned 1
	[0252.339] _ui64tow_s (in: _Value=0xc64, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3172") returned 0x0
	[0252.344] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3172") returned 4
	[0252.345] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.346] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.364] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc64) returned 0x280
	[0252.364] GetLastError () returned 0x0
	[0252.364] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.365] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e9018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.365] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.366] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1f1c40, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.367] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1f1888, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.369] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.371] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.371] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e9020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.371] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1f1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.371] malloc (_Size=0x5e) returned 0xe00420
	[0252.371] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1f18de, lpBuffer=0xe00420, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00420*, lpNumberOfBytesRead=0x0) returned 1
	[0252.372] free (_Block=0xe00420) 
	[0252.373] CloseHandle (hObject=0x280) returned 1
	[0252.374] _ui64tow_s (in: _Value=0xbb8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3000") returned 0x0
	[0252.379] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3000") returned 4
	[0252.381] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.381] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.401] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbb8) returned 0x280
	[0252.402] GetLastError () returned 0x0
	[0252.402] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.402] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x33e018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.402] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.402] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1c80, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.402] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1888, lpBuffer=0x115c580, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.403] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.404] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.404] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x33e020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.405] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.405] malloc (_Size=0x74) returned 0xe067f0
	[0252.405] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e18f4, lpBuffer=0xe067f0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.406] free (_Block=0xe067f0) 
	[0252.406] CloseHandle (hObject=0x280) returned 1
	[0252.410] _ui64tow_s (in: _Value=0xc90, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3216") returned 0x0
	[0252.415] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3216") returned 4
	[0252.416] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.417] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.436] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc90) returned 0x280
	[0252.436] GetLastError () returned 0x0
	[0252.437] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.437] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3b4018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.437] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.437] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491ca0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.437] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491888, lpBuffer=0x115c580, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.439] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.440] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.440] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3b4020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.441] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.441] malloc (_Size=0x7c) returned 0xe067f0
	[0252.441] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4918fc, lpBuffer=0xe067f0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.442] free (_Block=0xe067f0) 
	[0252.443] CloseHandle (hObject=0x280) returned 1
	[0252.443] _ui64tow_s (in: _Value=0xc84, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3204") returned 0x0
	[0252.452] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3204") returned 4
	[0252.454] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.454] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.474] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc84) returned 0x280
	[0252.474] GetLastError () returned 0x0
	[0252.474] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.474] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x345018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.474] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.474] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.475] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491888, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.476] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.477] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.477] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x345020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.477] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.478] malloc (_Size=0x64) returned 0xdfff50
	[0252.478] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4918e4, lpBuffer=0xdfff50, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfff50*, lpNumberOfBytesRead=0x0) returned 1
	[0252.478] free (_Block=0xdfff50) 
	[0252.480] CloseHandle (hObject=0x280) returned 1
	[0252.480] _ui64tow_s (in: _Value=0x528, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1320") returned 0x0
	[0252.486] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1320") returned 4
	[0252.487] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.487] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.513] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x528) returned 0x280
	[0252.513] GetLastError () returned 0x0
	[0252.513] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.514] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b0018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.514] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.514] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491c40, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.514] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491888, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.515] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.517] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.517] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b0020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.517] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x491270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.517] malloc (_Size=0x5e) returned 0xdffe70
	[0252.517] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4918de, lpBuffer=0xdffe70, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdffe70*, lpNumberOfBytesRead=0x0) returned 1
	[0252.518] free (_Block=0xdffe70) 
	[0252.519] CloseHandle (hObject=0x280) returned 1
	[0252.519] _ui64tow_s (in: _Value=0x50c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1292") returned 0x0
	[0252.526] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1292") returned 4
	[0252.528] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.528] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.551] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x280
	[0252.551] GetLastError () returned 0x0
	[0252.551] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.551] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x28a018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.551] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.551] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x451cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.551] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x451888, lpBuffer=0x115c580, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.552] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.553] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.553] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x28a020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.554] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x451270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.554] malloc (_Size=0x88) returned 0xe067f0
	[0252.554] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x451908, lpBuffer=0xe067f0, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.555] free (_Block=0xe067f0) 
	[0252.556] CloseHandle (hObject=0x280) returned 1
	[0252.557] _ui64tow_s (in: _Value=0x988, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2440") returned 0x0
	[0252.562] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2440") returned 4
	[0252.563] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.563] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.589] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x988) returned 0x280
	[0252.589] GetLastError () returned 0x0
	[0252.589] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.589] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b3018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.589] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.589] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531c90, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.589] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531888, lpBuffer=0x115c580, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.591] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.592] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.592] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b3020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.592] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.592] malloc (_Size=0x78) returned 0xe067f0
	[0252.592] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5318f8, lpBuffer=0xe067f0, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.593] free (_Block=0xe067f0) 
	[0252.594] CloseHandle (hObject=0x280) returned 1
	[0252.594] _ui64tow_s (in: _Value=0xcec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3308") returned 0x0
	[0252.601] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3308") returned 4
	[0252.602] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.602] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.621] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcec) returned 0x280
	[0252.621] GetLastError () returned 0x0
	[0252.622] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.622] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x25b018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.622] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.622] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5b1c40, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.622] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5b1888, lpBuffer=0x115c580, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.624] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.625] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.625] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x25b020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.625] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5b1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.625] malloc (_Size=0x60) returned 0xe003b0
	[0252.625] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5b18e0, lpBuffer=0xe003b0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.626] free (_Block=0xe003b0) 
	[0252.626] CloseHandle (hObject=0x280) returned 1
	[0252.668] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0
	[0252.679] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4
	[0252.680] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.680] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.695] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x280
	[0252.695] GetLastError () returned 0x0
	[0252.695] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.695] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x395018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.695] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.695] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1c30, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.695] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1888, lpBuffer=0x115c580, nSize=0x4e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.696] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.697] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.697] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x395020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.697] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.698] malloc (_Size=0x56) returned 0xe08840
	[0252.698] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c18d6, lpBuffer=0xe08840, nSize=0x54, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe08840*, lpNumberOfBytesRead=0x0) returned 1
	[0252.698] free (_Block=0xe08840) 
	[0252.700] CloseHandle (hObject=0x280) returned 1
	[0252.701] _ui64tow_s (in: _Value=0xf8c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3980") returned 0x0
	[0252.705] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3980") returned 4
	[0252.706] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.706] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.746] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8c) returned 0x280
	[0252.746] GetLastError () returned 0x0
	[0252.746] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.746] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x337018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.746] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.747] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1dd0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.747] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1988, lpBuffer=0x115c580, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.748] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.749] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.749] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x337020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.750] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1370, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.750] malloc (_Size=0xbc) returned 0xe067f0
	[0252.750] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c19f4, lpBuffer=0xe067f0, nSize=0xba, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.751] free (_Block=0xe067f0) 
	[0252.751] CloseHandle (hObject=0x280) returned 1
	[0252.752] _ui64tow_s (in: _Value=0xcb0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3248") returned 0x0
	[0252.757] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3248") returned 4
	[0252.758] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.758] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.794] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcb0) returned 0x280
	[0252.794] GetLastError () returned 0x0
	[0252.794] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.794] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x399018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.795] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.795] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x511c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.795] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x511888, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.796] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.797] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.797] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x399020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.797] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x511270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.797] malloc (_Size=0x64) returned 0xe003b0
	[0252.797] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5118e4, lpBuffer=0xe003b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.798] free (_Block=0xe003b0) 
	[0252.799] CloseHandle (hObject=0x280) returned 1
	[0252.800] _ui64tow_s (in: _Value=0xb18, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2840") returned 0x0
	[0252.806] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2840") returned 4
	[0252.807] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.807] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.821] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb18) returned 0x280
	[0252.821] GetLastError () returned 0x0
	[0252.822] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.822] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2f7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.822] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.822] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x511c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.822] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x511888, lpBuffer=0x115c580, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.843] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.844] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.844] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2f7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.845] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x511270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.845] malloc (_Size=0x68) returned 0xe003b0
	[0252.845] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5118e8, lpBuffer=0xe003b0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.846] free (_Block=0xe003b0) 
	[0252.847] CloseHandle (hObject=0x280) returned 1
	[0252.847] _ui64tow_s (in: _Value=0xfa0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4000") returned 0x0
	[0252.851] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4000") returned 4
	[0252.852] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.852] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfa0) returned 0x280
	[0252.867] GetLastError () returned 0x0
	[0252.867] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.867] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x26f018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.867] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.868] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1c80, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.868] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1888, lpBuffer=0x115c580, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.869] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.870] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.870] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x26f020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.870] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.870] malloc (_Size=0x74) returned 0xe067f0
	[0252.870] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e18f4, lpBuffer=0xe067f0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.871] free (_Block=0xe067f0) 
	[0252.871] CloseHandle (hObject=0x280) returned 1
	[0252.872] _ui64tow_s (in: _Value=0xfb4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4020") returned 0x0
	[0252.876] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4020") returned 4
	[0252.877] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.877] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.923] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb4) returned 0x280
	[0252.923] GetLastError () returned 0x0
	[0252.923] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.923] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x30a018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.923] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.923] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571ca0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.924] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571888, lpBuffer=0x115c580, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.925] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.926] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.926] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x30a020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.926] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.926] malloc (_Size=0x7c) returned 0xe067f0
	[0252.927] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5718fc, lpBuffer=0xe067f0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.927] free (_Block=0xe067f0) 
	[0252.928] CloseHandle (hObject=0x280) returned 1
	[0252.928] _ui64tow_s (in: _Value=0x5c0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1472") returned 0x0
	[0252.933] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1472") returned 4
	[0252.934] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.934] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0252.967] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5c0) returned 0x280
	[0252.967] GetLastError () returned 0x0
	[0252.967] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0252.967] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a2018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0252.968] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0252.968] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0252.968] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1888, lpBuffer=0x115c580, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0252.982] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0252.984] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0252.984] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a2020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0252.984] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0252.984] malloc (_Size=0x70) returned 0xe067f0
	[0252.984] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e18f0, lpBuffer=0xe067f0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0252.985] free (_Block=0xe067f0) 
	[0252.986] CloseHandle (hObject=0x280) returned 1
	[0252.986] _ui64tow_s (in: _Value=0xb80, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2944") returned 0x0
	[0252.991] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2944") returned 4
	[0252.993] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0252.993] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.077] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb80) returned 0x280
	[0253.077] GetLastError () returned 0x0
	[0253.078] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.078] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x247018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.078] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.078] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5d1c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.078] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5d1888, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.079] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.081] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.081] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x247020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.081] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5d1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.081] malloc (_Size=0x6e) returned 0xe067f0
	[0253.081] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5d18ee, lpBuffer=0xe067f0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0253.082] free (_Block=0xe067f0) 
	[0253.083] CloseHandle (hObject=0x280) returned 1
	[0253.083] _ui64tow_s (in: _Value=0x328, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="808") returned 0x0
	[0253.088] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="808") returned 3
	[0253.089] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.089] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.109] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x328) returned 0x280
	[0253.110] GetLastError () returned 0x0
	[0253.110] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.110] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a1018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.110] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.110] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1c80, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.110] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1888, lpBuffer=0x115c580, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.111] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.132] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.132] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a1020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.132] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.133] malloc (_Size=0x74) returned 0xe067f0
	[0253.133] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b18f4, lpBuffer=0xe067f0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0253.134] free (_Block=0xe067f0) 
	[0253.134] CloseHandle (hObject=0x280) returned 1
	[0253.135] _ui64tow_s (in: _Value=0xfc0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4032") returned 0x0
	[0253.140] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4032") returned 4
	[0253.141] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.141] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.159] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc0) returned 0x280
	[0253.159] GetLastError () returned 0x0
	[0253.159] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.159] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x252018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.160] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.160] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.160] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1888, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.161] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.162] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.162] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x252020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.162] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.162] malloc (_Size=0x64) returned 0xe00420
	[0253.163] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c18e4, lpBuffer=0xe00420, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00420*, lpNumberOfBytesRead=0x0) returned 1
	[0253.164] free (_Block=0xe00420) 
	[0253.164] CloseHandle (hObject=0x280) returned 1
	[0253.165] _ui64tow_s (in: _Value=0x254, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="596") returned 0x0
	[0253.191] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="596") returned 3
	[0253.192] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.192] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.206] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x280
	[0253.206] GetLastError () returned 0x0
	[0253.206] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.206] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x312018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.206] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.206] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.206] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1888, lpBuffer=0x115c580, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.209] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.210] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.210] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x312020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.210] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.210] malloc (_Size=0x8a) returned 0xe067f0
	[0253.210] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5c190a, lpBuffer=0xe067f0, nSize=0x88, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0253.211] free (_Block=0xe067f0) 
	[0253.212] CloseHandle (hObject=0x280) returned 1
	[0253.212] _ui64tow_s (in: _Value=0x3e0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="992") returned 0x0
	[0253.216] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="992") returned 3
	[0253.217] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.217] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.370] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3e0) returned 0x280
	[0253.370] GetLastError () returned 0x0
	[0253.370] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.370] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a4018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.370] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.370] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1d10, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.370] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b18f8, lpBuffer=0x115c580, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.371] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.372] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.372] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2a4020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.372] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.373] malloc (_Size=0x80) returned 0xe067f0
	[0253.373] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1970, lpBuffer=0xe067f0, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0253.373] free (_Block=0xe067f0) 
	[0253.374] CloseHandle (hObject=0x280) returned 1
	[0253.374] _ui64tow_s (in: _Value=0x2a4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="676") returned 0x0
	[0253.378] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="676") returned 3
	[0253.379] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.379] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.393] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2a4) returned 0x280
	[0253.393] GetLastError () returned 0x0
	[0253.394] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.394] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2ac018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.394] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.394] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1e1c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.394] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1e1888, lpBuffer=0x115c580, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.395] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.396] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.396] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2ac020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.396] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1e1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.396] malloc (_Size=0x62) returned 0xe00500
	[0253.396] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x1e18e2, lpBuffer=0xe00500, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00500*, lpNumberOfBytesRead=0x0) returned 1
	[0253.397] free (_Block=0xe00500) 
	[0253.473] CloseHandle (hObject=0x280) returned 1
	[0253.474] _ui64tow_s (in: _Value=0x550, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1360") returned 0x0
	[0253.486] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1360") returned 4
	[0253.490] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.490] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.562] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x550) returned 0x280
	[0253.562] GetLastError () returned 0x0
	[0253.562] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.562] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x32c018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.562] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.562] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.562] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1888, lpBuffer=0x115c580, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.563] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.564] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.564] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x32c020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.565] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.565] malloc (_Size=0x62) returned 0xe00420
	[0253.565] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a18e2, lpBuffer=0xe00420, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00420*, lpNumberOfBytesRead=0x0) returned 1
	[0253.566] free (_Block=0xe00420) 
	[0253.566] CloseHandle (hObject=0x280) returned 1
	[0253.567] _ui64tow_s (in: _Value=0x1018, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4120") returned 0x0
	[0253.571] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4120") returned 4
	[0253.572] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.572] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1018) returned 0x280
	[0253.644] GetLastError () returned 0x0
	[0253.644] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.644] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x268018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.645] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.645] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.645] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591888, lpBuffer=0x115c580, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.647] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.649] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.649] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x268020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.649] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.649] malloc (_Size=0x68) returned 0xe00500
	[0253.649] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5918e8, lpBuffer=0xe00500, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00500*, lpNumberOfBytesRead=0x0) returned 1
	[0253.650] free (_Block=0xe00500) 
	[0253.651] CloseHandle (hObject=0x280) returned 1
	[0253.652] _ui64tow_s (in: _Value=0x1044, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4164") returned 0x0
	[0253.657] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4164") returned 4
	[0253.659] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.659] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.714] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1044) returned 0x280
	[0253.714] GetLastError () returned 0x0
	[0253.714] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.714] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x276018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.714] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.715] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.715] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1888, lpBuffer=0x115c580, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.716] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.717] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.717] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x276020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.717] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.717] malloc (_Size=0x70) returned 0xe067f0
	[0253.717] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e18f0, lpBuffer=0xe067f0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0253.718] free (_Block=0xe067f0) 
	[0253.758] CloseHandle (hObject=0x280) returned 1
	[0253.759] _ui64tow_s (in: _Value=0x1050, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4176") returned 0x0
	[0253.764] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4176") returned 4
	[0253.766] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.766] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.798] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1050) returned 0x280
	[0253.798] GetLastError () returned 0x0
	[0253.798] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.798] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b1018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.799] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.799] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x501c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.799] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x501888, lpBuffer=0x115c580, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.800] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.802] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.802] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2b1020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.802] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x501270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.802] malloc (_Size=0x6c) returned 0xe067f0
	[0253.802] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5018ec, lpBuffer=0xe067f0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0253.803] free (_Block=0xe067f0) 
	[0253.858] CloseHandle (hObject=0x280) returned 1
	[0253.858] _ui64tow_s (in: _Value=0x1058, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4184") returned 0x0
	[0253.863] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4184") returned 4
	[0253.865] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.865] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.882] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1058) returned 0x280
	[0253.882] GetLastError () returned 0x0
	[0253.882] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.882] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x323018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.882] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.882] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x541c40, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.882] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x541888, lpBuffer=0x115c580, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.883] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.885] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.885] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x323020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.885] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x541270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.885] malloc (_Size=0x60) returned 0xdfffc0
	[0253.885] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5418e0, lpBuffer=0xdfffc0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfffc0*, lpNumberOfBytesRead=0x0) returned 1
	[0253.886] free (_Block=0xdfffc0) 
	[0253.887] CloseHandle (hObject=0x280) returned 1
	[0253.887] _ui64tow_s (in: _Value=0x1060, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4192") returned 0x0
	[0253.930] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4192") returned 4
	[0253.931] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.931] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.947] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1060) returned 0x280
	[0253.948] GetLastError () returned 0x0
	[0253.948] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.948] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x38b018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.948] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.948] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.948] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571888, lpBuffer=0x115c580, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.949] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0253.950] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0253.950] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x38b020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0253.951] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0253.951] malloc (_Size=0x68) returned 0xdfff50
	[0253.951] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5718e8, lpBuffer=0xdfff50, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfff50*, lpNumberOfBytesRead=0x0) returned 1
	[0253.951] free (_Block=0xdfff50) 
	[0253.952] CloseHandle (hObject=0x280) returned 1
	[0253.953] _ui64tow_s (in: _Value=0x1068, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4200") returned 0x0
	[0253.958] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4200") returned 4
	[0253.960] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0253.960] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0253.997] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1068) returned 0x280
	[0253.998] GetLastError () returned 0x0
	[0253.998] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0253.998] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4d5018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0253.998] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0253.998] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x211cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0253.998] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x211888, lpBuffer=0x115c580, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0253.999] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.000] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.000] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4d5020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.001] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x211270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.001] malloc (_Size=0x88) returned 0xe067f0
	[0254.001] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x211908, lpBuffer=0xe067f0, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.001] free (_Block=0xe067f0) 
	[0254.002] CloseHandle (hObject=0x280) returned 1
	[0254.003] _ui64tow_s (in: _Value=0x1070, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4208") returned 0x0
	[0254.007] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4208") returned 4
	[0254.008] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.008] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.053] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1070) returned 0x280
	[0254.054] GetLastError () returned 0x0
	[0254.054] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.054] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c9018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.054] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.054] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x561c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.054] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x561888, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.055] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.056] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.056] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c9020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.056] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x561270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.057] malloc (_Size=0x64) returned 0xe003b0
	[0254.057] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5618e4, lpBuffer=0xe003b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.057] free (_Block=0xe003b0) 
	[0254.058] CloseHandle (hObject=0x280) returned 1
	[0254.059] _ui64tow_s (in: _Value=0x107c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4220") returned 0x0
	[0254.063] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4220") returned 4
	[0254.064] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.064] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.082] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x107c) returned 0x280
	[0254.082] GetLastError () returned 0x0
	[0254.082] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.082] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x28f018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.082] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.082] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481c80, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.082] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481888, lpBuffer=0x115c580, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.083] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.084] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.085] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x28f020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.085] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.085] malloc (_Size=0x74) returned 0xe067f0
	[0254.085] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4818f4, lpBuffer=0xe067f0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.086] free (_Block=0xe067f0) 
	[0254.089] CloseHandle (hObject=0x280) returned 1
	[0254.089] _ui64tow_s (in: _Value=0x1090, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4240") returned 0x0
	[0254.094] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4240") returned 4
	[0254.095] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.095] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.113] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1090) returned 0x280
	[0254.114] GetLastError () returned 0x0
	[0254.114] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.114] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x259018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.114] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.114] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5d1ca0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.114] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5d1888, lpBuffer=0x115c580, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.115] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.116] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.117] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x259020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.117] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5d1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.117] malloc (_Size=0x7c) returned 0xe067f0
	[0254.117] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5d18fc, lpBuffer=0xe067f0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.118] free (_Block=0xe067f0) 
	[0254.118] CloseHandle (hObject=0x280) returned 1
	[0254.119] _ui64tow_s (in: _Value=0x10a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4264") returned 0x0
	[0254.123] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4264") returned 4
	[0254.133] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.134] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.163] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10a8) returned 0x280
	[0254.163] GetLastError () returned 0x0
	[0254.163] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.163] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x573018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.164] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.164] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x271c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.164] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x271888, lpBuffer=0x115c580, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.165] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.166] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.166] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x573020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.166] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x271270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.166] malloc (_Size=0x66) returned 0xe003b0
	[0254.166] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2718e6, lpBuffer=0xe003b0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.167] free (_Block=0xe003b0) 
	[0254.168] CloseHandle (hObject=0x280) returned 1
	[0254.168] _ui64tow_s (in: _Value=0x10b4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4276") returned 0x0
	[0254.173] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4276") returned 4
	[0254.174] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.174] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.192] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10b4) returned 0x280
	[0254.192] GetLastError () returned 0x0
	[0254.193] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.193] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x31c018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.193] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.193] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.193] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531888, lpBuffer=0x115c580, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.194] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.196] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.196] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x31c020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.196] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x531270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.196] malloc (_Size=0x62) returned 0xdfffc0
	[0254.196] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5318e2, lpBuffer=0xdfffc0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xdfffc0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.197] free (_Block=0xdfffc0) 
	[0254.198] CloseHandle (hObject=0x280) returned 1
	[0254.198] _ui64tow_s (in: _Value=0x10c0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4288") returned 0x0
	[0254.203] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4288") returned 4
	[0254.204] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.204] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.224] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10c0) returned 0x280
	[0254.224] GetLastError () returned 0x0
	[0254.224] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.225] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5f0018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.225] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.225] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x381c90, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.225] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x381888, lpBuffer=0x115c580, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.226] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.227] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.227] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5f0020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.227] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x381270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.227] malloc (_Size=0x78) returned 0xe067f0
	[0254.227] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3818f8, lpBuffer=0xe067f0, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.228] free (_Block=0xe067f0) 
	[0254.229] CloseHandle (hObject=0x280) returned 1
	[0254.229] _ui64tow_s (in: _Value=0x10cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4300") returned 0x0
	[0254.234] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4300") returned 4
	[0254.235] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.235] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.252] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10cc) returned 0x280
	[0254.252] GetLastError () returned 0x0
	[0254.252] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.252] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x278018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.252] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.252] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.253] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481888, lpBuffer=0x115c580, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.254] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.255] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.255] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x278020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.255] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x481270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.255] malloc (_Size=0x62) returned 0xe00420
	[0254.255] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4818e2, lpBuffer=0xe00420, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00420*, lpNumberOfBytesRead=0x0) returned 1
	[0254.256] free (_Block=0xe00420) 
	[0254.257] CloseHandle (hObject=0x280) returned 1
	[0254.257] _ui64tow_s (in: _Value=0x10d8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4312") returned 0x0
	[0254.264] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4312") returned 4
	[0254.265] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.266] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.283] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10d8) returned 0x280
	[0254.283] GetLastError () returned 0x0
	[0254.283] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.283] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2ac018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.283] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.284] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1cd0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.284] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1888, lpBuffer=0x115c580, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.285] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.287] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.287] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2ac020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.288] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.288] malloc (_Size=0x8c) returned 0xe067f0
	[0254.288] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a190c, lpBuffer=0xe067f0, nSize=0x8a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.289] free (_Block=0xe067f0) 
	[0254.289] CloseHandle (hObject=0x280) returned 1
	[0254.290] _ui64tow_s (in: _Value=0x10e8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4328") returned 0x0
	[0254.294] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4328") returned 4
	[0254.295] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.295] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.314] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10e8) returned 0x280
	[0254.314] GetLastError () returned 0x0
	[0254.314] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.314] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x267018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.314] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.314] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5b1cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.314] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5b1888, lpBuffer=0x115c580, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.315] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.317] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.317] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x267020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.317] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5b1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.317] malloc (_Size=0x86) returned 0xe067f0
	[0254.317] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5b1906, lpBuffer=0xe067f0, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.318] free (_Block=0xe067f0) 
	[0254.318] CloseHandle (hObject=0x280) returned 1
	[0254.319] _ui64tow_s (in: _Value=0x10fc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4348") returned 0x0
	[0254.324] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4348") returned 4
	[0254.326] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.326] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.343] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10fc) returned 0x280
	[0254.343] GetLastError () returned 0x0
	[0254.343] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.344] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3fb018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.345] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.345] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1c30, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.345] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1888, lpBuffer=0x115c580, nSize=0x4e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.346] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.347] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.347] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3fb020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.347] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.348] malloc (_Size=0x56) returned 0xe086c0
	[0254.348] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4e18d6, lpBuffer=0xe086c0, nSize=0x54, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe086c0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.348] free (_Block=0xe086c0) 
	[0254.349] CloseHandle (hObject=0x280) returned 1
	[0254.368] _ui64tow_s (in: _Value=0x1108, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4360") returned 0x0
	[0254.373] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4360") returned 4
	[0254.374] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.374] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.389] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1108) returned 0x280
	[0254.389] GetLastError () returned 0x0
	[0254.389] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.390] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x467018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.390] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.390] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7b1c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.390] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7b1888, lpBuffer=0x115c580, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.391] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.426] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.427] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x467020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.427] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7b1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.427] malloc (_Size=0x6a) returned 0xe067f0
	[0254.427] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7b18ea, lpBuffer=0xe067f0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.428] free (_Block=0xe067f0) 
	[0254.429] CloseHandle (hObject=0x280) returned 1
	[0254.429] _ui64tow_s (in: _Value=0x1110, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4368") returned 0x0
	[0254.434] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4368") returned 4
	[0254.435] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.435] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.453] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1110) returned 0x280
	[0254.453] GetLastError () returned 0x0
	[0254.454] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.454] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.454] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.454] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1ca0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.454] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1888, lpBuffer=0x115c580, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.455] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.456] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.456] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.456] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.457] malloc (_Size=0x7e) returned 0xe067f0
	[0254.457] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5e18fe, lpBuffer=0xe067f0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.457] free (_Block=0xe067f0) 
	[0254.458] CloseHandle (hObject=0x280) returned 1
	[0254.458] _ui64tow_s (in: _Value=0x111c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4380") returned 0x0
	[0254.463] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4380") returned 4
	[0254.492] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.493] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.507] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x111c) returned 0x280
	[0254.507] GetLastError () returned 0x0
	[0254.507] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.507] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x28c018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.507] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.508] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.508] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591888, lpBuffer=0x115c580, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.508] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.509] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.510] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x28c020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.510] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x591270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.510] malloc (_Size=0x6c) returned 0xe067f0
	[0254.510] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5918ec, lpBuffer=0xe067f0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.511] free (_Block=0xe067f0) 
	[0254.511] CloseHandle (hObject=0x280) returned 1
	[0254.512] _ui64tow_s (in: _Value=0x1130, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4400") returned 0x0
	[0254.517] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4400") returned 4
	[0254.518] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.518] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.568] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1130) returned 0x280
	[0254.568] GetLastError () returned 0x0
	[0254.568] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.568] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c3018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.568] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.568] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5a1c40, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.569] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5a1888, lpBuffer=0x115c580, nSize=0x54, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.569] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.570] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.571] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3c3020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.571] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5a1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.571] malloc (_Size=0x5c) returned 0xe00500
	[0254.571] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5a18dc, lpBuffer=0xe00500, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe00500*, lpNumberOfBytesRead=0x0) returned 1
	[0254.572] free (_Block=0xe00500) 
	[0254.572] CloseHandle (hObject=0x280) returned 1
	[0254.573] _ui64tow_s (in: _Value=0x1138, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4408") returned 0x0
	[0254.577] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4408") returned 4
	[0254.578] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.578] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.591] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1138) returned 0x280
	[0254.591] GetLastError () returned 0x0
	[0254.591] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.592] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x21f018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.592] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.592] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x461c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.592] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x461888, lpBuffer=0x115c580, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.593] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.594] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.594] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x21f020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.594] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x461270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.594] malloc (_Size=0x68) returned 0xe003b0
	[0254.594] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4618e8, lpBuffer=0xe003b0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.595] free (_Block=0xe003b0) 
	[0254.596] CloseHandle (hObject=0x280) returned 1
	[0254.596] _ui64tow_s (in: _Value=0x1140, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4416") returned 0x0
	[0254.633] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4416") returned 4
	[0254.634] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.634] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.650] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1140) returned 0x280
	[0254.650] GetLastError () returned 0x0
	[0254.650] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.650] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x219018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.650] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1ca0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.651] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1888, lpBuffer=0x115c580, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.652] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.655] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.655] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x219020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.655] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.655] malloc (_Size=0x7c) returned 0xe067f0
	[0254.655] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a18fc, lpBuffer=0xe067f0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.656] free (_Block=0xe067f0) 
	[0254.657] CloseHandle (hObject=0x280) returned 1
	[0254.658] _ui64tow_s (in: _Value=0x114c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4428") returned 0x0
	[0254.661] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4428") returned 4
	[0254.662] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.662] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.711] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x114c) returned 0x280
	[0254.711] GetLastError () returned 0x0
	[0254.711] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.711] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x35f018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.711] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.711] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x541c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.711] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x541888, lpBuffer=0x115c580, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.712] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.713] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.713] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x35f020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.714] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x541270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.714] malloc (_Size=0x66) returned 0xe003b0
	[0254.714] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5418e6, lpBuffer=0xe003b0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.714] free (_Block=0xe003b0) 
	[0254.717] CloseHandle (hObject=0x280) returned 1
	[0254.718] _ui64tow_s (in: _Value=0x11b0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4528") returned 0x0
	[0254.722] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4528") returned 4
	[0254.723] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.723] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11b0) returned 0x280
	[0254.758] GetLastError () returned 0x0
	[0254.758] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.758] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3de018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.758] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.758] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.758] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1888, lpBuffer=0x115c580, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.759] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.760] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.760] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3de020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.760] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.761] malloc (_Size=0x6a) returned 0xe067f0
	[0254.761] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f18ea, lpBuffer=0xe067f0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.761] free (_Block=0xe067f0) 
	[0254.762] CloseHandle (hObject=0x280) returned 1
	[0254.763] _ui64tow_s (in: _Value=0x11b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4536") returned 0x0
	[0254.766] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4536") returned 4
	[0254.767] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.767] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.782] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11b8) returned 0x280
	[0254.782] GetLastError () returned 0x0
	[0254.782] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.782] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3ef018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.782] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.782] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1c60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.783] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1888, lpBuffer=0x115c580, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.783] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.784] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.784] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3ef020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.785] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.785] malloc (_Size=0x68) returned 0xe003b0
	[0254.785] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4f18e8, lpBuffer=0xe003b0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe003b0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.785] free (_Block=0xe003b0) 
	[0254.787] CloseHandle (hObject=0x280) returned 1
	[0254.788] _ui64tow_s (in: _Value=0x11c0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4544") returned 0x0
	[0254.811] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4544") returned 4
	[0254.812] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.812] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0254.830] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11c0) returned 0x280
	[0254.830] GetLastError () returned 0x0
	[0254.830] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0254.830] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2bc018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0254.830] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0254.830] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x551c90, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0254.831] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x551888, lpBuffer=0x115c580, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0254.831] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0254.833] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0254.833] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2bc020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0254.833] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x551270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0254.833] malloc (_Size=0x76) returned 0xe067f0
	[0254.833] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5518f6, lpBuffer=0xe067f0, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0254.833] free (_Block=0xe067f0) 
	[0254.834] CloseHandle (hObject=0x280) returned 1
	[0254.835] _ui64tow_s (in: _Value=0x11cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4556") returned 0x0
	[0254.839] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4556") returned 4
	[0254.840] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0254.841] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.067] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11cc) returned 0x280
	[0255.067] GetLastError () returned 0x0
	[0255.067] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0255.067] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x25e018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0255.068] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0255.068] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1ca0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0255.068] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1888, lpBuffer=0x115c580, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0255.069] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0255.070] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0255.070] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x25e020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0255.071] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0255.071] malloc (_Size=0x7e) returned 0xe067f0
	[0255.071] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4a18fe, lpBuffer=0xe067f0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0255.075] free (_Block=0xe067f0) 
	[0255.075] CloseHandle (hObject=0x280) returned 1
	[0255.076] _ui64tow_s (in: _Value=0x11f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4596") returned 0x0
	[0255.080] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4596") returned 4
	[0255.081] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0255.081] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.099] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11f4) returned 0x280
	[0255.100] GetLastError () returned 0x0
	[0255.100] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0255.100] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3a8018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0255.100] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0255.100] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1c80, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0255.100] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1888, lpBuffer=0x115c580, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0255.101] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0255.102] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0255.102] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x3a8020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0255.102] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b1270, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0255.103] malloc (_Size=0x72) returned 0xe067f0
	[0255.103] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x4b18f2, lpBuffer=0xe067f0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0255.103] free (_Block=0xe067f0) 
	[0255.104] CloseHandle (hObject=0x280) returned 1
	[0255.104] _ui64tow_s (in: _Value=0x1204, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4612") returned 0x0
	[0255.109] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4612") returned 4
	[0255.110] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0255.110] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.124] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1204) returned 0x280
	[0255.124] GetLastError () returned 0x0
	[0255.124] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0255.125] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2ba018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0255.125] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0255.125] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x501b60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0255.125] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5017a8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0255.125] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0255.126] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0255.127] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2ba020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0255.127] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x501190, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0255.127] malloc (_Size=0x76) returned 0xe031c0
	[0255.127] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x5017f4, lpBuffer=0xe031c0, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe031c0*, lpNumberOfBytesRead=0x0) returned 1
	[0255.127] free (_Block=0xe031c0) 
	[0255.128] CloseHandle (hObject=0x280) returned 1
	[0255.129] _ui64tow_s (in: _Value=0x1284, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4740") returned 0x0
	[0255.134] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4740") returned 4
	[0255.135] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0255.135] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.149] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1284) returned 0x280
	[0255.149] GetLastError () returned 0x0
	[0255.149] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0255.149] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2cc018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0255.150] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0255.150] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0255.150] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6032b2, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0255.151] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0255.152] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0255.152] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x2cc020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0255.152] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602c00, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0255.152] malloc (_Size=0xce) returned 0xe067f0
	[0255.152] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x603308, lpBuffer=0xe067f0, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0255.153] free (_Block=0xe067f0) 
	[0255.154] CloseHandle (hObject=0x280) returned 1
	[0255.154] _ui64tow_s (in: _Value=0x1290, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4752") returned 0x0
	[0255.158] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4752") returned 4
	[0255.159] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0255.159] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.179] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1290) returned 0x0
	[0255.179] CloseHandle (hObject=0x0) returned 0
	[0255.180] _ui64tow_s (in: _Value=0x12e8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4840") returned 0x0
	[0255.184] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4840") returned 4
	[0255.185] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0255.185] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.200] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x12e8) returned 0x280
	[0255.200] GetLastError () returned 0x0
	[0255.200] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0255.200] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x25b018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0255.200] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0255.200] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6036b0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0255.200] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x6032f6, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0255.201] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0255.202] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0255.202] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x25b020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0255.202] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x602b90, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0255.202] malloc (_Size=0xce) returned 0xe067f0
	[0255.202] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x60334c, lpBuffer=0xe067f0, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe067f0*, lpNumberOfBytesRead=0x0) returned 1
	[0255.203] free (_Block=0xe067f0) 
	[0255.204] CloseHandle (hObject=0x280) returned 1
	[0255.204] _ui64tow_s (in: _Value=0xc08, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3080") returned 0x0
	[0255.209] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3080") returned 4
	[0255.210] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0255.210] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.224] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc08) returned 0x280
	[0255.225] GetLastError () returned 0x0
	[0255.225] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0255.225] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x228018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0255.225] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0255.225] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571be0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0255.225] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571848, lpBuffer=0x115c580, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0255.226] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0255.227] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0255.227] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x228020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0255.228] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571230, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0255.228] malloc (_Size=0x54) returned 0xe07e20
	[0255.228] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x571890, lpBuffer=0xe07e20, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe07e20*, lpNumberOfBytesRead=0x0) returned 1
	[0255.228] free (_Block=0xe07e20) 
	[0255.230] CloseHandle (hObject=0x280) returned 1
	[0255.231] _ui64tow_s (in: _Value=0xc9c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="3228") returned 0x0
	[0255.238] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="3228") returned 4
	[0255.239] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0255.239] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.259] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc9c) returned 0x0
	[0255.259] CloseHandle (hObject=0x0) returned 0
	[0255.260] _ui64tow_s (in: _Value=0x594, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1428") returned 0x0
	[0255.264] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1428") returned 4
	[0255.265] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0255.265] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10
	[0255.287] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x594) returned 0x280
	[0255.287] GetLastError () returned 0x0
	[0255.287] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0
	[0255.287] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x389018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1
	[0255.288] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x7ffdab6d5220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1
	[0255.288] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x461d60, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1
	[0255.288] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x461858, lpBuffer=0x115c580, nSize=0xc6, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1
	[0255.289] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0
	[0255.290] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0
	[0255.290] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x389020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1
	[0255.290] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x461240, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1
	[0255.290] malloc (_Size=0xce) returned 0xe04e80
	[0255.290] ReadProcessMemory (in: hProcess=0x280, lpBaseAddress=0x46191e, lpBuffer=0xe04e80, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe04e80*, lpNumberOfBytesRead=0x0) returned 1
	[0255.291] free (_Block=0xe04e80) 
	[0255.292] CloseHandle (hObject=0x280) returned 1
	[0255.294] free (_Block=0xe091d0) 
	[0255.295] malloc (_Size=0x48) returned 0xdfcfb0
	[0255.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xe79a83b6, dwHighDateTime=0x1d85ff1)) 
	[0255.295] SetEvent (hEvent=0x258) returned 1
	[0255.327] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x528910
	[0255.327] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x528910, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1
	[0255.327] RtlFreeHeap (HeapHandle=0x500000, Flags=0x0, BaseAddress=0x528910) returned 1
	[0255.327] RtlFreeHeap (HeapHandle=0x500000, Flags=0x0, BaseAddress=0x528790) returned 1
	[0257.042] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2
	[0257.096] RtlRestoreLastWin32Error () returned 0x2c9000
	[0257.096] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010) returned 1
	[0257.096] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x528860
	[0257.096] RtlRestoreLastWin32Error () returned 0x2c9000
	[0257.096] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x528860, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x528860, pcchLanguagesBuffer=0x115e010) returned 1
	[0257.096] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x528910
	[0257.096] RtlFreeHeap (HeapHandle=0x500000, Flags=0x0, BaseAddress=0x528860) returned 1
	[0257.097] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x57c590
	[0257.097] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x57c590, pulNumLanguages=0x115e118 | out: pulNumLanguages=0x115e118) returned 1
	[0257.097] RtlFreeHeap (HeapHandle=0x500000, Flags=0x0, BaseAddress=0x57c590) returned 1
	[0257.105] malloc (_Size=0x600) returned 0xe071a0
	[0257.105] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x115d7f8 | out: Buffer=0x0, ReturnedLength=0x115d7f8) returned 0
	[0257.105] GetLastError () returned 0x7a
	[0257.105] malloc (_Size=0x250) returned 0xe05780
	[0257.106] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xe05780, ReturnedLength=0x115d7f8 | out: Buffer=0xe05780, ReturnedLength=0x115d7f8) returned 1
	[0257.106] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4
	[0257.106] GetMaximumProcessorGroupCount () returned 0x1
	[0257.106] malloc (_Size=0x40) returned 0xdfca10
	[0257.106] malloc (_Size=0x40) returned 0xdfca60
	[0257.106] malloc (_Size=0x8) returned 0xe05aa0
	[0257.106] memcpy (in: _Dst=0xdfca10, _Src=0xe057a0, _Size=0x10 | out: _Dst=0xdfca10) returned 0xdfca10
	[0257.117] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4
	[0257.118] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x115d7f0, InputBufferLength=0x2, OutputBuffer=0xe071a0, OutputBufferLength=0x60 | out: OutputBuffer=0xe071a0) returned 0x0
	[0257.118] _vsnwprintf (in: _Buffer=0x115d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115cf88 | out: _Buffer="CPU0") returned 4
	[0257.119] GetCurrentThread () returned 0xfffffffffffffffe
	[0257.119] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cee0, PreviousGroupAffinity=0x115cef0 | out: PreviousGroupAffinity=0x115cef0) returned 1
	[0257.119] GetSystemInfo (in: lpSystemInfo=0x115d020 | out: lpSystemInfo=0x115d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0257.119] mbstowcs (in: _Dest=0x115d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc
	[0257.119] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0
	[0257.123] mbstowcs (in: _Dest=0x115d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27
	[0257.123] GetCurrentThread () returned 0xfffffffffffffffe
	[0257.123] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1
	[0257.131] LoadStringW (in: hInstance=0x7ffd8bd60000, uID=0x2c, lpBuffer=0x115ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6
	[0260.888] malloc (_Size=0x34c34) returned 0xe092e0
	[0260.911] _wtoi (_String="238") returned 238
	[0260.911] _wtoi (_String="6") returned 6
	[0260.911] _itow (in: _Dest=0x0, _Radix=18208192 | out: _Dest=0x0) returned="0"
	[0260.911] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238"
	[0260.911] malloc (_Size=0x4000) returned 0xe3df20
	[0260.911] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xe3df20, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xe3df20*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0
	[0261.064] free (_Block=0xe3df20) 
	[0261.064] Sleep (dwMilliseconds=0x3e8) 
	[0262.066] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238"
	[0262.066] malloc (_Size=0x4000) returned 0xe3df20
	[0262.066] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xe3df20, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xe3df20*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0
	[0262.120] free (_Block=0xe3df20) 
	[0262.122] free (_Block=0xe092e0) 
	[0262.130] _vsnwprintf (in: _Buffer=0x115d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x115cf88 | out: _Buffer="0F8BFBFF00050654") returned 16
	[0262.316] lstrlenW (lpString=" 0") returned 2
	[0262.317] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40
	[0262.318] lstrlenW (lpString="") returned 0
	[0262.319] lstrlenW (lpString="") returned 0
	[0262.320] lstrlenW (lpString="") returned 0
	[0262.323] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1
	[0262.324] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1
	[0262.327] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1
	[0262.327] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1
	[0262.327] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1
	[0262.327] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1
	[0262.327] _vsnwprintf (in: _Buffer=0x115d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115d7c8 | out: _Buffer="CPU0") returned 4
	[0262.329] free (_Block=0xe05aa0) 
	[0262.330] free (_Block=0xdfca60) 
	[0262.331] free (_Block=0xdfca10) 
	[0262.331] free (_Block=0xe05780) 
	[0262.331] free (_Block=0xe071a0) 
	[0262.375] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x576500
	[0262.375] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x576500, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1
	[0262.375] RtlFreeHeap (HeapHandle=0x500000, Flags=0x0, BaseAddress=0x576500) returned 1
	[0262.375] RtlFreeHeap (HeapHandle=0x500000, Flags=0x0, BaseAddress=0x528910) returned 1
	[0262.510] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2
	[0262.686] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2

Thread:
	id = 105
	os_tid = 0x125c

	[0246.736] DllCanUnloadNow () returned 0x1

Thread:
	id = 106
	os_tid = 0x1240


Thread:
	id = 107
	os_tid = 0x123c


Thread:
	id = 108
	os_tid = 0x1238


Thread:
	id = 109
	os_tid = 0x1230


Thread:
	id = 110
	os_tid = 0x1208


Process:
	id = "4"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x657b7000"
	os_pid = "0xadc"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "2"
	os_parent_pid = "0x274"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xe], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ac37" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2810
	        start_va = 0x10000
	          end_va = 0x1ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2811
	        start_va = 0x20000
	          end_va = 0x26fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 2812
	        start_va = 0x30000
	          end_va = 0x44fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2813
	        start_va = 0x50000
	          end_va = 0xcffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2814
	        start_va = 0xd0000
	          end_va = 0xd3fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2815
	        start_va = 0xe0000
	          end_va = 0xe0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2816
	        start_va = 0xf0000
	          end_va = 0xf1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2817
	        start_va = 0x100000
	          end_va = 0x1bdfff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2818
	        start_va = 0x1c0000
	          end_va = 0x1c6fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 2819
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2820
	        start_va = 0x1e0000
	          end_va = 0x1e0fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001e0000"
	        filename = ""

Region:
	              id = 2821
	        start_va = 0x1f0000
	          end_va = 0x1f1fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 2822
	        start_va = 0x200000
	          end_va = 0x3fffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 2823
	        start_va = 0x400000
	          end_va = 0x400fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000400000"
	        filename = ""

Region:
	              id = 2824
	        start_va = 0x410000
	          end_va = 0x410fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000410000"
	        filename = ""

Region:
	              id = 2825
	        start_va = 0x420000
	          end_va = 0x420fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 2826
	        start_va = 0x480000
	          end_va = 0x480fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 2827
	        start_va = 0x490000
	          end_va = 0x58ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000490000"
	        filename = ""

Region:
	              id = 2828
	        start_va = 0x590000
	          end_va = 0x594fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 2829
	        start_va = 0x5a0000
	          end_va = 0x61ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005a0000"
	        filename = ""

Region:
	              id = 2830
	        start_va = 0x630000
	          end_va = 0x63ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000630000"
	        filename = ""

Region:
	              id = 2831
	        start_va = 0x640000
	          end_va = 0x976fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2832
	        start_va = 0x980000
	          end_va = 0xb07fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000980000"
	        filename = ""

Region:
	              id = 2833
	        start_va = 0xb10000
	          end_va = 0xc90fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b10000"
	        filename = ""

Region:
	              id = 2834
	        start_va = 0xca0000
	          end_va = 0xd5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ca0000"
	        filename = ""

Region:
	              id = 2835
	        start_va = 0xd60000
	          end_va = 0xe5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d60000"
	        filename = ""

Region:
	              id = 2836
	        start_va = 0xee0000
	          end_va = 0xf5ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ee0000"
	        filename = ""

Region:
	              id = 2837
	        start_va = 0xf60000
	          end_va = 0xfdffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f60000"
	        filename = ""

Region:
	              id = 2838
	        start_va = 0xfe0000
	          end_va = 0x105ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000fe0000"
	        filename = ""

Region:
	              id = 2839
	        start_va = 0x1060000
	          end_va = 0x10dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001060000"
	        filename = ""

Region:
	              id = 2840
	        start_va = 0x10e0000
	          end_va = 0x115ffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010e0000"
	        filename = ""

Region:
	              id = 2841
	        start_va = 0x1160000
	          end_va = 0x11dffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001160000"
	        filename = ""

Region:
	              id = 2842
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2843
	        start_va = 0x7df5ffec0000
	          end_va = 0x7df5fffbffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffec0000"
	        filename = ""

Region:
	              id = 2844
	        start_va = 0x7df5fffc0000
	          end_va = 0x7df5fffe2fff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5fffc0000"
	        filename = ""

Region:
	              id = 2845
	        start_va = 0x7df5ffff0000
	          end_va = 0x7ff5fffeffff
	       monitored = 1
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffff0000"
	        filename = ""

Region:
	              id = 2846
	        start_va = 0x7ff61e550000
	          end_va = 0x7ff61e5cffff
	       monitored = 0
	     entry_point = 0x7ff61e565f50
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 2847
	        start_va = 0x7ffd90430000
	          end_va = 0x7ffd9047cfff
	       monitored = 0
	     entry_point = 0x7ffd9043b470
	     region_type = mapped_file
	            name = "pdh.dll"
	        filename = "\\Windows\\System32\\pdh.dll" (normalized: "c:\\windows\\system32\\pdh.dll")

Region:
	              id = 2848
	        start_va = 0x7ffd91550000
	          end_va = 0x7ffd9158cfff
	       monitored = 1
	     entry_point = 0x7ffd9155b760
	     region_type = mapped_file
	            name = "wmiprov.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll")

Region:
	              id = 2849
	        start_va = 0x7ffd92550000
	          end_va = 0x7ffd92574fff
	       monitored = 1
	     entry_point = 0x7ffd92565dc0
	     region_type = mapped_file
	            name = "wmiperfclass.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPerfClass.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiperfclass.dll")

Region:
	              id = 2850
	        start_va = 0x7ffd97150000
	          end_va = 0x7ffd97165fff
	       monitored = 0
	     entry_point = 0x7ffd971555e0
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2851
	        start_va = 0x7ffd972c0000
	          end_va = 0x7ffd972e4fff
	       monitored = 0
	     entry_point = 0x7ffd972c9900
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 2852
	        start_va = 0x7ffd972f0000
	          end_va = 0x7ffd97303fff
	       monitored = 0
	     entry_point = 0x7ffd972f1800
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2853
	        start_va = 0x7ffd97350000
	          end_va = 0x7ffd97445fff
	       monitored = 0
	     entry_point = 0x7ffd97389590
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2854
	        start_va = 0x7ffd97630000
	          end_va = 0x7ffd97640fff
	       monitored = 0
	     entry_point = 0x7ffd97632fc0
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2855
	        start_va = 0x7ffd9b340000
	          end_va = 0x7ffd9b3befff
	       monitored = 1
	     entry_point = 0x7ffd9b357110
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2856
	        start_va = 0x7ffda1ea0000
	          end_va = 0x7ffda1eb0fff
	       monitored = 0
	     entry_point = 0x7ffda1ea3320
	     region_type = mapped_file
	            name = "wmiclnt.dll"
	        filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll")

Region:
	              id = 2857
	        start_va = 0x7ffda40c0000
	          end_va = 0x7ffda4123fff
	       monitored = 0
	     entry_point = 0x7ffda40d5ae0
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 2858
	        start_va = 0x7ffda70a0000
	          end_va = 0x7ffda70d0fff
	       monitored = 0
	     entry_point = 0x7ffda70a7d10
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2859
	        start_va = 0x7ffda7a40000
	          end_va = 0x7ffda7a68fff
	       monitored = 0
	     entry_point = 0x7ffda7a54530
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 2860
	        start_va = 0x7ffda7c00000
	          end_va = 0x7ffda7c0efff
	       monitored = 0
	     entry_point = 0x7ffda7c03210
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 2861
	        start_va = 0x7ffda7cd0000
	          end_va = 0x7ffda7d39fff
	       monitored = 0
	     entry_point = 0x7ffda7d06d50
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 2862
	        start_va = 0x7ffda7d40000
	          end_va = 0x7ffda7f27fff
	       monitored = 0
	     entry_point = 0x7ffda7d6ba70
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2863
	        start_va = 0x7ffda8a30000
	          end_va = 0x7ffda8adcfff
	       monitored = 0
	     entry_point = 0x7ffda8a481a0
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2864
	        start_va = 0x7ffda8ae0000
	          end_va = 0x7ffda8b86fff
	       monitored = 0
	     entry_point = 0x7ffda8aeb4d0
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2865
	        start_va = 0x7ffda8ba0000
	          end_va = 0x7ffda8cbbfff
	       monitored = 0
	     entry_point = 0x7ffda8be02b0
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2866
	        start_va = 0x7ffda8cc0000
	          end_va = 0x7ffda8d80fff
	       monitored = 0
	     entry_point = 0x7ffda8ce0da0
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2867
	        start_va = 0x7ffda8ea0000
	          end_va = 0x7ffda8ff5fff
	       monitored = 0
	     entry_point = 0x7ffda8eaa8d0
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2868
	        start_va = 0x7ffda9000000
	          end_va = 0x7ffda927cfff
	       monitored = 0
	     entry_point = 0x7ffda90d4970
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 2869
	        start_va = 0x7ffda9800000
	          end_va = 0x7ffda986afff
	       monitored = 0
	     entry_point = 0x7ffda98190c0
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2870
	        start_va = 0x7ffdaae30000
	          end_va = 0x7ffdaaeccfff
	       monitored = 0
	     entry_point = 0x7ffdaae378a0
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2871
	        start_va = 0x7ffdaaee0000
	          end_va = 0x7ffdaaf86fff
	       monitored = 0
	     entry_point = 0x7ffdaaef58d0
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2872
	        start_va = 0x7ffdab030000
	          end_va = 0x7ffdab08afff
	       monitored = 0
	     entry_point = 0x7ffdab0438b0
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2873
	        start_va = 0x7ffdab400000
	          end_va = 0x7ffdab585fff
	       monitored = 0
	     entry_point = 0x7ffdab44ffc0
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2874
	        start_va = 0x7ffdab590000
	          end_va = 0x7ffdab750fff
	       monitored = 0
	     entry_point = 0x0
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")


Thread:
	id = 111
	os_tid = 0x268


Thread:
	id = 112
	os_tid = 0x390


Thread:
	id = 113
	os_tid = 0x1c4


Thread:
	id = 114
	os_tid = 0x980


Thread:
	id = 115
	os_tid = 0xfe4


Thread:
	id = 116
	os_tid = 0xd60


Thread:
	id = 117
	os_tid = 0xfd0


Thread:
	id = 118
	os_tid = 0xaf0